Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: p3g4Wu3tqF70jJPZIeS6QvlMWv4nmgRp70RfxJ7w+io=
Subject key identifier: DB:81:B7:C3:D4:DD:31:AF:2A:57:0E:97:65:85:59:E4:02:34:D1:92
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1AABCE051247258681F8A612B99CF636BA5D85A9
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Jul 2023 12:00:05 +0000
ROA not before: Tue 04 Jul 2023 11:55:05 +0000
ROA not after: Tue 02 Jul 2024 12:00:05 +0000
asID: 834
IP address blocks: 213.139.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ab:ce:05:12:47:25:86:81:f8:a6:12:b9:9c:f6:36:ba:5d:85:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 4 11:55:05 2023 GMT
Not After : Jul 2 12:00:05 2024 GMT
Subject: CN=DB81B7C3D4DD31AF2A570E97658559E40234D192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:55:c6:3b:8a:1f:87:d1:9a:69:81:45:8e:
7d:26:0b:55:0f:4a:0c:64:81:a1:e5:60:ba:d2:f4:
6f:5c:8e:fc:28:ec:e3:35:4b:c2:32:0d:e9:1c:98:
61:52:32:96:86:51:24:cd:0a:ee:9e:ab:63:38:95:
50:4a:95:b4:bd:12:4f:c7:b6:a6:57:81:3a:cb:96:
17:14:07:24:35:38:eb:dd:45:dc:26:e1:c0:7b:7d:
aa:a9:36:1e:6d:f4:e1:00:cb:87:60:25:f8:8f:dc:
c7:00:3f:69:c0:73:4f:b9:0f:16:dd:5e:1f:fc:a8:
79:3d:d7:73:ef:13:d5:b1:8d:fe:4c:35:7a:45:b7:
a1:82:6f:20:30:fa:59:b1:06:0f:cb:82:5d:eb:e1:
38:de:67:af:62:46:5a:96:0b:00:7f:69:69:14:8c:
2d:b5:5c:bd:6e:5b:0e:18:ed:ac:e6:f2:ad:9e:bb:
f9:56:8a:a9:22:0c:74:1c:67:07:2a:d3:4c:68:b3:
36:8a:10:a3:a4:6f:d1:24:34:56:20:60:06:d9:7b:
20:fb:86:88:f8:00:d4:ac:45:22:d9:9d:58:29:b2:
a4:06:d9:e6:86:1f:28:29:60:5f:46:a1:94:e9:f5:
c8:fa:f8:b9:4b:de:d6:ac:2f:cb:22:f8:cf:f7:a7:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:B7:C3:D4:DD:31:AF:2A:57:0E:97:65:85:59:E4:02:34:D1:92
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.65.0/24
Signature Algorithm: sha256WithRSAEncryption
97:78:5a:d1:89:3a:12:89:63:1e:29:6a:64:ce:b4:f1:ce:d8:
a5:ea:b1:f5:7c:42:fe:4f:1b:d5:e3:a2:e4:a4:6f:e7:9b:1b:
c5:54:18:40:3a:80:13:f2:df:b6:fa:e9:94:72:2e:18:29:b7:
6c:77:19:88:53:cc:8a:df:51:17:60:4d:a2:18:2a:6f:da:f6:
9b:a6:3e:30:df:cc:41:cc:70:84:72:31:af:ce:ba:6a:e1:c6:
bb:e9:c7:7e:ef:45:35:4e:7d:51:f1:5b:db:75:40:21:08:ad:
9e:58:4e:a7:44:85:7c:19:5c:aa:6f:0c:41:0e:53:bc:a3:d4:
82:c2:01:73:ce:75:8a:75:0a:97:64:ad:21:87:ca:ef:c0:6c:
49:d5:4d:ea:b8:8d:6f:bc:a3:65:81:8f:fb:2b:1d:29:02:ad:
76:c1:95:b1:1f:94:4e:7a:ea:c1:4a:ce:1c:c6:64:29:18:62:
22:10:07:03:5e:cd:7a:4f:df:1c:79:31:81:b0:d1:c7:fd:9c:
9a:36:45:24:af:85:7d:9b:18:cb:7c:f8:46:fb:3f:38:3e:99:
fa:69:41:1e:03:4c:39:97:e2:2c:94:a4:fd:b4:2b:a1:3e:a3:
96:72:da:2a:1a:b1:6b:d0:85:09:d5:f3:b2:c8:81:35:7f:8b:
8e:99:b6:5b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGqvOBRJHJYaB+KYSuZz2NrpdhakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzA3MDQxMTU1MDVaFw0yNDA3MDIxMjAwMDVaMDMxMTAvBgNV
BAMTKERCODFCN0MzRDRERDMxQUYyQTU3MEU5NzY1ODU1OUU0MDIzNEQxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uVXGO4ofh9GaaYFFjn0mC1UP
SgxkgaHlYLrS9G9cjvwo7OM1S8IyDekcmGFSMpaGUSTNCu6eq2M4lVBKlbS9Ek/H
tqZXgTrLlhcUByQ1OOvdRdwm4cB7faqpNh5t9OEAy4dgJfiP3McAP2nAc0+5Dxbd
Xh/8qHk913PvE9Wxjf5MNXpFt6GCbyAw+lmxBg/Lgl3r4TjeZ69iRlqWCwB/aWkU
jC21XL1uWw4Y7azm8q2eu/lWiqkiDHQcZwcq00xoszaKEKOkb9EkNFYgYAbZeyD7
hoj4ANSsRSLZnVgpsqQG2eaGHygpYF9GoZTp9cj6+LlL3tasL8si+M/3p+XVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU24G3w9TdMa8qVw6XZYVZ5AI00ZIwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi0Ew
DQYJKoZIhvcNAQELBQADggEBAJd4WtGJOhKJYx4pamTOtPHO2KXqsfV8Qv5PG9Xj
ouSkb+ebG8VUGEA6gBPy37b66ZRyLhgpt2x3GYhTzIrfURdgTaIYKm/a9pumPjDf
zEHMcIRyMa/Oumrhxrvpx37vRTVOfVHxW9t1QCEIrZ5YTqdEhXwZXKpvDEEOU7yj
1ILCAXPOdYp1CpdkrSGHyu/AbEnVTeq4jW+8o2WBj/srHSkCrXbBlbEflE566sFK
zhzGZCkYYiIQBwNezXpP3xx5MYGw0cf9nJo2RSSvhX2bGMt8+Eb7Pzg+mfppQR4D
TDmX4iyUpP20K6E+o5Zy2ioasWvQhQnV87LIgTV/i46Ztls=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net