Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Pr5UB8b7nxQfscoRqvYziepeQ2leTPMqJeSe0GKlzkU=
Subject key identifier: 89:B2:35:3B:98:00:70:AA:C5:6D:6C:E7:3E:10:91:CF:3F:57:7C:CA
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 47EB78C89F2D2719469F96AEAE8F3B9071F511EA
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
Signing time: Thu 29 Feb 2024 16:26:18 +0000
ROA not before: Thu 29 Feb 2024 16:21:18 +0000
ROA not after: Thu 27 Feb 2025 16:26:18 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 19:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:eb:78:c8:9f:2d:27:19:46:9f:96:ae:ae:8f:3b:90:71:f5:11:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 29 16:21:18 2024 GMT
Not After : Feb 27 16:26:18 2025 GMT
Subject: CN=89B2353B980070AAC56D6CE73E1091CF3F577CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:06:ae:f0:11:d8:e0:19:9d:ed:91:c1:02:
ad:46:68:b2:b5:01:6f:b4:18:9f:aa:4b:04:c7:49:
fb:49:12:e3:41:e9:b1:9e:ee:c2:36:a7:d5:9e:a9:
aa:2d:03:85:b9:17:3d:86:b1:25:80:b9:7d:8a:cb:
f6:1b:f4:d0:1d:3f:3f:af:4c:d5:9c:55:64:47:d5:
e9:ec:26:36:34:72:1c:a2:15:57:84:72:42:a7:31:
c0:3d:d6:3f:cc:0b:9a:11:1b:78:65:b6:10:95:76:
11:95:76:88:14:8c:de:ba:c4:7e:2b:98:51:71:53:
5a:29:1b:0e:a3:ad:75:02:02:f0:5b:45:a7:19:3f:
e4:27:44:49:a2:de:97:f0:cf:7e:5e:4d:b5:d8:6a:
cc:05:0d:b6:1d:fb:ff:40:3b:71:b2:23:91:16:7b:
e7:44:ca:1d:29:12:64:01:a0:55:29:d2:c5:3b:f0:
79:ec:f4:ec:e3:27:b3:5e:d5:7a:0b:2c:10:7f:ac:
bf:0b:bb:e5:cd:97:9f:35:8c:01:e9:93:ba:22:be:
50:02:60:8c:9b:23:42:e8:7d:99:79:03:e1:d1:9c:
2a:34:ca:84:a0:a3:da:33:3c:3b:7d:77:d6:4f:0d:
0e:09:30:ab:a4:28:68:0c:96:fa:24:94:0b:f0:1b:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:35:3B:98:00:70:AA:C5:6D:6C:E7:3E:10:91:CF:3F:57:7C:CA
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
59:eb:cc:63:80:f7:01:ed:a6:34:22:af:79:80:2a:b1:fa:8b:
a2:5e:2d:73:42:ea:d5:07:51:15:69:d1:bd:98:52:0c:16:28:
0c:52:59:e7:ef:6d:9a:82:85:77:35:e5:b3:2b:6b:a7:f7:8d:
33:3c:72:f1:28:82:27:5b:9e:ec:35:e4:e5:d3:4e:77:12:3b:
6d:dd:f6:06:37:9d:17:3d:71:bf:35:60:fd:ec:c3:eb:73:85:
42:ce:18:c6:fa:f3:4b:05:d8:ab:29:fa:c5:92:f9:d1:f9:3d:
8c:22:fc:20:dd:63:11:f5:9f:f4:c3:ef:c8:28:a4:97:90:e3:
9f:13:73:e1:60:55:14:64:32:1e:74:f6:07:15:56:19:d3:68:
26:e3:a6:4e:5a:19:e9:40:4a:36:8f:2d:32:89:00:df:c2:2c:
67:0a:08:ab:e1:ff:5e:75:86:7f:e5:b0:a9:46:29:ce:42:ef:
0d:10:00:ec:37:09:e4:e6:0b:6a:9b:2b:06:b7:29:cf:6d:50:
1b:fc:6d:4a:d5:b9:2f:e5:8e:96:5a:57:21:2a:6c:55:2a:47:
67:b9:1f:5d:f4:4a:97:d7:7f:cb:6e:b9:c9:cc:dd:ce:0c:34:
76:7e:d4:a1:f8:11:62:cd:78:37:0e:dc:ac:fd:96:63:db:c9:
6e:e2:e8:e3
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 29 21:44:02 2024 by rpki-client on console-ams.rpki-client.org