Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323031363730.roa
File: 33312e362e31332e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier: bEZCByTIOcJRGpit6YixMX6Wf21KcrcaEF0OnGLeOqs=
Subject key identifier: 61:5E:75:E2:54:C3:5D:85:47:13:3F:32:4C:BC:70:9F:FD:DA:92:E2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 213A47A127DF8A4FDCF35B6ABC07C28D3DAB34C5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323031363730.roa
Signing time: Wed 10 Apr 2024 14:22:17 +0000
ROA not before: Wed 10 Apr 2024 14:17:17 +0000
ROA not after: Wed 09 Apr 2025 14:22:17 +0000
asID: 201670
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 12:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3a:47:a1:27:df:8a:4f:dc:f3:5b:6a:bc:07:c2:8d:3d:ab:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 10 14:17:17 2024 GMT
Not After : Apr 9 14:22:17 2025 GMT
Subject: CN=615E75E254C35D8547133F324CBC709FFDDA92E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:c7:64:59:b1:ae:27:0d:a8:7b:56:eb:3f:
6c:01:48:f6:08:48:b8:c7:69:a0:bd:45:0c:53:43:
ad:fa:da:21:64:32:1a:02:06:71:e1:82:66:5b:ac:
65:9c:66:56:9a:ab:fe:3f:4b:43:d4:16:01:ba:4e:
27:36:1d:33:31:6d:2c:22:20:7e:dd:51:1d:f9:9e:
14:87:72:33:71:a5:3e:d4:71:59:1e:e8:a4:66:c8:
d6:6b:6e:92:43:1e:24:3c:e6:e7:27:cd:00:ab:36:
23:a7:d3:8d:72:bc:e4:4a:75:25:d2:9c:d8:ac:f5:
ea:d6:09:2f:47:1c:72:b9:34:9b:86:9f:2c:ca:58:
bd:5f:32:16:1a:a6:6f:c7:80:ab:79:3f:e0:d9:1f:
80:9a:0a:8a:6a:ad:35:30:03:dd:02:49:cf:29:0f:
80:19:88:6b:8a:12:04:f3:05:96:12:d8:a7:14:22:
f2:d1:65:5e:fa:5a:6e:1f:e0:e2:6b:ab:64:23:b2:
e7:d1:f0:15:f5:06:fc:26:3f:e8:a3:72:39:ff:a0:
a4:58:af:c1:44:ea:07:f8:91:84:ab:02:e2:bf:b3:
82:bf:92:05:19:f1:43:89:31:ac:fa:3b:a4:69:5e:
db:3d:14:5d:40:8e:d9:0b:e4:fb:1f:27:f5:49:70:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:75:E2:54:C3:5D:85:47:13:3F:32:4C:BC:70:9F:FD:DA:92:E2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323031363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1b:a6:fa:5c:52:a8:a5:73:35:09:77:c4:a9:c5:51:39:5a:
33:cb:97:3f:94:6a:cf:14:e6:ab:4c:4f:22:e7:3b:2e:70:fa:
f0:9c:d9:89:b3:96:de:8b:37:85:46:a3:df:01:90:5a:d7:8a:
d9:2f:98:46:13:ce:be:4e:58:0f:18:d9:35:06:60:95:15:4b:
ad:ee:df:77:e0:62:7e:9e:a1:5c:db:32:54:8a:a6:56:8f:50:
5a:25:ae:3c:d1:2f:31:7f:2e:5f:e8:e9:54:c8:6b:60:84:6f:
fa:7b:a5:d4:d1:25:53:a5:d5:78:9d:32:40:86:84:84:d2:96:
ff:48:bf:6c:61:08:30:80:c3:9d:bf:bf:f2:0b:6e:b2:9b:f6:
ac:1c:d3:1c:0a:84:4c:fc:55:70:57:c2:02:36:f1:aa:c1:f9:
fd:a6:7a:10:15:04:50:75:ea:14:b4:2e:3c:00:44:e8:7e:1f:
e9:03:6c:42:ae:74:46:05:44:51:d8:36:cd:c2:f0:37:a9:1e:
69:6d:cc:98:e5:56:75:66:76:f8:b8:4b:10:10:47:07:d5:f8:
88:65:70:c0:e5:78:94:c9:b0:4e:af:a5:e6:4f:c4:3f:c3:7d:
2b:19:32:8e:6b:fa:f1:68:cf:cc:45:5e:9f:97:f8:ce:f3:94:
18:dd:8f:88
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUITpHoSffik/c81tqvAfCjT2rNMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA0MTAxNDE3MTdaFw0yNTA0MDkxNDIyMTdaMDMxMTAvBgNV
BAMTKDYxNUU3NUUyNTRDMzVEODU0NzEzM0YzMjRDQkM3MDlGRkREQTkyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7cdkWbGuJw2oe1brP2wBSPYI
SLjHaaC9RQxTQ6362iFkMhoCBnHhgmZbrGWcZlaaq/4/S0PUFgG6Tic2HTMxbSwi
IH7dUR35nhSHcjNxpT7UcVke6KRmyNZrbpJDHiQ85ucnzQCrNiOn041yvORKdSXS
nNis9erWCS9HHHK5NJuGnyzKWL1fMhYapm/HgKt5P+DZH4CaCopqrTUwA90CSc8p
D4AZiGuKEgTzBZYS2KcUIvLRZV76Wm4f4OJrq2QjsufR8BX1BvwmP+ijcjn/oKRY
r8FE6gf4kYSrAuK/s4K/kgUZ8UOJMaz6O6RpXts9FF1AjtkL5PsfJ/VJcKFpAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUYV514lTDXYVHEz8yTLxwn/3akuIwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzNjM3MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg0w
DQYJKoZIhvcNAQELBQADggEBAGobpvpcUqilczUJd8SpxVE5WjPLlz+Uas8U5qtM
TyLnOy5w+vCc2Ymzlt6LN4VGo98BkFrXitkvmEYTzr5OWA8Y2TUGYJUVS63u33fg
Yn6eoVzbMlSKplaPUFolrjzRLzF/Ll/o6VTIa2CEb/p7pdTRJVOl1XidMkCGhITS
lv9Iv2xhCDCAw52/v/ILbrKb9qwc0xwKhEz8VXBXwgI28arB+f2mehAVBFB16hS0
LjwAROh+H+kDbEKudEYFRFHYNs3C8DepHmltzJjlVnVmdvi4SxAQRwfV+IhlcMDl
eJTJsE6vpeZPxD/DfSsZMo5r+vFoz8xFXp+X+M7zlBjdj4g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:41 2025 by rpki-client