Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3UulWxHsAXJVYqwobWOGWbDHuTau6vI2ttuGeu7JBbo=
Subject key identifier: 43:C4:D3:F2:27:AB:2D:ED:EA:34:7B:B7:4A:45:98:1D:9C:F3:25:EF
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3E3476A734F09ED7F8FA2D3422AB00EA694B0B74
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
Signing time: Wed 27 Dec 2023 13:05:08 +0000
ROA not before: Wed 27 Dec 2023 13:00:08 +0000
ROA not after: Wed 25 Dec 2024 13:05:08 +0000
asID: 834
IP address blocks: 213.139.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:34:76:a7:34:f0:9e:d7:f8:fa:2d:34:22:ab:00:ea:69:4b:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 27 13:00:08 2023 GMT
Not After : Dec 25 13:05:08 2024 GMT
Subject: CN=43C4D3F227AB2DEDEA347BB74A45981D9CF325EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:c5:88:85:b0:7f:9c:d6:25:60:fc:70:27:
59:90:8d:22:9f:5c:b7:50:38:09:5e:60:35:f4:c9:
b3:47:2e:ec:8a:9f:f2:0e:92:5d:42:51:0e:94:d2:
12:7d:de:8e:62:d0:21:b5:e9:e9:da:9e:ce:40:3c:
44:ee:a3:97:31:dc:30:00:ed:73:b4:f9:99:0e:d8:
78:f1:36:ad:cd:e4:25:42:6a:a3:fe:f4:97:75:6e:
e3:8d:7a:6a:bf:bb:5e:99:ba:c0:0e:38:32:3f:ef:
d5:55:04:96:20:6f:0e:c1:c7:69:29:1f:82:c1:82:
ae:43:e5:60:31:e2:d0:21:d4:0b:61:fd:41:f2:4a:
2b:88:06:d9:b0:ec:dc:49:89:46:ca:7f:ce:d7:f1:
fc:39:6b:d7:eb:76:5e:0a:94:3e:8e:e5:80:76:5d:
51:ab:a0:15:67:96:70:11:af:51:a6:02:3e:40:85:
8b:84:50:3a:d8:e3:25:48:37:85:e8:06:05:3b:65:
6c:e6:97:75:3d:30:ab:e9:21:d0:ad:e6:52:30:31:
22:8e:4b:b0:73:5a:2d:1c:c1:33:96:50:5d:49:ef:
45:61:59:56:e9:d8:c1:48:02:56:6c:b8:62:60:0b:
5f:f7:2c:17:79:fc:f0:3e:e5:38:5e:64:9b:cf:df:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:D3:F2:27:AB:2D:ED:EA:34:7B:B7:4A:45:98:1D:9C:F3:25:EF
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.72.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e6:a8:29:7d:59:80:8c:62:a3:89:65:8b:07:7e:cc:47:3e:
c3:0c:22:37:34:f6:8b:19:6a:a6:3b:b1:61:b1:9c:7c:84:a6:
c1:31:38:09:08:fb:13:b2:40:80:14:66:ce:c9:26:c3:7b:f7:
03:7e:91:14:7f:f5:43:8e:c9:d8:43:11:d3:8c:29:4d:78:4a:
8f:a7:14:b0:82:5c:83:7f:8c:4d:ad:51:3d:d0:3b:98:74:de:
49:9c:a1:77:4b:bd:31:ac:5c:a6:97:fb:37:d2:72:a8:67:5b:
3e:21:65:a0:d4:93:8c:36:ca:48:7d:4a:42:4a:1f:4c:97:d4:
24:46:0f:df:1a:3c:80:fc:c3:5d:1d:ac:75:38:9c:60:61:7c:
41:fa:87:b4:7c:6b:83:9c:1e:c3:9b:39:f1:b5:30:9d:d8:3a:
6e:96:4b:d4:7c:00:f4:7a:f0:ea:f1:c9:a3:3b:82:47:94:8c:
47:bd:39:66:5a:9e:2c:6f:92:54:a7:4d:56:bf:3e:1f:1c:e0:
20:b8:a3:f8:18:65:e4:f0:d3:9a:08:6f:3f:b0:7d:ad:5a:f4:
b4:d4:7d:55:a6:5b:0b:8d:61:09:87:6a:20:ae:9e:b5:dc:3c:
6a:f8:d5:a6:e9:8b:93:8d:5e:e6:3a:ee:0d:18:8a:00:75:1b:
71:2b:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:54 2024 by rpki-client on console.sobornost.net