Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa
File: 3231322e3130332e36332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 0cajKqaBOJvl84CAitw29hb2ZeBsv1RrsuOLz9A7QIQ=
Subject key identifier: 8C:E9:B2:34:98:7C:CE:4C:09:FB:B5:C3:04:AE:11:81:A8:F3:2B:EE
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3F66F30169E1BD4A35656AAB376C5BB0FF963299
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:03 +0000
ROA not before: Mon 27 Mar 2023 08:23:03 +0000
ROA not after: Mon 25 Mar 2024 08:28:03 +0000
asID: 61317
IP address blocks: 212.103.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:66:f3:01:69:e1:bd:4a:35:65:6a:ab:37:6c:5b:b0:ff:96:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:03 2023 GMT
Not After : Mar 25 08:28:03 2024 GMT
Subject: CN=8CE9B234987CCE4C09FBB5C304AE1181A8F32BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:a4:55:74:35:85:ea:00:26:7f:4d:35:ef:
2e:47:43:99:78:ae:fe:4f:5a:92:cf:c8:10:07:6d:
79:1e:b6:e0:3c:06:92:3a:b1:a1:51:fc:1d:72:7e:
9e:db:00:8e:09:52:b3:eb:c7:f4:b2:02:c4:e3:a3:
a0:e4:13:2a:12:09:f3:6b:ab:3b:42:48:33:5a:6e:
b4:9d:24:f1:ae:a9:b6:09:2f:a6:14:7c:38:1b:55:
19:fa:16:80:dc:d4:e3:93:f7:64:a0:f7:19:49:c1:
fa:d4:e5:91:71:31:ec:93:cc:7c:b7:f3:c3:4a:f2:
e3:98:fa:39:38:cc:6b:4a:d9:a4:92:d0:1b:96:56:
9a:1f:94:ef:4d:a5:61:b5:88:bb:5a:13:e1:ba:82:
a8:6b:b3:2c:45:a0:70:82:87:ad:39:3e:59:c0:3c:
f4:f3:34:23:61:12:25:46:9d:37:a7:c4:7a:4c:bd:
c6:8a:0b:36:ae:5b:9b:9e:4a:ac:09:2c:b1:4a:20:
c1:e3:ea:9a:21:58:cc:b3:21:2a:3d:54:6d:5c:8c:
c8:33:67:37:dc:ed:d3:95:6f:6f:35:14:c7:bf:74:
d8:0e:7b:30:ce:a8:f7:f9:86:46:b3:48:f6:07:bc:
ae:bc:a6:bc:d6:37:4f:df:09:87:24:77:e7:0c:23:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:B2:34:98:7C:CE:4C:09:FB:B5:C3:04:AE:11:81:A8:F3:2B:EE
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b6:b8:ce:77:60:c2:bf:d9:70:84:85:21:f4:30:14:fe:4b:
40:e4:50:21:20:ac:f5:10:c7:e9:4a:54:79:10:97:28:23:ec:
15:37:81:80:4a:d4:bf:74:8e:67:de:12:c9:38:34:59:9c:98:
62:75:d9:9a:60:dc:5d:9a:7c:36:bd:a2:94:5b:60:28:5d:a8:
24:47:1e:2b:2c:c9:50:72:93:fe:e8:b5:e5:d9:fd:4c:82:0c:
f5:35:6b:74:2b:b0:de:f9:1b:bc:b6:59:d3:8e:d7:8b:79:da:
56:d5:0f:bc:82:c6:a7:42:a3:2a:04:85:b7:a6:f2:25:ba:4c:
e4:5d:2d:9d:9d:96:e9:e3:71:c5:c7:ad:20:50:5c:91:b9:dc:
58:40:14:67:29:1f:2d:40:be:ca:d7:84:ed:dd:3f:90:2a:1c:
5f:5f:a5:07:dc:9a:87:e3:ac:2e:ec:54:09:2c:8e:4c:53:55:
0f:e1:8f:5e:ef:7f:ef:25:64:a2:24:ed:1d:b8:f6:82:f3:96:
6b:49:78:08:6f:a3:9f:8b:68:c5:d7:41:93:a0:05:ae:c6:7c:
7b:10:5b:07:6f:6d:f8:3f:5f:eb:6c:21:88:90:bd:0d:29:3d:
16:3d:f5:65:f2:ed:43:37:be:75:85:05:f7:00:d0:ec:51:69:
cd:8f:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 09:40:08 2023 by rpki-client on console-ams.rpki-client.org