Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203433323839.roa
File: 33312e362e31342e302f32342d3234203d3e203433323839.roa (raw, json)
Hash identifier: IVdQMgaaLqjJwJyqeeRUnj22LlGkU51I6xpt2NrVOz0=
Subject key identifier: 6A:55:E2:02:F9:10:C1:D8:DE:5E:0D:39:F5:ED:D1:2B:74:8B:06:C6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 218F0C70BD797F50F5F09A289A9AB644EB8007D9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203433323839.roa
Signing time: Sun 28 Jan 2024 14:52:42 +0000
ROA not before: Sun 28 Jan 2024 14:47:42 +0000
ROA not after: Sun 26 Jan 2025 14:52:42 +0000
asID: 43289
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8f:0c:70:bd:79:7f:50:f5:f0:9a:28:9a:9a:b6:44:eb:80:07:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 28 14:47:42 2024 GMT
Not After : Jan 26 14:52:42 2025 GMT
Subject: CN=6A55E202F910C1D8DE5E0D39F5EDD12B748B06C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:ec:1b:b6:00:dd:1c:80:20:2b:5b:13:bb:
36:01:84:ec:bd:a3:21:02:e7:e6:da:96:04:3a:40:
56:7b:12:9a:65:41:4c:6b:4a:65:32:eb:b1:96:df:
e4:61:bd:6d:7c:0f:c0:fe:e7:73:6a:3c:c4:1f:93:
1d:26:5a:bf:76:53:3d:39:03:5a:db:5f:ed:9b:77:
97:f4:7b:2a:dc:7a:55:5a:31:5b:b9:7c:59:93:66:
54:fc:67:e5:7d:1e:43:5e:5f:28:2e:72:8a:64:a1:
33:cf:85:6b:ba:a3:b6:73:85:ea:19:aa:3d:33:0d:
12:00:6f:da:d9:6e:7b:0c:e6:33:9c:30:72:74:f9:
92:5d:1e:f9:a2:c0:24:5b:15:f5:42:d5:f0:22:df:
ee:6d:6d:98:00:e5:ab:c6:10:e6:49:94:15:42:97:
cc:6b:ea:f8:34:14:57:e3:69:51:49:83:e3:02:0e:
45:32:3c:b2:1e:60:5c:2a:c7:44:5a:d8:46:2a:f9:
57:64:a6:4a:db:93:43:4c:54:b5:70:34:cc:03:a0:
5f:1c:d2:6d:e0:ac:31:eb:27:5d:9d:c3:eb:cc:2c:
fd:25:b5:c9:aa:df:20:11:30:06:3b:85:9e:72:14:
48:4e:52:39:87:de:cb:e9:69:62:b7:d9:89:f8:16:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:E2:02:F9:10:C1:D8:DE:5E:0D:39:F5:ED:D1:2B:74:8B:06:C6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e203433323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2c:22:57:71:8f:18:46:99:4c:a4:ee:71:56:bd:06:29:4e:
44:ce:af:49:8b:a0:97:f0:d8:cb:00:f1:32:cc:de:cd:3d:8d:
dc:fd:21:ee:18:44:70:2c:a3:9f:e4:52:31:f0:fc:47:d3:8f:
a4:12:e6:3b:49:2b:d4:08:74:48:14:49:4f:34:8a:59:6e:d5:
6e:d8:4a:db:30:1a:b4:47:25:70:5c:f0:bd:21:ed:3d:c1:74:
b9:dc:10:7c:40:be:65:64:1c:a8:28:ab:5e:e9:a2:3f:d9:d3:
7e:6a:80:bb:9d:eb:d4:3e:27:7c:96:e7:02:7b:62:6d:8a:b9:
e7:b9:18:2c:a7:d9:fc:b3:78:40:a4:2f:6d:6e:a7:84:46:83:
2f:eb:59:0b:e6:a8:3e:b2:17:0b:47:ea:7b:54:fd:bc:8a:68:
4b:e1:14:f3:e5:da:e8:58:e7:ad:e4:4e:97:a8:f9:8f:67:bf:
5e:10:5c:db:d1:7f:cc:a3:9b:3b:55:fe:fa:2a:1f:20:0c:b7:
39:75:9f:04:0e:db:e4:87:23:eb:b1:cf:80:73:43:f8:e9:2d:
4f:d6:cd:d5:8d:42:33:b9:29:d0:f5:f3:4f:8d:e4:0a:59:8c:
72:67:b9:ff:96:b8:7e:cc:92:78:5c:e7:e1:fa:36:66:0e:a6:
97:7e:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:24:13 2024 by rpki-client on console-ams.rpki-client.org