Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20323131393735.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier: W2ooaCGQbQRMiSdAY6/jd4PfiNqEWmaiCL75X8WnIdE=
Subject key identifier: 81:0E:EA:89:46:24:4E:E6:60:A3:9C:C5:F7:08:7F:31:6D:1B:ED:CA
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 56D7C21A5C11D919B97DB200434D4886798B6B8D
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20323131393735.roa
Signing time: Tue 05 Sep 2023 00:07:55 +0000
ROA not before: Tue 05 Sep 2023 00:02:55 +0000
ROA not after: Tue 03 Sep 2024 00:07:55 +0000
asID: 211975
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d7:c2:1a:5c:11:d9:19:b9:7d:b2:00:43:4d:48:86:79:8b:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 5 00:02:55 2023 GMT
Not After : Sep 3 00:07:55 2024 GMT
Subject: CN=810EEA8946244EE660A39CC5F7087F316D1BEDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:9d:e3:7d:68:11:ca:a0:21:f0:55:c8:0f:
5a:80:f4:b8:e7:a4:f5:c9:79:42:fc:0e:77:49:74:
f1:98:04:44:60:6e:f5:06:1c:56:b7:67:da:79:63:
f2:d9:28:c2:e1:0e:65:08:2e:3a:91:be:0e:b4:35:
e8:ae:3d:0c:b0:60:12:fb:97:55:54:11:aa:c8:60:
ed:46:e6:17:a8:62:e1:eb:6e:b6:6d:49:5e:f6:e5:
4b:d5:34:58:00:c6:e6:ba:c7:03:b4:b9:e5:6f:ec:
a5:ad:91:ca:1c:7d:78:2b:d5:d6:05:f5:e3:7b:6b:
59:55:0c:2e:5b:69:46:59:0f:45:60:c2:79:9b:68:
b1:e2:ad:59:fd:8e:59:b8:ce:46:d3:d3:5d:55:19:
ee:14:54:9b:ad:45:58:4a:1d:cc:56:66:44:bf:6f:
f3:a9:dc:9c:7b:d2:35:02:4a:fc:69:a1:6a:54:24:
16:ad:f8:d4:ed:69:70:6b:c0:34:45:2f:8d:db:0b:
d1:be:08:63:9c:6b:1b:cb:dd:aa:aa:18:28:92:06:
90:f7:89:e4:5a:db:a3:1f:cf:50:18:62:9c:47:f8:
ae:36:90:9c:b7:e6:36:f9:dd:82:26:f5:a2:88:b8:
25:04:28:80:f7:55:ee:60:d7:f4:e6:64:a2:00:47:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:EA:89:46:24:4E:E6:60:A3:9C:C5:F7:08:7F:31:6D:1B:ED:CA
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20323131393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d8:de:02:c5:2b:c3:c0:50:4c:b1:5a:9a:c9:82:06:a7:35:
3b:19:3b:d8:3e:33:2e:14:7c:d3:a7:6a:6e:70:85:a6:24:88:
a1:a5:ac:83:7a:8d:3e:b0:fd:f1:66:98:1c:98:6f:b7:b5:da:
4f:c0:ce:6f:64:77:1b:b0:c5:77:a6:c0:e9:02:f2:dc:e9:9c:
5b:1b:13:5f:ad:e9:62:d1:36:a0:c3:3e:4e:be:37:f6:fc:16:
85:32:9f:7e:c8:35:87:82:85:49:c3:57:ca:9b:71:0c:a9:81:
24:ec:03:df:57:fd:b8:19:ce:5d:f2:c9:11:c6:7d:d3:a8:fc:
5b:a2:b0:23:d5:43:eb:d9:d9:6f:d8:bb:72:b5:4c:f1:8f:ec:
b2:ac:64:c1:4c:97:96:d2:2d:fa:e4:e8:97:31:4b:02:3e:0d:
1d:0e:15:db:99:13:ad:29:74:11:23:96:2f:11:ca:e8:25:49:
3f:a1:f0:6b:0c:8f:4e:ab:55:df:46:85:ed:b9:c4:45:3f:d9:
0d:4f:f3:04:eb:ac:54:a1:91:17:8f:17:b2:5b:03:bb:03:2c:
90:f0:35:b1:22:5f:97:20:80:03:df:18:71:e7:aa:e1:71:2f:
ba:94:3e:ca:f8:b5:17:99:21:8b:7c:0d:b9:a4:40:44:8c:6b:
63:11:02:c5
-----BEGIN CERTIFICATE-----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Generated at Tue Dec 5 00:32:46 2023 by rpki-client on console-fra.rpki-client.org