Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203336313133.roa
File: 33312e362e31342e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier: slKyImL04qTBGNA74yUAPCv7kkDE0nD0ZBVfYXNs+B8=
Subject key identifier: 9E:F8:44:72:0C:39:E1:65:58:13:F2:C9:C3:64:EB:89:51:9C:70:E0
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2A861CEE53749C13CD6C0FFD7804CA9B68884BBD
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203336313133.roa
Signing time: Tue 28 Nov 2023 13:43:47 +0000
ROA not before: Tue 28 Nov 2023 13:38:47 +0000
ROA not after: Tue 26 Nov 2024 13:43:47 +0000
asID: 36113
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:86:1c:ee:53:74:9c:13:cd:6c:0f:fd:78:04:ca:9b:68:88:4b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 28 13:38:47 2023 GMT
Not After : Nov 26 13:43:47 2024 GMT
Subject: CN=9EF844720C39E1655813F2C9C364EB89519C70E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:07:f6:b9:6c:b9:74:69:1e:be:96:4e:33:
e8:73:70:f9:2c:cc:85:ff:60:3a:c5:61:ac:52:df:
4f:fa:e8:7e:9a:ef:d3:10:8a:25:24:9d:cb:8f:53:
36:20:05:5b:ad:55:81:a5:3b:5d:02:b7:e1:ff:2e:
ab:bc:b0:81:8d:b4:6f:64:bc:01:94:99:34:54:00:
dc:f8:92:f8:f2:28:7a:80:ad:e6:ee:29:f6:b3:68:
f9:d6:75:51:f3:19:b5:a8:75:da:c5:0b:9d:e2:29:
54:70:b8:bd:f1:06:b9:52:cf:e6:71:31:d3:b7:0f:
d3:1c:4e:fb:e6:f3:ed:3f:2a:eb:8c:ad:9f:24:f3:
39:5c:49:da:0e:7f:0a:91:99:7b:b3:48:74:6e:68:
69:50:21:b0:c6:da:6a:1a:cc:c6:44:f7:c5:dd:a2:
41:67:a2:48:6f:43:e5:e1:53:35:63:ac:cf:2f:9b:
6f:06:6f:ad:79:3d:15:7e:fc:74:13:ba:fe:de:b0:
e4:7e:bf:be:88:48:11:b7:9a:d6:e8:15:73:41:92:
71:90:60:d0:fe:d2:43:31:da:ee:87:43:e1:6a:9f:
49:97:4f:f8:f6:29:3d:d6:93:f3:79:aa:3f:4a:3e:
70:2d:43:da:dc:c4:43:8f:2f:8e:02:ea:58:95:4f:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:44:72:0C:39:E1:65:58:13:F2:C9:C3:64:EB:89:51:9C:70:E0
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203336313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e3:a7:a9:6d:53:94:4f:2a:64:72:75:be:00:b4:2f:83:a9:
9b:2c:08:08:9a:49:11:16:55:d4:4e:43:18:35:b5:43:4f:86:
70:1d:d7:46:dc:a7:19:de:1e:47:75:8e:3b:18:e9:db:e9:86:
31:fc:5c:88:01:78:27:39:d3:3e:ff:19:bb:1b:67:b8:1c:60:
a6:f5:2b:98:ad:a8:89:2e:b1:7c:bf:b0:14:0b:be:2b:e1:28:
91:20:d4:7b:d0:d3:47:52:8e:b5:73:e3:3f:6d:3c:b6:fe:63:
96:17:73:30:89:ca:2d:9d:b9:35:cd:a7:af:64:62:59:ef:23:
19:9a:81:aa:80:c1:80:80:3e:d8:ae:5d:ee:4a:83:d9:de:c3:
ea:41:97:45:9e:2e:9e:f5:ee:d5:ad:61:d2:13:2c:58:5d:13:
40:83:ef:83:59:a0:f5:30:4b:28:f0:0e:32:81:1f:40:fa:02:
61:1c:63:26:df:c9:d8:36:a6:5c:be:68:63:42:b5:f2:62:c6:
24:23:66:b0:e4:9c:78:d2:8d:91:e2:d5:d2:f5:3f:f4:ee:bc:
71:1a:90:dc:82:8d:d8:d9:90:1b:f5:a4:fd:14:14:eb:83:12:
89:60:e1:c6:c1:ba:20:74:2e:e6:78:de:98:0e:6c:7d:42:26:
47:f9:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 01:06:48 2024 by rpki-client on console-fra.rpki-client.org