Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
File: 33312e362e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LdEfTLu6HRiHWokNZGsY4WIGiQyFYbbhg1ecpsqp+9U=
Subject key identifier: 83:32:A8:CE:EC:86:30:10:3B:2F:44:60:71:EB:74:B9:81:60:5A:1E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1EE8AB305A5C21FB3437D2F9DCC67BBED2EC346B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
Signing time: Mon 06 May 2024 12:34:08 +0000
ROA not before: Mon 06 May 2024 12:29:08 +0000
ROA not after: Mon 05 May 2025 12:34:08 +0000
asID: 834
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 13:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e8:ab:30:5a:5c:21:fb:34:37:d2:f9:dc:c6:7b:be:d2:ec:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 6 12:29:08 2024 GMT
Not After : May 5 12:34:08 2025 GMT
Subject: CN=8332A8CEEC8630103B2F446071EB74B981605A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:ad:ea:f6:dc:c4:91:b7:3b:e3:d2:70:e8:
ba:dc:2a:03:2e:9f:2c:81:68:d2:be:83:d4:52:ba:
27:00:2b:93:69:1e:08:86:29:f4:63:a4:f4:a0:b8:
b3:e0:68:45:9c:52:35:74:6d:b3:80:1b:1b:49:43:
3d:71:b5:8b:58:b6:fc:f9:95:94:ba:23:61:09:c7:
59:87:e0:38:90:ee:59:15:11:3e:a1:17:cc:a6:71:
87:42:2f:09:8c:f3:f0:f4:34:4d:77:fc:a1:ce:ba:
d0:bb:75:f1:0a:e0:7a:85:0e:98:48:6f:30:89:eb:
02:6a:b8:93:d7:88:1c:89:4f:a0:c1:1a:c8:69:45:
c6:55:89:db:d7:be:15:43:b0:8d:ce:1b:1b:4b:22:
9b:d3:58:fa:ef:45:46:b6:d0:5a:37:42:28:88:5d:
61:1e:a1:59:0f:93:75:eb:c7:f0:78:82:2d:eb:25:
bc:47:ee:95:9c:6b:aa:14:f5:6d:a9:05:cc:f5:00:
db:6b:1e:54:d0:2e:80:a8:cd:3b:d5:66:25:1e:10:
4e:aa:11:2c:8f:28:98:07:02:d5:a7:90:f2:7f:f1:
3d:64:93:23:b2:f3:c1:5e:47:31:3a:03:1a:27:9a:
ef:7d:7c:23:99:8f:43:02:da:df:a4:11:d3:fd:0a:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:A8:CE:EC:86:30:10:3B:2F:44:60:71:EB:74:B9:81:60:5A:1E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6c:8e:1e:cf:2d:30:16:48:ce:c2:49:6c:c7:86:63:71:c4:
72:82:7c:8a:58:43:31:bd:44:97:2d:e2:76:97:7a:aa:75:4e:
00:2a:de:89:6f:71:e6:aa:a9:eb:9e:b1:e5:54:8d:bb:55:d8:
4f:a0:5b:18:3f:61:40:16:e7:9a:95:fb:8e:1a:d6:3b:18:e5:
cf:4c:6a:fe:a4:53:3b:de:71:78:57:c8:42:c0:87:0b:88:96:
4d:6a:e7:1e:9f:69:cd:4c:7e:da:0a:02:32:8a:5b:ab:a9:90:
2c:5b:11:27:a5:7d:75:2a:ec:0d:19:3e:63:14:08:7a:65:6f:
78:aa:c0:2a:fb:41:af:c2:62:b2:26:20:a2:1d:78:5a:98:b7:
57:de:4a:1e:63:90:d5:97:a7:14:74:23:3f:d0:8a:87:a6:78:
29:7a:2d:cb:c5:b4:be:3c:38:a1:01:42:4c:f5:3b:48:86:f7:
b2:d6:06:d3:99:24:bd:82:6c:d6:7a:3a:23:28:a7:02:5a:dd:
dd:3b:29:15:ba:f6:09:85:63:42:43:57:9f:a8:43:b3:67:29:
ec:33:21:2f:05:9e:b7:81:22:06:4f:1e:9a:8b:0d:3c:cb:cb:
0c:83:1f:9c:4f:dd:f6:96:6b:60:ca:ce:6d:ef:c1:e1:c2:5f:
d3:ff:d3:fb
-----BEGIN CERTIFICATE-----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Generated at Wed May 8 17:33:12 2024 by rpki-client on console-fra.rpki-client.org