Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
File: 33312e362e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zvohiXGjQlnZ4vHJpBzAkoZhYY1xvtWt3FROvf1FDAo=
Subject key identifier: A2:68:59:D3:99:AF:CF:2C:72:9B:AB:C7:5F:C2:4E:67:99:65:B9:72
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 26B95A4FD4EE86F78C4F2A8C77117B8739EB3CAC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jan 2025 07:42:37 +0000
ROA not before: Thu 02 Jan 2025 07:37:37 +0000
ROA not after: Thu 01 Jan 2026 07:42:37 +0000
asID: 834
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 15:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b9:5a:4f:d4:ee:86:f7:8c:4f:2a:8c:77:11:7b:87:39:eb:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 2 07:37:37 2025 GMT
Not After : Jan 1 07:42:37 2026 GMT
Subject: CN=A26859D399AFCF2C729BABC75FC24E679965B972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:b3:1c:b3:aa:5c:15:49:2f:b0:75:d7:28:
1c:48:01:65:b8:ec:ba:f9:cf:08:39:95:c3:14:d7:
3f:f5:6b:1a:f2:a3:c3:c1:9e:ab:d1:80:2b:45:de:
4b:4b:39:45:a8:81:c7:ab:8d:79:86:fa:d4:c4:e1:
ee:57:4c:6e:d6:bd:97:c3:5e:9b:9c:7b:ee:c2:01:
d9:2f:e6:a3:9f:13:7a:e5:bc:92:81:62:81:29:14:
0c:fd:7c:93:1c:6b:59:3b:4a:89:da:67:f6:e0:e1:
af:df:42:fb:83:9e:ea:da:ae:0b:32:6a:81:7b:78:
63:f3:a7:f7:55:c7:61:7b:23:6e:92:3e:d7:62:0e:
68:c6:c5:32:59:d2:57:8b:4a:52:dd:46:bb:3f:4e:
14:26:2d:62:1d:91:17:f9:b0:92:b8:c0:2d:31:01:
72:23:94:a9:ba:2c:6d:61:9e:8e:79:d5:47:7f:c8:
d1:04:d7:cd:42:36:29:10:17:a6:33:6e:c8:5a:cf:
4e:20:9e:bf:8e:d6:af:24:d5:27:e3:59:62:22:d9:
81:a4:26:83:2a:57:fb:58:2c:9b:63:e0:76:6d:46:
76:b9:1b:b5:cb:be:87:6d:50:9e:4f:a5:13:f3:b1:
b4:42:c2:b4:ee:7e:47:05:a5:55:9e:29:d3:6d:a2:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:59:D3:99:AF:CF:2C:72:9B:AB:C7:5F:C2:4E:67:99:65:B9:72
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:21:2e:fc:3c:16:c6:51:8e:1e:ba:3b:49:16:37:55:bd:db:
34:de:fa:74:aa:b4:ee:ca:ff:4f:4d:3d:10:3e:9d:7d:69:7f:
45:42:16:7b:5a:0a:20:43:06:db:7b:e8:80:80:0b:f7:51:e9:
10:46:10:93:24:83:4b:e8:a4:0e:35:41:63:d1:f4:8c:fb:b4:
35:61:31:83:55:c7:a2:80:1d:fd:8a:2d:cc:87:eb:47:87:56:
96:44:a2:e7:f8:9d:39:6c:25:20:be:e8:9c:25:73:63:b1:1b:
f8:97:22:17:49:e5:8e:9c:bd:b2:33:e1:dd:10:93:11:29:f4:
72:41:b1:3a:21:08:fc:f0:8a:9b:3a:37:4e:2e:e3:23:b0:fe:
94:75:1c:90:27:f9:ad:d7:f6:72:9f:4f:ff:4c:73:83:bb:03:
73:de:68:90:56:32:e1:f9:ed:32:74:d1:2f:82:33:ae:ed:92:
be:d5:42:17:f8:9f:f8:c6:68:db:07:c9:17:73:b5:33:99:72:
89:85:cf:91:61:c3:81:9a:a9:78:4b:42:24:b6:77:bc:56:d3:
91:72:d0:00:19:52:85:f9:7a:8a:84:60:0a:09:58:4a:06:16:
80:21:4f:b5:c8:8a:ee:c1:e7:9c:7b:a5:ba:19:99:99:c1:a5:
ae:49:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:57 2025 by rpki-client