Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nPgJEwkIXYJSxGrtmPQOA+RM+D8S5pES4ZXDp1TFWBU=
Subject key identifier: 0F:0B:A4:D5:8C:E5:4A:F7:E3:8A:56:F1:53:6E:9B:A2:9D:64:A7:F6
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 152204DCB0A0D172357FE5187887428827804CFE
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
Signing time: Thu 09 Nov 2023 00:00:07 +0000
ROA not before: Wed 08 Nov 2023 23:55:07 +0000
ROA not after: Thu 07 Nov 2024 00:00:07 +0000
asID: 834
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:22:04:dc:b0:a0:d1:72:35:7f:e5:18:78:87:42:88:27:80:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 8 23:55:07 2023 GMT
Not After : Nov 7 00:00:07 2024 GMT
Subject: CN=0F0BA4D58CE54AF7E38A56F1536E9BA29D64A7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:9d:2a:56:4d:22:18:02:ea:b4:b5:a3:c8:
cb:97:1f:7e:90:db:64:42:7b:c0:c4:af:78:e7:25:
43:ca:c0:32:27:1b:98:c5:99:64:62:30:51:cf:00:
4a:0c:80:ce:12:be:6e:9a:ee:c1:d9:ad:07:01:b9:
6a:ba:d3:c5:f8:bd:d8:0d:f6:ff:c4:a6:9b:c5:a7:
f2:ec:e1:4e:2f:7e:f3:30:26:f0:4c:a5:f5:f9:7a:
a7:e8:4f:60:23:c0:6a:c5:6c:c4:ca:95:c4:1c:57:
7a:99:d5:17:24:a2:7d:9a:70:36:f6:c5:d1:6d:d9:
ac:b4:5f:92:0a:f3:e1:80:de:d3:1e:e4:ab:28:be:
bd:1b:ab:0d:aa:ef:f2:ff:31:41:a1:3d:33:30:33:
45:d7:0a:24:56:e5:63:07:f7:09:66:fa:b7:e0:06:
1d:f2:97:19:67:1a:83:f9:5b:d8:40:a8:31:3f:75:
80:46:00:35:9b:ec:f2:73:47:04:4e:78:cb:12:e7:
e9:99:53:2b:f0:87:ac:7e:91:b3:02:83:bb:83:43:
b6:da:37:96:15:93:4a:1e:9d:8e:a7:01:ec:83:14:
c8:f0:15:35:5f:e2:d5:30:22:bc:9a:8d:ea:bc:ff:
d6:85:90:57:16:8d:38:f3:5d:67:98:c3:41:46:ff:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:A4:D5:8C:E5:4A:F7:E3:8A:56:F1:53:6E:9B:A2:9D:64:A7:F6
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0e:fd:a5:be:0e:06:bd:38:c7:72:f4:d2:eb:e0:b6:7b:33:
0f:be:6e:69:26:83:2a:ca:91:1e:5f:62:45:77:6b:cd:6a:7d:
4d:5a:62:46:4f:57:68:70:cd:df:1a:57:51:3f:72:76:1c:5f:
b0:e3:a0:67:4a:c8:b7:b0:bd:a1:43:14:93:36:7a:7f:a9:16:
14:8c:49:c0:5b:63:13:60:7a:8e:53:83:a7:e4:71:73:a9:20:
f6:71:5e:f6:db:73:4d:b1:a9:01:a3:fa:10:0c:6c:99:4d:d1:
46:13:75:2f:9a:be:be:60:17:bf:56:55:6f:ea:8d:60:d3:ad:
c5:3c:bb:c4:1d:1c:c2:72:90:bc:69:1b:d5:a9:a1:be:c7:d8:
50:cb:eb:0e:14:68:fb:1b:0a:9d:73:4a:dc:5c:7b:ad:b8:3d:
98:0b:c3:b3:c2:8c:4e:5d:22:7c:81:6d:66:8b:85:3c:8d:b4:
2d:30:c6:57:8e:34:a6:37:f1:a7:98:81:cc:29:e0:8c:e5:27:
5e:c9:0f:c8:fb:44:16:7c:30:1d:c3:1d:b9:ba:d4:74:dd:40:
62:ed:49:f5:24:8c:c3:e2:e0:b8:0a:f7:5e:a5:0f:96:02:90:
0e:91:a8:ed:96:6c:29:6b:3d:46:73:1c:81:ac:92:c0:71:ad:
33:22:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net