Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203439353831.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e203439353831.roa (raw, json)
Hash identifier: waseL/iwzPetexkjj222JIsoN+nNAlwonYO8HFJ3Oew=
Subject key identifier: 28:E3:65:1C:3D:7F:FF:95:6A:F3:72:2E:E0:CD:48:40:81:B3:1A:7B
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5969A857FBFA1C88B6F1F0C752633D7489ED0421
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203439353831.roa
Signing time: Thu 29 Feb 2024 19:22:48 +0000
ROA not before: Thu 29 Feb 2024 19:17:48 +0000
ROA not after: Thu 27 Feb 2025 19:22:48 +0000
asID: 49581
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 13:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:a8:57:fb:fa:1c:88:b6:f1:f0:c7:52:63:3d:74:89:ed:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 29 19:17:48 2024 GMT
Not After : Feb 27 19:22:48 2025 GMT
Subject: CN=28E3651C3D7FFF956AF3722EE0CD484081B31A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:6a:00:c2:01:68:17:ea:40:30:9e:9c:78:
cd:9c:bd:a7:fa:96:5b:fa:0b:44:16:0a:42:d6:5c:
6a:47:1c:dc:11:aa:e1:62:82:f2:d9:66:37:b6:45:
f8:23:0c:d2:73:8b:24:8a:5a:98:06:bf:46:e5:e6:
cd:ba:c1:09:fa:3e:52:44:be:60:d8:2e:17:a8:f0:
d8:df:b5:11:bf:6d:f9:f3:4f:33:d1:9d:98:53:87:
9d:74:fc:18:11:be:2b:58:8a:85:ce:2e:67:74:68:
24:f5:3e:7b:5d:30:b9:25:e7:b1:f9:d6:40:d2:04:
e5:f6:68:eb:6e:e5:e6:97:ec:e7:59:8b:b9:cd:00:
8b:f6:2a:3f:94:4c:6c:45:64:3a:5d:27:27:c3:eb:
3f:2a:de:e9:4a:2a:0b:a7:fa:16:cf:42:4b:d4:e2:
80:a1:dc:8b:32:6b:01:d0:af:3c:09:31:80:00:62:
00:3b:ed:7e:dd:75:65:aa:89:93:4d:11:86:e3:6c:
a6:2e:d9:8b:de:fd:94:a9:72:e9:84:48:3b:66:e4:
2f:44:0d:f4:89:a0:ab:5c:9a:3e:9c:67:a1:62:8e:
2b:c3:43:99:2f:0a:e8:83:6a:17:5a:f8:2a:ae:31:
c1:d1:0c:50:48:96:3b:b8:cb:03:9a:d2:4e:6d:08:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:65:1C:3D:7F:FF:95:6A:F3:72:2E:E0:CD:48:40:81:B3:1A:7B
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e203439353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:66:80:fc:f3:c0:b3:98:d4:97:de:8c:8a:b4:45:39:91:39:
b7:f8:04:b9:f6:4b:97:92:91:9a:a0:5c:ef:cd:99:ea:32:50:
58:c4:a0:8a:1c:2c:cc:85:f3:53:4a:bd:94:4d:71:75:3c:d7:
9a:fa:53:b1:cf:96:18:ae:9f:cc:f1:68:50:c7:4e:79:df:0b:
2f:5d:25:d7:62:d0:e2:b0:70:9c:a2:86:a1:b9:48:e3:95:cb:
ae:9d:9d:5c:9e:0f:2b:bd:96:55:fe:ec:f0:5c:d3:e2:62:0a:
11:78:2f:3d:49:32:78:2b:e3:78:d5:82:1b:eb:20:d0:65:ec:
fc:82:18:9f:f4:1a:4a:cb:f6:0f:1b:b3:63:9e:58:3b:c6:3e:
29:c6:ab:0e:94:ee:3a:37:2d:c1:41:88:34:ee:96:61:be:93:
e4:f6:07:c7:9d:12:95:d0:ee:16:83:0e:3e:3c:6e:b3:45:52:
dd:67:88:cb:e8:0a:05:ae:a7:b2:c3:c3:9b:f1:59:af:d5:13:
5c:d5:65:c0:12:66:0c:be:9b:ee:b7:83:06:50:69:ac:5d:4c:
23:da:a9:e0:da:42:f8:36:37:9e:68:4a:70:65:71:31:71:31:
49:e7:31:2d:65:a7:39:93:5f:82:92:08:0d:91:28:3e:57:0c:
41:e9:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 17:22:44 2024 by rpki-client on console-ams.rpki-client.org