Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313531353434.roa
File: 33312e362e31342e302f32342d3234203d3e20313531353434.roa (raw, json)
Hash identifier: DHDKzjyc5uMWain0wjNgDr7+e2BGPLgKa2Vh82AOATs=
Subject key identifier: 2F:91:ED:87:14:F4:67:E0:7B:A8:FD:57:D9:59:C7:88:A6:FD:31:19
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3F8EFBCFC943B482053AE82B9657A9A2681D51FA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313531353434.roa
Signing time: Mon 01 Jul 2024 09:06:18 +0000
ROA not before: Mon 01 Jul 2024 09:01:18 +0000
ROA not after: Mon 30 Jun 2025 09:06:18 +0000
asID: 151544
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 11:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8e:fb:cf:c9:43:b4:82:05:3a:e8:2b:96:57:a9:a2:68:1d:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 1 09:01:18 2024 GMT
Not After : Jun 30 09:06:18 2025 GMT
Subject: CN=2F91ED8714F467E07BA8FD57D959C788A6FD3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:80:25:c4:8c:50:e7:b0:01:e9:29:8b:fb:
a8:27:40:58:d0:e1:87:6a:4f:11:f6:87:01:54:b0:
94:0d:2c:61:c8:41:d4:3c:0b:6b:f2:94:1b:72:a0:
00:35:50:7b:1e:f8:0b:b3:f6:05:61:1f:c3:bd:09:
65:51:b5:e8:29:d2:b3:d0:1c:34:4b:83:32:1d:f6:
7a:86:03:f4:c1:6d:c4:4d:ab:02:ee:7c:c7:07:79:
75:96:e5:9a:3e:58:7f:42:8e:30:ba:43:40:5d:43:
dd:f0:33:cb:c0:07:94:ba:44:5f:d4:0e:e5:bc:f7:
74:b2:ea:3d:03:74:c3:f8:9b:4e:eb:5b:23:4b:3c:
02:6b:03:af:8d:18:11:ea:5d:9b:c4:50:60:5f:27:
8f:01:ee:f3:31:1a:e4:04:fd:63:c7:3f:10:93:f8:
a5:8c:47:8a:ce:b6:a7:e8:2d:ee:bc:37:c0:58:d3:
0a:1c:02:d2:cc:2f:7f:0c:d8:6d:da:2c:67:d8:1d:
33:da:5a:d2:fa:7c:d6:a9:b9:21:5a:fd:26:7f:3a:
2b:c3:14:3a:01:de:7f:1d:75:04:19:e4:90:57:44:
83:92:91:1d:6a:77:1c:42:b7:75:20:69:a0:84:d0:
ce:5e:3a:98:49:8e:dd:18:6f:ef:be:78:c1:54:42:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:ED:87:14:F4:67:E0:7B:A8:FD:57:D9:59:C7:88:A6:FD:31:19
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313531353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
19:88:2b:32:03:6d:75:b3:a5:54:6d:10:b0:5a:7b:3b:2c:99:
56:98:69:74:53:9e:87:db:0d:21:a0:22:bf:fe:6e:f8:59:d7:
c9:f6:82:08:da:89:85:a5:75:da:a9:98:f6:ae:b7:9b:8d:c4:
96:6c:78:0e:00:62:a1:76:9b:5e:b7:b3:fe:60:5b:f5:9e:66:
71:e1:ab:22:0c:c0:ad:c2:b9:6a:65:3f:f3:12:cc:a1:71:19:
7c:f0:90:e1:5d:50:55:0f:de:f2:f3:94:90:24:82:a2:b2:50:
ca:14:81:61:86:b6:5c:88:eb:d9:ee:ec:d8:ab:d6:91:81:ee:
ca:f9:16:ce:b9:dc:bb:e8:b5:51:ef:c1:ba:37:51:b8:c9:5d:
3f:b0:b5:c0:52:e9:e3:10:d7:d2:a1:fb:a1:a4:b9:5b:0d:47:
9d:53:fc:26:2f:4a:31:e6:0e:c3:c2:40:7c:22:64:dd:f1:ec:
fa:7e:80:1d:13:0e:7e:26:c4:a6:66:51:84:23:64:c1:4b:dd:
68:0f:e0:c4:ea:1c:9a:72:56:27:9c:03:e5:67:70:08:06:b2:
b8:05:ea:41:d2:5e:28:43:81:e4:f6:09:6c:26:f3:97:bb:50:
f1:34:f5:51:88:22:d0:77:50:54:fa:29:47:b2:d2:00:41:45:
4a:c9:e1:52
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 2 13:05:47 2024 by rpki-client on console-fra.rpki-client.org