Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313939363935.roa
File: 33312e362e31342e302f32342d3234203d3e20313939363935.roa (raw, json)
Hash identifier: 6cgdyrf1Lm3yA8WJxQynFVoBfW8fhUhWwsisZoo2WZE=
Subject key identifier: D0:88:D2:59:34:E4:D8:77:2C:08:A1:8B:65:11:FC:CE:E7:C0:44:12
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2CEC6F285B500594D2C095ECFAE7076D555774E0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313939363935.roa
Signing time: Wed 03 Jul 2024 02:28:11 +0000
ROA not before: Wed 03 Jul 2024 02:23:11 +0000
ROA not after: Wed 02 Jul 2025 02:28:11 +0000
asID: 199695
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ec:6f:28:5b:50:05:94:d2:c0:95:ec:fa:e7:07:6d:55:57:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 3 02:23:11 2024 GMT
Not After : Jul 2 02:28:11 2025 GMT
Subject: CN=D088D25934E4D8772C08A18B6511FCCEE7C04412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:ac:ac:a2:ea:3d:2d:4c:53:28:49:b5:50:
d0:2b:ec:ee:02:4d:9a:c9:c1:46:dc:7c:e4:22:44:
88:55:00:91:ed:07:f4:8e:f9:c9:c0:c3:7f:b6:ee:
0e:1c:f6:a2:9a:ff:05:26:1e:e0:c2:5e:3f:df:85:
8d:a1:24:92:a5:61:3f:90:e4:35:bc:c2:6a:93:65:
de:d7:0c:30:9c:34:d9:68:2b:3b:24:6a:24:1c:81:
51:04:fb:e3:6a:79:6b:2d:c2:78:dc:9d:6b:e1:60:
46:51:3e:bc:95:3f:1e:1d:24:c1:b1:7f:18:36:03:
a5:4f:2b:2a:9b:58:ae:f4:4c:2a:62:73:be:29:1a:
14:fe:39:e0:06:cd:39:28:2d:d3:48:ff:dc:83:a5:
af:f8:48:cb:36:17:d3:28:83:e0:6a:ab:2e:13:3b:
f9:14:78:e9:eb:1e:c6:e2:76:99:6c:d1:81:52:88:
5f:aa:1b:28:20:04:2f:6a:fe:6c:84:7c:82:d0:d6:
e7:52:2a:38:97:49:e2:a5:4b:8e:aa:7a:eb:0a:e6:
b8:6f:a4:8e:81:db:cb:8e:d8:56:f7:1d:d9:7e:3d:
12:f9:57:29:36:26:50:d0:dd:8a:81:42:ee:de:18:
16:a1:e6:d0:1d:9d:0f:6d:67:c1:19:0f:36:b5:41:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:D2:59:34:E4:D8:77:2C:08:A1:8B:65:11:FC:CE:E7:C0:44:12
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313939363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9a:09:b4:e0:e2:85:13:41:aa:61:2d:f4:f6:08:18:a6:85:
8e:12:25:df:d7:a6:55:7c:09:3b:ff:d4:d9:a3:f3:ba:bd:3f:
68:2a:22:66:90:48:d5:71:37:cf:ff:02:ca:b0:d7:31:6d:14:
02:0f:cc:a1:00:96:27:4f:ef:dd:09:a4:9f:a7:1b:07:bb:9d:
2f:a6:d9:98:ca:2d:5a:e5:35:b3:f5:26:09:c3:eb:3f:f5:e4:
97:28:85:1f:64:20:a8:f2:dc:70:2f:ca:2e:86:75:2c:91:9b:
a7:6c:27:20:ea:92:58:51:21:20:89:13:0d:b5:ad:e7:58:2a:
fd:09:59:78:13:f5:9e:be:e5:7f:d8:b4:a2:1e:c4:22:12:3c:
22:7e:76:9e:7b:6b:05:ef:d0:a4:ad:56:7d:a2:2f:35:56:06:
91:3c:10:d9:9d:85:c4:ec:8c:f1:92:dc:17:85:08:1c:0f:e3:
3a:ac:51:0a:07:86:ad:0f:ac:6f:98:e8:63:e1:35:d3:4f:ac:
8b:31:fb:a5:9e:bf:8a:b8:9f:da:d8:99:e9:18:d0:81:05:4b:
f4:93:67:3f:3d:21:db:41:6f:b5:47:e4:8e:15:70:48:c0:24:
b5:83:b2:4a:7c:cd:4a:5d:2c:b9:3f:29:38:46:6c:fe:27:c1:
67:f5:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 12:20:24 2024 by rpki-client on console-fra.rpki-client.org