Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FK5bEinQzI0Q45EbwQjhCbHhGUxCanVlCOwToglPRPQ=
Subject key identifier: 7B:1A:1A:38:88:6D:C7:28:95:8B:31:C0:16:43:25:B8:E1:F5:04:E5
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 794C1BE56ECAE5D93EBE011D51C589EA783FF9B6
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Nov 2024 00:02:27 +0000
ROA not before: Tue 05 Nov 2024 23:57:27 +0000
ROA not after: Wed 05 Nov 2025 00:02:27 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 11:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4c:1b:e5:6e:ca:e5:d9:3e:be:01:1d:51:c5:89:ea:78:3f:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Nov 5 23:57:27 2024 GMT
Not After : Nov 5 00:02:27 2025 GMT
Subject: CN=7B1A1A38886DC728958B31C0164325B8E1F504E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:b8:6b:37:8b:31:a5:50:de:2b:68:c7:fc:
6b:6c:b6:bb:ae:fb:91:e9:9e:ec:81:eb:e1:5a:c7:
b3:87:0c:01:25:b1:fd:17:d5:2b:8d:e8:df:af:63:
1f:c2:38:ab:52:ad:de:d4:59:83:ec:a8:57:06:b3:
7c:7c:0f:69:11:1c:50:87:e6:05:2b:b8:16:b0:47:
5d:9c:08:be:18:99:64:e4:c4:10:5c:f5:d7:55:25:
62:ad:4d:8d:93:8f:4e:cb:00:95:a8:9c:e6:93:38:
f6:44:91:e2:59:dd:c6:ab:77:2d:79:da:ea:42:5a:
84:08:e6:7d:0d:3f:bf:0e:30:d3:4a:fd:36:bd:58:
e9:18:8c:a2:4c:06:f6:b7:03:28:c3:ee:6e:2e:dd:
6c:29:69:35:58:b2:51:50:dc:80:42:1d:87:0d:1d:
d2:89:9d:8c:2a:2d:af:8c:71:b1:15:c6:7f:74:98:
c6:83:43:b1:19:a3:18:86:5f:12:64:af:0a:ef:7b:
a3:f5:64:df:98:af:f2:7b:94:5d:2d:63:af:24:39:
86:e1:4d:5b:fc:3a:1f:1e:03:0e:15:40:bf:00:fd:
b9:d8:bc:39:46:5c:85:03:5a:81:5f:0a:09:b6:2b:
e2:43:f4:d2:dc:31:f7:c3:78:30:1f:42:03:e7:a8:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:1A:38:88:6D:C7:28:95:8B:31:C0:16:43:25:B8:E1:F5:04:E5
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:46:d3:aa:9e:ff:80:d9:79:db:25:1d:c1:b8:40:67:30:c3:
59:24:ee:58:7f:d2:88:11:8c:9e:43:fb:67:46:31:ac:de:de:
b4:c5:ba:7d:61:69:09:a5:27:3c:0a:16:4a:33:cd:6b:05:7c:
8d:84:c8:21:8b:57:ad:a5:10:d0:04:ee:be:42:98:3e:03:52:
b3:c9:53:2d:14:2e:51:64:1a:58:64:c4:68:cd:31:eb:4f:48:
c7:ba:f2:fb:0c:16:24:c4:29:c8:ec:de:19:97:07:08:77:ea:
9f:ce:ec:cf:38:de:82:2c:20:af:6d:bd:f0:18:97:1b:03:c2:
37:83:8b:98:8d:1b:6d:5d:33:e8:c8:ca:6d:6d:3e:a9:95:bc:
28:4b:bb:f4:8d:84:14:c3:6b:8c:a8:ce:d9:96:03:77:f0:76:
ca:8d:f0:94:d6:06:e5:dc:28:7f:38:07:a2:88:40:5a:4a:6c:
f6:c8:17:c5:99:7a:9e:f6:ed:75:6f:10:06:a7:dc:60:95:ee:
04:f1:2f:a8:ec:91:ca:2c:da:0f:ed:8c:3b:92:35:5c:a6:82:
1d:bc:41:d2:8f:dc:a4:96:52:b0:78:42:ca:02:9f:14:ee:eb:
19:4d:de:20:41:b7:b9:a6:c0:ef:37:d2:5b:9f:39:9b:d5:e6:
d3:38:1b:ae
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 7 15:01:51 2024 by rpki-client on console-fra.rpki-client.org