Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
File: 3231322e3130332e36332e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: jrC6AI/lHzPskqyYP6YTBFguE/0gPHhGVwnAIn9+nno=
Subject key identifier: 2E:4F:1D:DD:EC:C6:8D:A4:8C:C2:57:38:04:F5:82:B6:A4:5F:95:9A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 06AE53A2295E985AD8E088E87E7E80252FB19695
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
Signing time: Mon 27 Mar 2023 08:28:15 +0000
ROA not before: Mon 27 Mar 2023 08:23:15 +0000
ROA not after: Mon 25 Mar 2024 08:28:15 +0000
asID: 1239
IP address blocks: 212.103.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ae:53:a2:29:5e:98:5a:d8:e0:88:e8:7e:7e:80:25:2f:b1:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:15 2023 GMT
Not After : Mar 25 08:28:15 2024 GMT
Subject: CN=2E4F1DDDECC68DA48CC2573804F582B6A45F959A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:e9:d3:5d:d1:10:0e:1a:0f:a6:c2:36:40:
0b:68:e4:25:4c:56:6a:93:d8:10:11:a9:bd:53:f0:
1c:f9:0b:59:58:1a:fc:f1:d7:6b:0a:81:d9:4e:64:
1d:62:35:d5:ca:af:ef:a6:95:19:59:d0:7e:c9:af:
7c:7e:4a:70:4a:69:9b:5d:11:74:d7:14:bd:30:ac:
30:91:29:b3:ee:f0:02:41:22:d4:0c:fc:91:7a:3f:
a5:34:94:8f:e9:ef:04:7a:ea:38:4a:0c:8e:c9:05:
a7:e2:fe:63:01:24:03:c0:47:9a:08:b1:b2:ba:3b:
25:7e:f7:1b:75:5e:c6:4e:b4:20:e0:12:8e:6d:e2:
e3:81:bf:32:a0:8e:86:9a:eb:81:8a:3b:70:40:d5:
f7:65:51:41:d3:45:57:c4:cb:c5:7d:ed:d0:d5:f5:
f8:d3:78:d2:c2:25:5b:c1:d3:20:89:81:a6:60:42:
ad:78:11:88:6e:43:fd:24:ba:05:83:2c:24:c7:a4:
ab:2e:59:68:0b:ce:dc:bb:31:10:59:e4:3e:f7:aa:
6f:d2:f4:df:87:1a:cd:54:8b:3f:64:96:9d:0a:8d:
f1:e6:6c:ab:15:f0:ae:ce:9d:d8:89:25:ce:97:64:
88:61:06:2d:f3:85:b9:0a:a9:22:a9:79:ec:10:2e:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:1D:DD:EC:C6:8D:A4:8C:C2:57:38:04:F5:82:B6:A4:5F:95:9A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.63.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0d:80:2c:5a:a1:76:68:2f:69:67:85:c8:cc:87:47:77:8e:
ce:f5:41:dd:f7:6b:57:41:04:d6:dd:99:f0:09:b9:34:66:36:
10:18:e1:38:b6:de:fb:62:8a:91:7f:44:3d:8d:4a:95:ae:4f:
ab:09:b5:3a:64:95:98:99:0c:7b:be:21:29:e1:39:8b:9a:10:
5b:93:e7:c8:07:7a:11:3f:88:01:87:db:ca:df:a7:a9:d5:55:
d5:2b:f8:37:1f:be:76:2c:ec:44:11:c4:47:9a:9c:a6:94:10:
08:3b:56:be:c2:43:fe:37:f1:a7:0a:4d:d0:4b:ca:a0:02:2f:
0c:fd:da:1a:a4:35:13:ce:74:da:a3:eb:b3:16:e7:d5:ea:ed:
b7:2c:e0:ab:75:89:a1:cc:36:51:d3:0c:d7:7c:b9:8a:91:f1:
a9:e9:8d:78:41:93:5b:84:a7:61:cf:b4:d3:41:04:98:cb:e9:
ec:a2:f7:56:ac:2e:c3:40:18:a7:79:b4:2e:b0:30:a4:0b:26:
35:5a:a2:eb:03:41:ed:88:d6:4a:52:af:81:69:2e:5c:51:99:
08:b1:01:51:af:de:db:c2:d5:cc:8a:15:c6:76:8a:45:b2:48:
c2:18:ba:4e:9e:aa:e0:f0:91:95:ec:32:ad:fa:8f:99:06:58:
43:3e:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 09:40:08 2023 by rpki-client on console-ams.rpki-client.org