Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e203232343237.roa
File: 33312e32322e3130362e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: ReocZOLV2OB+R5fpPrzChQNj7TQSxdQEXmQxKLmyKCc=
Subject key identifier: BF:86:54:6B:88:84:D7:41:C8:CD:7D:20:29:93:EC:2B:51:B8:CC:76
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 55F070808FFA25A1DE919C1426D7C533F4FFF4DE
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e203232343237.roa
Signing time: Mon 16 Dec 2024 14:56:59 +0000
ROA not before: Mon 16 Dec 2024 14:51:59 +0000
ROA not after: Mon 15 Dec 2025 14:56:59 +0000
asID: 22427
IP address blocks: 31.22.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f0:70:80:8f:fa:25:a1:de:91:9c:14:26:d7:c5:33:f4:ff:f4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 16 14:51:59 2024 GMT
Not After : Dec 15 14:56:59 2025 GMT
Subject: CN=BF86546B8884D741C8CD7D202993EC2B51B8CC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d0:00:5d:e9:0d:f6:15:02:2b:95:bc:7f:
94:5e:51:5f:74:fb:6f:f9:0c:01:c4:72:ba:56:d9:
71:1e:10:fa:32:31:1d:51:c8:57:b8:12:bb:b8:c4:
aa:e6:96:29:fa:1c:b5:50:a9:b3:8f:58:6a:a8:63:
77:54:d9:90:4c:68:2e:8a:98:fc:33:b4:e7:c9:09:
88:4e:8b:ab:96:d2:a7:bb:ef:94:0e:a3:ad:f6:b8:
92:d0:05:9e:de:72:3e:6a:e7:5b:0f:3e:48:6d:3a:
c9:bc:23:19:2b:43:17:a2:f7:e6:21:45:d0:e9:8f:
cd:f9:56:b7:2f:d0:12:e6:69:19:57:bb:2c:4b:7b:
bb:c6:5e:fa:3c:87:de:1e:be:1a:93:73:d6:3e:d2:
f1:70:1c:cf:56:73:06:35:11:87:6c:55:7c:19:ab:
88:52:5f:c2:91:cc:cc:e3:a0:52:95:7f:74:6e:ad:
5f:6a:ce:d9:c0:a9:1c:24:66:0a:9f:3c:67:4a:27:
a7:6f:cb:30:c2:af:3a:36:cd:ff:37:55:3a:40:a7:
9d:52:27:8d:56:1c:2d:f3:ae:2d:a1:5d:3e:5e:83:
86:ba:68:4e:f0:90:fc:7a:8c:ac:df:ac:a9:9e:12:
01:ea:4e:b3:ac:90:69:26:16:69:84:8a:a3:31:04:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:54:6B:88:84:D7:41:C8:CD:7D:20:29:93:EC:2B:51:B8:CC:76
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f5:7f:38:6f:40:d6:4d:c6:c9:bb:92:bc:1d:85:4b:d1:e2:
d4:c9:22:c2:52:be:bd:1b:44:b2:b8:db:7b:97:00:63:b5:ca:
41:d4:71:55:da:42:f5:99:6b:34:74:cf:92:0a:7b:b0:e0:a2:
2c:39:aa:d6:b0:5d:dd:7c:25:f3:58:8d:82:0d:41:4c:3f:85:
aa:a4:6d:16:fc:8a:92:fb:41:d3:79:24:17:a7:aa:1e:9f:61:
50:76:63:03:7a:b8:91:2b:13:90:cd:bb:65:2f:0d:27:b2:85:
56:d0:50:14:93:62:a1:4a:fd:45:2f:dd:b2:b6:37:67:b5:06:
fd:06:1a:c1:d5:12:f9:a5:e0:49:c0:b8:0f:eb:31:f8:97:ee:
6c:57:67:99:70:10:83:0c:51:09:ef:a1:f9:52:93:b2:78:7c:
00:69:a8:b9:c7:bc:a6:a7:a3:ac:ca:cc:1b:f2:64:a7:ed:2b:
84:ad:5c:84:ec:9b:4c:d1:12:72:45:82:87:0f:e0:44:b6:b5:
35:56:4e:7e:f0:f6:64:41:90:60:31:b1:10:e0:4f:7d:d9:c5:
1e:d1:97:6b:3a:38:ea:9f:89:ad:f4:dc:95:2c:7d:a4:11:38:
5c:d0:2d:64:5b:d6:a3:fd:1c:6a:54:25:2f:7a:50:56:17:c8:
ad:f7:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:45:54 2025 by rpki-client