Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3139322e302f31382d3138203d3e203432363839.roa
File: 33312e3232302e3139322e302f31382d3138203d3e203432363839.roa (raw, json)
Hash identifier: ILPDuCCHUqwwmeOAJmV+9h9tgmlv3NMRlq9yzK+wZqo=
Subject key identifier: 5E:1B:67:8F:0C:71:83:25:38:73:CC:E1:D6:33:ED:AC:EA:6D:53:74
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 4437B4D1DBCCDC0F7B10DE755E27C26FBA7AAD71
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3139322e302f31382d3138203d3e203432363839.roa
Signing time: Tue 19 Mar 2024 10:15:59 +0000
ROA not before: Tue 19 Mar 2024 10:10:59 +0000
ROA not after: Tue 18 Mar 2025 10:15:59 +0000
asID: 42689
IP address blocks: 31.220.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:37:b4:d1:db:cc:dc:0f:7b:10:de:75:5e:27:c2:6f:ba:7a:ad:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Mar 19 10:10:59 2024 GMT
Not After : Mar 18 10:15:59 2025 GMT
Subject: CN=5E1B678F0C7183253873CCE1D633EDACEA6D5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:b9:d6:86:d6:7f:b4:cf:94:db:db:61:a4:
d6:c0:10:62:0c:67:84:0a:64:fd:70:b8:a1:1a:69:
1a:9b:63:c5:c5:5d:78:40:dd:99:9e:a9:65:17:f9:
0b:79:10:13:a4:7d:8b:e2:15:a9:1d:71:38:bb:91:
ac:ae:ca:fd:fd:7a:f5:65:30:f9:34:44:b1:16:14:
08:c6:08:79:5e:54:a9:ea:d5:09:ff:f1:03:db:32:
71:94:b3:5e:17:94:17:4d:6c:c1:68:8a:7a:4e:e3:
96:a8:0e:23:67:67:34:7a:5c:4c:a8:52:51:f4:ae:
8d:ed:cb:a5:e8:9d:31:8b:36:18:c1:bd:28:3a:54:
ba:86:4e:8d:1d:26:d1:34:63:e4:15:80:0c:d2:60:
96:77:6e:41:04:75:7c:ed:82:f3:0d:be:69:3f:d1:
33:91:f5:72:00:fc:10:2b:50:cc:bb:7f:cb:dc:c5:
e5:c7:87:95:62:6f:73:e9:04:09:da:b3:0a:2a:11:
ca:7f:25:bc:eb:15:4e:37:0b:f8:13:59:69:ce:25:
98:76:69:d3:2f:f9:b1:81:23:4b:b7:08:b7:62:9b:
8b:76:76:6e:ed:c7:76:5a:67:f4:c8:cf:64:08:c9:
16:ce:d9:0a:7d:c7:3b:07:6f:c7:31:93:08:3f:9a:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:67:8F:0C:71:83:25:38:73:CC:E1:D6:33:ED:AC:EA:6D:53:74
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3139322e302f31382d3138203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
77:b1:1a:13:54:33:c1:b4:79:a1:6f:61:4d:84:36:26:5d:2e:
1d:c0:55:1a:cb:ab:94:b3:da:d8:22:4a:b1:65:55:03:02:38:
43:07:fb:fb:c8:ff:3d:62:34:b6:a8:20:db:0a:f1:54:76:82:
72:e6:e3:e5:b9:37:bf:45:6b:4d:23:7a:6f:b6:d5:43:8c:57:
d3:0c:a7:76:56:65:7a:3e:d9:29:4b:19:fc:97:c3:ea:25:82:
4a:71:58:79:a2:7b:4d:34:f0:27:76:65:f5:b5:06:03:b2:2a:
aa:77:29:a9:14:29:b1:48:5b:f8:11:01:87:e4:2b:b9:0f:3c:
c7:17:af:f5:6e:08:d6:cd:f0:10:03:56:bb:da:81:bd:f4:8d:
da:18:24:90:59:24:a0:a1:97:15:72:b6:96:98:a6:10:6f:f4:
88:23:95:ed:9d:88:44:a1:eb:19:18:41:3b:9f:1e:03:5e:76:
80:41:5d:4b:e5:b8:2a:1f:f8:98:fa:09:ee:8e:eb:94:dd:bb:
66:0a:03:81:ee:8c:77:0c:c0:e9:4e:51:41:79:e6:67:c9:a5:
40:15:8d:81:03:84:2d:f3:9a:3e:fa:a6:ec:38:fc:dd:22:64:
a5:dc:f8:f3:c8:07:53:cf:8b:5f:6f:04:fd:a2:c9:4e:bc:aa:
1a:24:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:24 2024 by rpki-client on console-fra.rpki-client.org