Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32332d3233203d3e203432363839.roa
File: 33312e3232302e3234362e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: iqn51yjdgVhx2JtCxpCKCbta4jmUlGg5TSKr88Lk1TU=
Subject key identifier: CA:7B:CB:E0:F0:EE:C0:C6:70:C7:45:49:B9:0E:0F:C7:D0:15:5D:28
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 669E6991E8574DDE24877E19164E8689E069720C
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32332d3233203d3e203432363839.roa
Signing time: Thu 08 Aug 2024 10:11:11 +0000
ROA not before: Thu 08 Aug 2024 10:06:11 +0000
ROA not after: Thu 07 Aug 2025 10:11:11 +0000
asID: 42689
IP address blocks: 31.220.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 11 Sep 2024 10:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9e:69:91:e8:57:4d:de:24:87:7e:19:16:4e:86:89:e0:69:72:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Aug 8 10:06:11 2024 GMT
Not After : Aug 7 10:11:11 2025 GMT
Subject: CN=CA7BCBE0F0EEC0C670C74549B90E0FC7D0155D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:c3:e1:55:17:7b:db:34:77:19:e7:89:38:
76:dc:58:58:8e:df:6f:7b:0f:3f:82:c2:fd:23:44:
f5:5b:3c:5b:27:aa:61:0d:37:34:e5:82:2a:3e:cc:
41:bf:ad:bf:70:fd:6b:f8:de:60:6a:31:6f:4f:03:
31:1d:5d:9e:5b:d1:43:dd:82:47:45:46:d1:a4:94:
b5:f6:6c:a3:f6:b4:4e:ac:39:41:73:7f:d1:52:11:
3e:e9:c4:62:ee:2c:e2:dc:e5:14:83:fb:60:a6:10:
97:6b:3d:c5:09:52:98:99:15:74:8c:8d:a5:47:f7:
6e:66:fe:11:4b:16:09:2a:51:06:23:b2:5a:83:50:
3c:c4:4a:8c:80:b4:ed:ae:1e:58:af:05:1f:b2:06:
d6:65:1c:d6:15:a1:78:32:a9:23:be:a4:0f:44:93:
12:e0:46:58:9b:17:02:ea:a7:65:d1:a8:c3:88:a3:
89:97:66:37:2e:0a:4a:d7:d3:cf:21:17:45:15:15:
f4:8d:3b:6b:17:6c:bf:cb:e6:bb:6e:d9:bc:74:46:
11:ab:af:0a:66:e4:47:48:e0:e5:2b:00:a1:c7:54:
83:5f:19:c6:5c:29:c4:4c:c3:4f:c5:a8:f3:84:5a:
9d:ec:a9:65:3d:6b:c2:43:aa:c6:0e:15:60:da:c1:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:CB:E0:F0:EE:C0:C6:70:C7:45:49:B9:0E:0F:C7:D0:15:5D:28
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.246.0/23
Signature Algorithm: sha256WithRSAEncryption
34:02:66:41:df:62:fc:1e:d4:93:97:0f:c2:be:62:a8:57:9b:
7c:7c:fb:f0:36:13:06:52:b7:9f:f4:d3:59:ec:34:17:41:be:
29:c5:b2:8e:20:75:f0:4f:42:a5:ea:72:83:ac:52:7c:3a:46:
a3:aa:c8:30:ec:de:cb:db:ff:6b:c2:2d:48:bc:7c:f2:10:ba:
70:11:11:31:7e:69:0d:f9:b4:9e:60:3e:e9:54:e4:d4:57:db:
0e:61:0b:c0:cc:aa:36:e9:58:84:13:96:05:ca:52:88:c2:37:
5a:53:de:07:76:15:ee:a9:b3:dc:00:dc:58:56:de:aa:6b:96:
d7:7f:20:ab:99:cb:30:c3:50:21:9e:5d:19:64:00:0f:8d:7a:
75:d3:cc:bd:e4:9a:21:5a:e5:4e:11:bf:30:ed:dd:13:3a:9e:
fe:3c:35:b6:6c:1f:31:eb:f4:9a:ba:9c:4b:75:88:07:92:bc:
68:90:01:67:8f:d2:66:86:43:36:31:12:e1:4a:c0:8a:b0:0d:
e5:92:f7:81:ff:b3:c6:4d:54:ed:34:fc:61:d0:bb:03:8c:80:
99:5e:f1:7e:7e:7f:2a:8b:43:62:43:8b:83:86:c8:26:8f:d1:
08:55:41:e0:0d:f5:c0:fd:2b:d1:e8:25:47:73:0e:53:6e:85:
cc:bf:86:e7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZp5pkehXTd4kh34ZFk6GieBpcgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNDA4MDgxMDA2MTFaFw0yNTA4MDcxMDExMTFaMDMxMTAvBgNV
BAMTKENBN0JDQkUwRjBFRUMwQzY3MEM3NDU0OUI5MEUwRkM3RDAxNTVEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z8PhVRd72zR3GeeJOHbcWFiO
3297Dz+Cwv0jRPVbPFsnqmENNzTlgio+zEG/rb9w/Wv43mBqMW9PAzEdXZ5b0UPd
gkdFRtGklLX2bKP2tE6sOUFzf9FSET7pxGLuLOLc5RSD+2CmEJdrPcUJUpiZFXSM
jaVH925m/hFLFgkqUQYjslqDUDzESoyAtO2uHlivBR+yBtZlHNYVoXgyqSO+pA9E
kxLgRlibFwLqp2XRqMOIo4mXZjcuCkrX088hF0UVFfSNO2sXbL/L5rtu2bx0RhGr
rwpm5EdI4OUrAKHHVINfGcZcKcRMw0/FqPOEWp3sqWU9a8JDqsYOFWDawYlpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUynvL4PDuwMZwx0VJuQ4Px9AVXSgwHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmU2ZGE1Yzct
NjcwYS00MWIxLTk2ZWItMzg5OTM4OGIyOTJjLzAvMzMzMTJlMzIzMjMwMmUzMjM0
MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDMyMzYzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
H9z2MA0GCSqGSIb3DQEBCwUAA4IBAQA0AmZB32L8HtSTlw/CvmKoV5t8fPvwNhMG
Uref9NNZ7DQXQb4pxbKOIHXwT0Kl6nKDrFJ8Okajqsgw7N7L2/9rwi1IvHzyELpw
ERExfmkN+bSeYD7pVOTUV9sOYQvAzKo26ViEE5YFylKIwjdaU94HdhXuqbPcANxY
Vt6qa5bXfyCrmcsww1Ahnl0ZZAAPjXp108y95JohWuVOEb8w7d0TOp7+PDW2bB8x
6/SaupxLdYgHkrxokAFnj9JmhkM2MRLhSsCKsA3lkveB/7PGTVTtNPxh0LsDjICZ
XvF+fn8qi0NiQ4uDhsgmj9EIVUHgDfXA/SvR6CVHcw5TboXMv4bn
-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:06 2024 by rpki-client on console-ams.rpki-client.org