Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e203233343730.roa
File: 33312e362e31322e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: i8e/pMXIkyIq3FuDXArjiapdoO+OfqexVGyBg1ppyRU=
Subject key identifier: 03:3D:D0:6E:27:57:47:EC:84:7E:CC:FB:33:8F:33:A6:B3:23:7C:D2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4B51B48B84C028895F52BC71F3C24680EEAAB8CA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e203233343730.roa
Signing time: Sun 18 Feb 2024 09:32:04 +0000
ROA not before: Sun 18 Feb 2024 09:27:04 +0000
ROA not after: Sun 16 Feb 2025 09:32:04 +0000
asID: 23470
IP address blocks: 31.6.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:51:b4:8b:84:c0:28:89:5f:52:bc:71:f3:c2:46:80:ee:aa:b8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 18 09:27:04 2024 GMT
Not After : Feb 16 09:32:04 2025 GMT
Subject: CN=033DD06E275747EC847ECCFB338F33A6B3237CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:65:4b:75:ce:28:d6:5a:18:7a:ac:4d:88:
21:93:9b:f9:69:86:60:fc:a7:9c:92:76:9f:10:b9:
be:f0:e4:0d:de:0b:9d:ef:79:b1:ec:64:07:62:17:
66:8e:39:54:2c:ba:f5:a8:e8:da:47:7d:35:cf:26:
cc:c5:71:cd:06:3e:0d:6f:f2:c7:75:c3:34:62:6b:
6f:4a:1e:e6:21:72:80:4c:d8:ca:58:6c:c4:15:80:
93:39:12:31:ed:e4:10:e6:cf:9a:25:a8:59:84:5d:
15:dc:3a:43:7f:ad:ad:4d:2a:a6:b0:2e:43:e6:70:
a1:eb:ce:58:17:15:5f:70:8d:88:5a:13:2c:db:ed:
c0:4e:21:17:a5:6f:a2:d0:30:75:bd:7a:f0:4d:79:
1e:3f:5d:86:54:34:37:2b:ec:c1:a4:31:27:53:c5:
7b:d4:86:b8:95:f5:a8:85:31:e0:86:61:38:a5:e3:
e2:26:b3:bd:aa:3f:b9:8d:1e:ee:4e:fc:8c:66:07:
12:3d:e2:e9:8c:d2:e3:7e:3f:5c:ed:2b:d1:e0:5f:
fa:ab:92:4f:cf:ba:da:56:73:87:1b:83:fd:7c:68:
f7:76:9f:10:bb:8d:77:c2:51:1a:d6:15:03:2c:35:
7e:76:98:b6:0e:e5:35:0f:17:ac:77:d0:77:a1:59:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:D0:6E:27:57:47:EC:84:7E:CC:FB:33:8F:33:A6:B3:23:7C:D2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.12.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e5:c4:82:a9:40:2a:c0:60:57:cb:5a:37:25:ca:88:79:47:
f9:93:10:b9:60:b1:70:a7:13:8b:d5:88:9f:e7:46:26:83:1b:
75:15:2b:22:62:98:38:b5:d8:1a:2c:91:1f:87:89:b0:35:ac:
0b:12:c2:1b:2e:f4:5d:b0:d4:3d:ab:52:42:8d:eb:15:8e:1c:
32:cb:42:fb:52:e8:a5:aa:04:a0:6f:f1:ba:74:07:f0:19:8e:
9f:ca:49:9f:3b:f1:e2:31:b1:18:43:e9:42:ae:00:e7:bb:46:
0c:1b:33:ab:db:05:c3:0d:64:6c:2c:f1:e9:70:b2:9c:b3:3d:
c9:77:2a:20:2c:9b:1b:0e:e2:a4:b7:6b:20:16:81:90:49:7c:
17:2d:53:7a:90:fe:45:8b:79:30:1f:cb:7f:9a:c3:54:72:ff:
a3:2e:6a:12:5f:31:6d:4e:ed:f0:01:98:b5:71:e0:ac:6f:9d:
0a:a9:03:17:c7:18:bb:c5:d4:b5:06:77:90:5d:37:dc:3a:66:
96:cc:06:04:cd:92:2a:68:87:d4:2f:24:d0:7d:f0:03:19:32:
f8:c0:3a:65:6b:ac:c8:b0:b3:63:4c:3d:46:7d:e2:b9:c1:9c:
d2:59:14:b8:5b:7f:f9:c6:3d:88:fa:ed:b4:ab:7f:03:c1:ef:
1f:d6:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 12:34:50 2024 by rpki-client on console-fra.rpki-client.org