Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36302e302f32332d3234203d3e203432333636.roa
File: 3231322e3130332e36302e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: 6j1nMYllOjr1HVqolmSjUt4XetJSsqU+9RxCB+5TGdA=
Subject key identifier: 07:59:E8:10:BE:9A:51:82:D9:DA:86:F2:0B:B6:49:E0:9C:25:A4:3A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 0EE5744161B337E11B9DE3A0D4E1304D84CDF00E
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36302e302f32332d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:23:34 +0000
ROA not before: Mon 17 Apr 2023 11:18:34 +0000
ROA not after: Mon 15 Apr 2024 11:23:34 +0000
asID: 42366
IP address blocks: 212.103.60.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e5:74:41:61:b3:37:e1:1b:9d:e3:a0:d4:e1:30:4d:84:cd:f0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:18:34 2023 GMT
Not After : Apr 15 11:23:34 2024 GMT
Subject: CN=0759E810BE9A5182D9DA86F20BB649E09C25A43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:83:c6:0d:03:48:21:0d:9f:96:f3:d6:ce:
61:d7:ed:48:c2:46:eb:54:68:a8:90:9a:5e:f2:07:
ed:b4:d5:da:94:4f:3f:80:fb:0c:b7:c5:6f:0e:d7:
43:91:1a:fd:22:dd:67:f6:ce:45:86:13:20:85:87:
5b:9d:68:76:6a:d5:9c:71:67:62:44:eb:05:b1:80:
ea:ad:6f:dd:5c:41:4a:73:30:9e:06:ce:b8:b8:71:
8e:75:95:0c:df:91:84:c8:13:2a:51:9b:ff:90:51:
19:8e:bc:50:9b:74:30:52:31:4a:10:77:e2:3a:50:
a6:20:f9:f6:03:84:8f:7d:3a:37:b1:5b:c8:c0:b9:
6a:92:00:03:44:cc:bc:d0:41:06:ca:ba:50:17:1c:
b5:8a:1c:20:da:fa:d4:32:09:19:81:26:39:a4:49:
29:69:c1:20:e3:57:84:ed:d7:9c:28:42:bb:9a:b4:
84:b1:7e:4d:11:59:d0:f4:bf:cb:ce:e5:b9:eb:2c:
23:1e:0f:31:93:c0:25:e5:4e:11:ee:f9:2d:12:63:
75:f2:d6:7e:3e:de:81:e7:89:77:86:ef:64:1f:a5:
5e:ce:fe:66:1c:fc:b7:bc:cc:48:98:c3:df:a0:f4:
f1:de:02:cf:a5:5c:c2:1b:17:61:97:44:2c:13:2d:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:E8:10:BE:9A:51:82:D9:DA:86:F2:0B:B6:49:E0:9C:25:A4:3A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36302e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.60.0/23
Signature Algorithm: sha256WithRSAEncryption
83:3c:d8:49:59:fd:03:61:54:cb:35:8f:8e:31:5a:a6:2a:65:
37:9e:1e:4e:81:41:2a:9f:90:0a:e0:d9:20:60:c2:e9:70:77:
c5:e7:f1:ee:b5:3a:05:9d:ee:74:c9:c9:e1:98:33:e7:6b:3c:
17:af:65:d0:3a:0b:39:c2:cf:a7:d8:71:59:9a:1a:c9:63:dd:
11:7a:17:99:72:4f:31:b5:8a:2b:96:30:d5:a3:7a:8e:03:9f:
80:0c:58:b2:78:bd:ed:4a:71:92:7a:89:48:cc:05:2e:2a:71:
21:f3:cb:6f:2b:b1:94:9e:87:c1:ba:23:af:8a:84:91:08:e8:
2f:b5:c8:64:70:27:00:52:15:ce:80:6a:2a:0c:d9:65:44:4d:
36:d7:ff:32:27:86:e5:c6:9a:ce:67:98:a5:36:35:5f:1a:8b:
a3:90:28:15:8e:3e:13:f9:e6:1d:a2:e9:ee:b2:a5:0b:3e:5b:
78:76:2d:6e:43:b3:59:c9:61:be:e4:37:99:a5:ea:6d:f4:b5:
f1:19:07:88:ad:d8:21:82:c3:43:2a:2c:c9:f7:0d:33:ac:f0:
96:0b:91:b2:2a:c8:fc:cb:ab:c8:74:73:8e:b0:90:35:a9:d7:
24:26:0f:0c:99:e1:24:86:43:5d:d7:75:7f:1f:d5:04:e8:79:
5c:a1:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org