Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20383334.roa
File: 33312e32322e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 28fgzF3xY4J8ElfhLwrfG8BbLYo5ikcMZfSgM3Xxd7U=
Subject key identifier: 13:F7:05:CA:6E:B2:36:98:6A:CE:CA:E0:DC:81:DA:E2:0B:9B:0A:9C
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 5CB314168C88012302D93707A4C4F77FEC176F87
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20383334.roa
Signing time: Mon 16 Dec 2024 15:04:30 +0000
ROA not before: Mon 16 Dec 2024 14:59:30 +0000
ROA not after: Mon 15 Dec 2025 15:04:30 +0000
asID: 834
IP address blocks: 31.22.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 10:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b3:14:16:8c:88:01:23:02:d9:37:07:a4:c4:f7:7f:ec:17:6f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 16 14:59:30 2024 GMT
Not After : Dec 15 15:04:30 2025 GMT
Subject: CN=13F705CA6EB236986ACECAE0DC81DAE20B9B0A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:f5:9f:f4:99:44:2d:c1:4a:14:9a:40:fb:
48:96:55:a6:2e:42:45:98:60:1b:c6:36:0d:bd:6a:
e1:61:ef:24:dd:f2:93:6c:2a:ba:4f:0d:1c:d6:6e:
69:21:18:d0:a7:4e:6e:6c:f6:74:a3:12:f6:25:32:
e3:07:33:b8:7f:23:9c:a7:5a:46:fd:5f:9a:2d:c8:
ca:72:4b:f7:a0:cf:af:29:29:5e:96:80:00:08:37:
31:b1:a3:a6:18:86:cb:7e:5f:22:ea:3d:a2:a2:28:
33:f1:c2:74:90:59:0a:1a:53:d1:f8:48:5f:df:ca:
01:df:b1:d4:06:10:41:1e:7e:56:f2:60:8c:c8:c9:
e8:b3:9d:ca:77:83:41:12:8c:83:db:c9:2e:8d:33:
b1:21:06:d7:17:99:8b:59:d9:3a:7a:04:10:73:58:
8f:4b:80:e4:99:96:15:3f:43:e1:81:d4:bf:26:c3:
f0:fb:57:27:1f:8b:b2:48:fb:12:ba:40:67:33:61:
7d:97:85:0c:70:61:b3:34:42:d9:22:1d:c0:3f:33:
50:19:fd:e2:ab:c6:87:08:8c:72:e9:a4:5c:5f:27:
33:a2:24:9a:06:55:f3:c3:45:49:22:88:17:3a:48:
32:24:86:7b:25:6b:63:46:75:62:9e:c2:58:84:05:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:05:CA:6E:B2:36:98:6A:CE:CA:E0:DC:81:DA:E2:0B:9B:0A:9C
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:02:d0:6a:e2:00:95:75:73:fb:50:be:b8:de:d5:37:a8:cc:
23:4a:5e:64:4a:e5:aa:58:37:83:50:3d:df:38:88:bb:3e:a8:
c6:6b:38:78:1b:ce:1b:7d:fd:fc:ae:fa:0d:98:17:46:ec:41:
29:25:1e:dd:75:d1:e8:7b:59:4d:3d:9f:51:b3:60:be:c6:44:
73:47:17:8a:72:fe:97:25:e7:b8:1a:6e:2c:4d:9e:1d:78:e0:
a8:b4:87:d6:cb:bc:76:fe:1d:7b:43:45:f8:dc:cf:f8:72:df:
52:2e:08:08:29:6e:9d:a0:54:f6:09:0e:8c:cf:e6:d9:b0:e6:
41:47:fe:92:66:37:7a:fb:18:75:46:6c:e0:09:ef:7b:87:d9:
3c:63:92:9b:c1:4e:ab:16:eb:35:ca:88:42:fd:fb:0a:1f:84:
e1:1f:e4:8a:57:5b:f4:f6:c4:c4:75:fb:52:87:e5:83:cc:57:
26:05:19:4f:59:94:56:1c:9a:e2:c8:ef:fd:bd:fd:47:56:6e:
ed:a8:c8:d9:80:e4:c0:7a:b0:63:67:c8:b4:d5:38:af:f3:90:
68:20:dc:48:25:7e:c2:b3:81:25:c6:fc:85:02:1c:cb:f5:07:
71:b8:52:15:df:0a:17:0b:24:17:5a:55:6c:8e:9f:18:3d:20:
b8:82:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:44:47 2025 by rpki-client