Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313530323439.roa
File: 33312e362e31342e302f32342d3234203d3e20313530323439.roa (raw, json)
Hash identifier: 4yEI7cR1PcairKPH08ss5ljE/PsM+iZll+zujyMO3YY=
Subject key identifier: 9D:48:31:31:9D:30:DF:E4:8B:44:0D:73:DC:B6:A4:E4:20:58:1E:59
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5D4D15F13BCE57958A708FCE495B25093F1BB2BB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313530323439.roa
Signing time: Mon 29 Apr 2024 08:26:01 +0000
ROA not before: Mon 29 Apr 2024 08:21:01 +0000
ROA not after: Mon 28 Apr 2025 08:26:01 +0000
asID: 150249
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4d:15:f1:3b:ce:57:95:8a:70:8f:ce:49:5b:25:09:3f:1b:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 29 08:21:01 2024 GMT
Not After : Apr 28 08:26:01 2025 GMT
Subject: CN=9D4831319D30DFE48B440D73DCB6A4E420581E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:cc:06:9e:4b:89:53:dc:9f:06:4f:61:23:
15:33:61:86:18:a9:66:37:2a:a2:d2:f5:ea:a4:37:
1e:96:12:ae:c9:af:2d:4b:9f:50:69:2e:d0:24:a7:
fa:05:7d:cc:49:6c:ec:92:80:44:89:2a:a9:50:e1:
db:e0:9a:e3:8f:ec:9d:7f:83:ff:75:e3:b0:81:ea:
e4:85:0f:7f:eb:33:25:c5:b7:d2:ce:f8:b4:c6:2d:
7c:47:36:93:45:9b:20:36:bf:90:39:19:fb:01:c1:
f6:36:bc:1f:52:66:48:08:ee:77:5b:17:a3:31:0d:
da:be:45:1c:8d:bd:6d:6c:13:f0:2b:28:0e:a0:ac:
22:65:24:62:52:0d:58:93:ff:7e:e0:d9:7c:c9:84:
26:b5:3d:77:0f:8f:b3:cb:c5:24:e2:51:08:d3:c3:
3d:31:9d:c8:1d:e5:d4:cb:07:95:52:c9:cb:32:e4:
07:d9:35:38:9b:b4:b3:3d:7a:26:e2:4d:49:86:23:
51:48:ab:79:f7:6d:d7:45:c9:4e:3b:95:ab:01:f2:
9d:b6:bf:3d:aa:44:36:60:6e:fb:bd:bb:f7:82:76:
fa:c8:6b:ab:1c:42:41:e1:47:4d:a5:38:98:cc:c8:
28:f2:75:62:e0:6c:b0:5d:77:4b:9e:d0:74:20:47:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:31:31:9D:30:DF:E4:8B:44:0D:73:DC:B6:A4:E4:20:58:1E:59
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7a:b2:d6:47:df:9e:56:a2:be:16:18:73:04:38:02:14:96:
eb:03:86:9e:9e:24:03:1f:36:85:3e:d7:6f:bf:b7:81:8c:6a:
c8:01:3f:fa:72:98:16:d3:55:1e:db:89:94:a6:96:dc:a8:be:
bf:20:66:c3:8d:93:c6:fd:cc:c9:b6:ae:cd:15:1a:01:3d:93:
9d:90:59:53:08:bb:7b:28:9d:a9:12:4a:f9:19:c9:90:5a:3f:
99:fc:ad:e9:bf:0c:13:92:3b:d8:c2:48:b7:a2:41:c5:a1:19:
37:6f:84:d3:1f:4d:de:20:6c:17:d0:bd:a8:db:dc:c8:e8:30:
31:9a:88:49:51:72:77:e7:78:c6:c5:66:93:89:b2:5a:9f:67:
08:78:68:a4:d3:f5:d0:89:61:47:bf:34:12:d6:1c:f7:d6:43:
7f:ba:42:e8:bc:b5:8e:83:01:13:29:b8:a5:1b:ac:96:3e:e5:
c8:02:20:ab:c0:f0:18:25:fd:ad:0e:37:6d:94:90:a6:66:58:
63:db:19:76:ae:ad:ea:28:57:37:fc:8c:01:4b:cf:fa:ac:f0:
0a:51:24:12:62:e1:a7:6c:63:eb:f8:14:45:a7:3f:ef:07:85:
7c:6c:f3:25:95:da:84:24:6c:80:7e:29:62:8a:6a:99:74:9c:
67:01:a2:ba
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXU0V8TvOV5WKcI/OSVslCT8bsrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA0MjkwODIxMDFaFw0yNTA0MjgwODI2MDFaMDMxMTAvBgNV
BAMTKDlENDgzMTMxOUQzMERGRTQ4QjQ0MEQ3M0RDQjZBNEU0MjA1ODFFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCcwGnkuJU9yfBk9hIxUzYYYY
qWY3KqLS9eqkNx6WEq7Jry1Ln1BpLtAkp/oFfcxJbOySgESJKqlQ4dvgmuOP7J1/
g/9147CB6uSFD3/rMyXFt9LO+LTGLXxHNpNFmyA2v5A5GfsBwfY2vB9SZkgI7ndb
F6MxDdq+RRyNvW1sE/ArKA6grCJlJGJSDViT/37g2XzJhCa1PXcPj7PLxSTiUQjT
wz0xncgd5dTLB5VSycsy5AfZNTibtLM9eibiTUmGI1FIq3n3bddFyU47lasB8p22
vz2qRDZgbvu9u/eCdvrIa6scQkHhR02lOJjMyCjydWLgbLBdd0ue0HQgR5e5AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUnUgxMZ0w3+SLRA1z3Lak5CBYHlkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMjM0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg4w
DQYJKoZIhvcNAQELBQADggEBAGl6stZH355Wor4WGHMEOAIUlusDhp6eJAMfNoU+
12+/t4GMasgBP/pymBbTVR7biZSmltyovr8gZsONk8b9zMm2rs0VGgE9k52QWVMI
u3sonakSSvkZyZBaP5n8rem/DBOSO9jCSLeiQcWhGTdvhNMfTd4gbBfQvajb3Mjo
MDGaiElRcnfneMbFZpOJslqfZwh4aKTT9dCJYUe/NBLWHPfWQ3+6Qui8tY6DARMp
uKUbrJY+5cgCIKvA8Bgl/a0ON22UkKZmWGPbGXaureooVzf8jAFLz/qs8ApRJBJi
4adsY+v4FEWnP+8HhXxs8yWV2oQkbIB+KWKKapl0nGcBoro=
Generated at Thu May 2 04:47:50 2024 by rpki-client on console-fra.rpki-client.org