Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203531303832.roa
File: 33312e362e31332e302f32342d3234203d3e203531303832.roa (raw, json)
Hash identifier: W7PVPNHJu4EZcifP4aFUaGAW57p4CPKWPH4JU39diUE=
Subject key identifier: E4:17:F1:DC:C4:A0:03:B2:91:4C:6C:0F:17:B0:DA:79:FF:3C:9B:F6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5BEFE99BF4588667D22EAE7DD709658CB716EB2F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203531303832.roa
Signing time: Thu 30 Nov 2023 09:32:21 +0000
ROA not before: Thu 30 Nov 2023 09:27:21 +0000
ROA not after: Thu 28 Nov 2024 09:32:21 +0000
asID: 51082
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:e9:9b:f4:58:86:67:d2:2e:ae:7d:d7:09:65:8c:b7:16:eb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 30 09:27:21 2023 GMT
Not After : Nov 28 09:32:21 2024 GMT
Subject: CN=E417F1DCC4A003B2914C6C0F17B0DA79FF3C9BF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:70:25:32:88:53:11:e9:63:59:3d:62:95:
d2:ba:e7:03:c1:7c:7d:2e:75:79:d3:e4:16:a0:7f:
43:04:eb:81:03:c2:58:31:31:ba:4f:53:4a:ef:ad:
61:99:d7:d1:02:74:49:e9:b8:a6:80:a3:92:15:1a:
ab:41:03:2c:2f:97:1d:3b:e0:fd:10:ad:41:9b:70:
ef:0b:3a:3a:36:30:74:6a:67:95:1b:39:b4:6d:51:
3f:48:44:05:ba:e4:d7:e9:4c:78:1f:e9:d9:a6:50:
34:b4:1a:f8:a6:ee:7d:83:7a:29:85:3a:82:30:ad:
2a:44:5a:d8:c1:57:4e:97:38:b8:c4:2e:5b:5e:c9:
3d:bb:8e:3b:19:28:d8:f0:cf:fb:c4:77:1a:d5:ff:
c0:10:63:b8:29:c2:af:b8:b9:a4:7c:2a:d0:74:ae:
34:32:70:40:46:5d:a8:7c:f6:99:b2:fd:e0:03:6c:
8e:e1:b7:6a:9e:25:b3:e5:36:86:04:0f:86:4b:4a:
1f:1c:cd:de:11:ab:44:9e:59:5d:42:36:6c:61:4e:
dd:a7:49:92:b3:85:98:5e:1d:b9:0c:a3:15:9a:2d:
83:99:d5:b2:17:1c:df:4c:f2:29:bc:82:4f:4d:68:
c6:6c:82:f3:b5:14:41:9e:14:e3:74:1e:aa:13:12:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:17:F1:DC:C4:A0:03:B2:91:4C:6C:0F:17:B0:DA:79:FF:3C:9B:F6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203531303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6e:72:78:7d:50:cb:2e:57:dc:1a:c6:05:e7:68:a5:9f:2d:
0f:6a:fa:da:4d:53:ae:70:1c:23:82:d0:4f:84:6a:11:7c:df:
23:96:b6:d5:24:98:94:94:09:00:79:e5:d6:a6:44:a4:2d:5c:
2f:7d:13:40:c7:bb:08:ef:16:51:5a:15:16:6f:70:67:13:99:
79:74:a7:14:81:28:fd:6d:93:de:cb:c1:5e:76:b4:77:cc:01:
83:2b:c3:3d:a6:0d:fc:4c:dd:c9:44:2f:92:e3:a1:88:e3:0d:
36:ce:d5:ef:c8:d8:cb:6a:68:01:60:1c:03:a8:5f:9c:b3:b5:
fa:0c:c6:73:06:cb:1c:99:b5:e3:c3:65:10:6d:23:be:a6:96:
9f:34:02:38:af:d1:da:4d:e4:df:c9:95:65:bf:4f:95:18:7b:
64:e5:f7:d3:4a:2e:ed:83:49:de:18:a7:9d:fb:d6:d4:fe:71:
9a:00:99:e9:02:d1:47:36:c0:2c:5d:25:a7:bf:0e:be:9c:af:
84:7d:83:83:c4:3f:be:e9:99:74:78:74:56:69:45:15:e4:76:
13:dc:7e:a6:18:e6:27:3d:9d:14:15:23:b3:23:8b:4e:f0:d5:
4e:c5:ca:b7:45:a5:38:da:6a:13:7c:7f:f3:0f:70:86:4c:0f:
ed:d2:c6:56
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 1 13:11:56 2024 by rpki-client on console-ams.rpki-client.org