Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
File: 33312e362e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: arBe+wWCCaa9MuDH32Ov7ydfyjy5CjLIvj+1qmrmcQk=
Subject key identifier: 01:D4:2C:20:64:A1:0E:3F:E9:6E:87:5D:27:1A:0A:2C:CB:1C:F1:88
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0C1C9EEE17EBDAED7D31F5AD5D2FC7737DB6905D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Sep 2024 00:03:31 +0000
ROA not before: Wed 04 Sep 2024 23:58:31 +0000
ROA not after: Thu 04 Sep 2025 00:03:31 +0000
asID: 834
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 12:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1c:9e:ee:17:eb:da:ed:7d:31:f5:ad:5d:2f:c7:73:7d:b6:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 4 23:58:31 2024 GMT
Not After : Sep 4 00:03:31 2025 GMT
Subject: CN=01D42C2064A10E3FE96E875D271A0A2CCB1CF188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:c7:90:f4:9d:0e:0b:4d:68:2c:09:bb:58:
3a:2a:a4:d7:fc:02:65:e8:24:5f:88:cb:8d:4b:97:
21:96:01:ba:74:09:02:bf:ca:fa:da:fe:61:b0:be:
12:7a:e8:37:59:8f:83:84:be:09:d6:8f:79:24:b5:
98:3c:dc:fa:0a:fe:71:ef:bf:40:d2:54:14:53:0c:
f8:3d:2d:d9:09:8e:62:b9:76:63:80:1e:e0:17:57:
50:77:79:e1:b9:cc:8f:00:8e:fe:99:90:db:67:52:
cc:24:82:d9:6c:c3:73:64:fe:88:b6:02:69:af:13:
01:6a:3b:46:cf:ed:b0:0c:e9:64:96:fc:3e:52:12:
98:8f:47:72:45:d0:dc:bf:c6:f9:bb:e0:27:bb:95:
b3:64:9d:fe:02:77:5d:8d:3f:d7:98:a2:d5:3f:a2:
c2:4c:e5:0e:06:3a:02:03:c0:03:50:37:17:fa:08:
d8:9e:a0:23:a4:42:33:7b:22:1f:0e:b9:43:71:ef:
d1:d5:d6:f7:6d:3f:71:dd:e2:f6:e2:8d:98:26:cd:
9c:3c:35:9a:bf:69:3f:58:6e:c9:6d:95:a0:10:53:
70:c9:7f:7e:00:51:e9:13:0d:c1:72:22:2c:0c:7f:
62:04:c9:f5:d5:71:43:02:10:5e:23:f7:f4:4f:2b:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:2C:20:64:A1:0E:3F:E9:6E:87:5D:27:1A:0A:2C:CB:1C:F1:88
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:88:35:dd:3d:d0:67:99:a7:10:fa:5c:f9:84:7b:2b:28:9e:
ed:a5:1a:f6:be:0d:53:7a:10:46:10:79:a4:72:49:67:2b:e0:
c8:5a:d7:61:5f:e2:31:90:50:62:f3:f4:e0:d2:57:99:90:5a:
1f:89:ab:65:6f:e1:95:2a:db:8a:e5:9b:5c:f6:b1:d9:19:24:
fd:46:b5:39:87:2b:90:27:99:50:f4:53:2f:fb:2b:23:b3:1d:
f3:85:9d:c5:d8:5e:e7:9b:43:6a:a1:2e:1c:f2:90:6c:b9:79:
8c:8d:80:b3:4e:69:cc:8c:c0:e1:e2:32:89:82:00:d7:2e:c9:
98:fd:1d:71:d8:9b:83:3c:15:23:55:9b:9b:27:04:98:eb:75:
7b:b6:21:cb:a6:6c:7c:e2:ad:64:51:5e:94:bd:a8:90:5e:55:
d8:0d:a7:56:c4:82:8a:27:6a:0b:bb:9e:ef:da:a9:1c:56:2c:
f5:3a:53:6c:07:bd:37:30:00:ec:2d:30:55:5f:a9:29:9a:a9:
80:ac:ea:fb:82:ac:91:30:d4:38:89:08:04:80:9a:2f:d5:af:
d5:ea:ad:4b:70:35:81:d5:4a:9a:05:02:94:0d:d9:11:87:f8:
ff:4a:2b:32:fd:0f:c5:33:69:26:ba:23:e1:32:d4:2a:c5:a6:
4c:16:b8:02
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUDBye7hfr2u19MfWtXS/Hc322kF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA5MDQyMzU4MzFaFw0yNTA5MDQwMDAzMzFaMDMxMTAvBgNV
BAMTKDAxRDQyQzIwNjRBMTBFM0ZFOTZFODc1RDI3MUEwQTJDQ0IxQ0YxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6seQ9J0OC01oLAm7WDoqpNf8
AmXoJF+Iy41LlyGWAbp0CQK/yvra/mGwvhJ66DdZj4OEvgnWj3kktZg83PoK/nHv
v0DSVBRTDPg9LdkJjmK5dmOAHuAXV1B3eeG5zI8Ajv6ZkNtnUswkgtlsw3Nk/oi2
AmmvEwFqO0bP7bAM6WSW/D5SEpiPR3JF0Ny/xvm74Ce7lbNknf4Cd12NP9eYotU/
osJM5Q4GOgIDwANQNxf6CNieoCOkQjN7Ih8OuUNx79HV1vdtP3Hd4vbijZgmzZw8
NZq/aT9YbsltlaAQU3DJf34AUekTDcFyIiwMf2IEyfXVcUMCEF4j9/RPK4wpAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUAdQsIGShDj/pboddJxoKLMsc8YgwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg4wDQYJKoZI
hvcNAQELBQADggEBAIyINd090GeZpxD6XPmEeysonu2lGva+DVN6EEYQeaRySWcr
4Mha12Ff4jGQUGLz9ODSV5mQWh+Jq2Vv4ZUq24rlm1z2sdkZJP1GtTmHK5AnmVD0
Uy/7KyOzHfOFncXYXuebQ2qhLhzykGy5eYyNgLNOacyMwOHiMomCANcuyZj9HXHY
m4M8FSNVm5snBJjrdXu2IcumbHzirWRRXpS9qJBeVdgNp1bEgoonagu7nu/aqRxW
LPU6U2wHvTcwAOwtMFVfqSmaqYCs6vuCrJEw1DiJCASAmi/Vr9XqrUtwNYHVSpoF
ApQN2RGH+P9KKzL9D8UzaSa6I+Ey1CrFpkwWuAI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:33 2025 by rpki-client