Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203136353839.roa
File: 33312e362e312e302f32342d3234203d3e203136353839.roa (raw, json)
Hash identifier: pe2VtFudCWPfYXAV0I1zl+FB+bUqx5vXtuMiC0kF7CE=
Subject key identifier: 03:95:18:3B:5D:4B:C5:9A:BD:FC:90:83:00:7A:C6:13:E6:0D:DF:63
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5D28386375876134872BFF5B5862B060FC3E9C30
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203136353839.roa
Signing time: Mon 20 Nov 2023 11:54:40 +0000
ROA not before: Mon 20 Nov 2023 11:49:40 +0000
ROA not after: Mon 18 Nov 2024 11:54:40 +0000
asID: 16589
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:38:63:75:87:61:34:87:2b:ff:5b:58:62:b0:60:fc:3e:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 20 11:49:40 2023 GMT
Not After : Nov 18 11:54:40 2024 GMT
Subject: CN=0395183B5D4BC59ABDFC9083007AC613E60DDF63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:f4:df:02:8f:d7:1f:04:2f:af:55:11:0c:
da:af:8c:3d:2f:1a:99:f5:bd:f0:61:ab:c2:a5:5b:
a2:b7:98:69:81:cd:05:72:c6:e8:94:30:7c:5d:63:
75:c0:c2:9a:4e:f1:a9:64:bd:49:2f:81:31:41:d0:
8d:c6:a3:d4:bd:ba:fa:70:82:09:29:cc:50:c7:4d:
e0:77:69:b5:6c:1a:30:61:63:35:90:12:62:51:a5:
84:0b:66:88:79:0e:99:c1:35:ba:78:b5:7d:09:14:
e7:4a:9e:c9:ed:30:c1:b0:35:66:16:ba:f6:08:62:
9c:da:e7:3e:b5:22:00:49:a4:3d:30:ad:37:e8:22:
60:86:3a:21:db:f6:b9:06:6b:01:f1:0d:29:85:c5:
61:8f:e0:a1:31:a2:3d:50:a0:d8:17:1f:c1:33:75:
ec:5c:9e:a9:58:46:cd:43:0d:ac:37:84:82:c1:6c:
b2:c5:95:92:b8:80:42:01:c6:f4:52:86:0d:9e:54:
d4:9b:a1:9e:d5:62:b4:0a:4a:67:de:2c:f1:67:86:
64:61:74:9a:5d:72:e9:4d:47:b3:84:3a:9a:e4:84:
ae:30:30:ca:50:b2:48:db:d2:41:b2:40:16:e3:8c:
77:2a:a8:bb:8d:ae:42:57:d1:7b:f8:c0:9f:8f:21:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:18:3B:5D:4B:C5:9A:BD:FC:90:83:00:7A:C6:13:E6:0D:DF:63
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e203136353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
00:44:c2:fc:1e:66:6a:b1:e8:df:8a:03:cb:26:a0:33:74:ef:
78:c0:a5:6d:ca:4c:cf:d6:cb:d6:49:de:2e:17:ff:70:1e:cd:
6d:5d:e4:7f:ba:05:ba:e2:6b:6c:53:e8:bb:6b:62:c8:44:6b:
fa:39:85:64:f3:b4:b8:eb:60:25:5c:1d:4b:7e:fd:56:58:8f:
ad:ba:ca:04:23:50:d2:65:37:64:e3:79:4d:e9:40:7e:46:41:
d2:be:f6:95:59:f8:ec:ef:a3:14:39:5d:0a:06:30:7d:bc:51:
94:48:e4:24:17:31:f5:63:6c:37:11:ce:85:28:2d:2d:08:28:
63:a4:74:62:bb:f5:e4:f6:18:b1:ed:0d:e8:96:09:6f:b9:15:
f1:f8:dd:a6:21:93:27:02:19:61:86:3f:f6:ed:c9:43:4d:7f:
db:00:e1:95:f6:22:0e:1b:98:19:46:97:0a:0e:7d:8a:6d:d2:
2a:f5:e8:73:5d:36:90:1a:94:cf:91:49:16:dd:ef:04:60:cd:
50:5a:c2:47:c8:82:1b:49:6c:f8:74:97:6a:fd:ce:e3:bf:99:
bb:0d:a5:b0:a0:9a:8b:5b:8c:98:29:27:c8:08:08:6e:24:12:
51:e4:d7:20:a1:ea:7d:78:25:c2:ee:13:2e:34:45:ab:46:7b:
ec:da:fb:76
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 3 11:43:52 2023 by rpki-client on console-fra.rpki-client.org