Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa (raw, json)
Hash identifier: hZpvQrVCWHwyq+4+QB/AJONl1WGLrWTL0Dof731NJd8=
Subject key identifier: 0F:2D:93:13:EA:BE:93:14:0B:7C:5E:68:A0:C7:01:2A:52:E7:A8:77
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 43A795984F2F286CDC11AA2882281D997F0D3E15
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
Signing time: Fri 02 Jun 2023 06:53:46 +0000
ROA not before: Fri 02 Jun 2023 06:48:46 +0000
ROA not after: Fri 31 May 2024 06:53:46 +0000
asID: 44547
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a7:95:98:4f:2f:28:6c:dc:11:aa:28:82:28:1d:99:7f:0d:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 2 06:48:46 2023 GMT
Not After : May 31 06:53:46 2024 GMT
Subject: CN=0F2D9313EABE93140B7C5E68A0C7012A52E7A877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:b3:52:76:e1:4d:30:bf:45:02:97:0b:2c:
57:16:e1:39:ca:79:78:2d:9d:6c:3f:27:e8:81:ba:
88:ca:33:f8:9f:ea:8f:29:67:e8:a2:ca:d8:e1:48:
f0:12:3d:b8:a8:52:e4:b3:37:cc:ff:85:bb:26:e4:
bd:8c:e5:98:fc:12:76:f5:30:31:52:55:b5:c5:b4:
24:c8:14:41:1b:07:8c:c7:84:ef:eb:30:70:0e:fc:
cf:e5:32:c9:cc:b1:4d:d6:a9:9e:e1:79:26:53:f0:
a4:9f:8e:78:37:1e:55:68:eb:44:ec:22:62:8f:33:
11:30:d0:4a:e7:aa:da:a3:e8:df:aa:20:11:5f:62:
63:be:26:e1:e6:91:e8:dd:a4:88:49:06:b0:eb:bd:
dd:a9:6d:5e:f6:7f:ce:c5:22:50:b7:9e:12:17:5e:
1c:13:a7:a7:94:34:b4:70:44:2e:d6:b8:53:61:bc:
ce:4c:1e:f6:30:25:69:e8:66:db:91:3a:9f:40:27:
a4:c4:49:5d:a4:da:f6:59:d0:db:c0:d7:ee:a5:76:
e5:f9:cd:82:c2:dc:4e:bd:16:a2:ee:13:3c:9d:70:
8f:8f:52:26:ed:4a:c9:03:81:84:94:82:46:a3:a1:
67:33:fb:07:ab:7c:54:2f:b3:fe:1a:48:bb:bc:23:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:93:13:EA:BE:93:14:0B:7C:5E:68:A0:C7:01:2A:52:E7:A8:77
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ae:6a:21:74:e1:fa:21:2f:68:11:8b:2e:99:75:48:c7:d8:
29:72:e0:f2:80:bb:9b:db:ff:16:b5:4a:b8:9e:60:49:e5:4a:
25:8f:cf:98:5a:1f:bc:28:71:47:68:ae:03:e4:77:eb:b2:11:
45:e3:9c:21:a2:41:b8:bd:a6:0e:c1:eb:04:e6:29:b9:c5:72:
f6:13:d6:f6:c5:b0:dc:cf:4e:16:f1:4f:05:48:e9:24:54:a6:
6f:28:cc:3c:01:f4:9c:ed:cd:b9:1c:fd:c3:60:b8:fe:14:16:
9e:53:71:40:70:cf:92:6d:cf:5a:6e:4e:b0:52:52:0e:c8:db:
2b:4c:12:dc:40:6c:01:2e:3b:75:e7:50:71:1e:c4:07:ed:4b:
e8:78:6c:97:cf:87:9c:c7:02:80:b6:9a:6f:21:a9:8b:1f:e7:
b7:31:de:9d:af:d2:2c:f3:df:87:a6:69:e2:2e:e9:00:66:bb:
49:6a:a4:76:c4:65:fe:1f:de:a8:a8:68:81:45:16:f6:2d:c0:
b4:e4:cc:01:52:e7:50:d7:5f:4d:51:db:69:19:19:0b:53:96:
e1:30:ba:ac:10:aa:8f:1d:de:c4:ac:41:5c:9b:c3:b6:eb:de:
32:cb:5c:8a:1c:5f:c5:b4:ee:ea:15:35:02:36:14:d6:0b:f7:
f7:3b:e4:81
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 12:37:27 2023 by rpki-client on console-ams.rpki-client.org