Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
File: 33312e362e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OChXfd9Zm+0dyxHQY4AACYNl3OU8uE8OtMGtpSE05Sw=
Subject key identifier: E7:4D:94:4C:56:3A:8A:F5:4D:CB:7B:DE:A3:18:29:A7:87:22:96:64
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 03C665DF2A4C157E9032FA3A522EAD15438D8F5D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 May 2024 10:08:49 +0000
ROA not before: Thu 30 May 2024 10:03:49 +0000
ROA not after: Thu 29 May 2025 10:08:49 +0000
asID: 834
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 12:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c6:65:df:2a:4c:15:7e:90:32:fa:3a:52:2e:ad:15:43:8d:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 30 10:03:49 2024 GMT
Not After : May 29 10:08:49 2025 GMT
Subject: CN=E74D944C563A8AF54DCB7BDEA31829A787229664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:89:30:c8:6e:0d:b2:ca:03:77:23:80:9e:
40:e4:f2:4d:06:ed:39:27:fe:99:c6:ec:b2:5c:6f:
85:4a:89:18:2a:3a:4c:bf:4c:e3:ba:14:a4:d4:d0:
c8:af:41:55:0b:cc:e8:40:d7:8a:f8:fd:0f:1a:1c:
9f:b1:e5:b5:84:e4:de:da:62:4b:ea:66:97:45:cd:
3d:da:e2:87:f1:09:4c:55:04:c3:96:cc:69:c5:ca:
97:88:94:3a:49:8a:b8:d8:62:11:ea:39:a8:dd:85:
61:a5:b5:4f:5f:65:16:d6:07:7a:1c:7d:de:ba:a2:
69:13:2b:b2:7a:16:9e:42:f3:a6:27:18:4a:66:7d:
7c:26:82:f2:76:f8:23:59:34:6a:4b:92:e1:9b:9b:
32:a3:c9:12:29:fc:83:01:0e:60:9d:4d:93:8a:bc:
a3:e7:2c:11:6a:5a:f9:5d:76:f0:56:ac:32:3a:74:
bc:b8:98:92:39:c2:df:f1:f8:54:75:4e:d3:29:12:
4c:22:4a:de:94:06:e9:2e:6b:be:74:32:c9:27:1d:
cf:e8:07:f5:b1:42:cc:b0:59:6c:19:f7:fd:ed:e4:
31:fb:71:fe:4f:09:10:e5:4e:ed:2e:9c:eb:60:75:
f0:4e:77:29:19:22:d9:fd:9f:4e:01:06:f1:8b:70:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4D:94:4C:56:3A:8A:F5:4D:CB:7B:DE:A3:18:29:A7:87:22:96:64
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ae:f8:a6:4e:8f:44:26:c5:f3:24:98:40:a4:d8:4c:e8:16:
d9:41:94:c4:10:29:1e:05:af:36:1a:52:29:db:a1:78:e4:fb:
ff:7d:d3:6c:24:88:e7:2f:6d:ce:14:f6:15:b0:27:e1:3a:85:
e0:ed:2e:c5:49:03:8a:6a:e3:8b:07:59:3a:1f:66:5a:0c:d5:
1c:75:9d:2f:19:0b:58:68:1c:3e:0b:95:49:b7:54:fb:81:77:
a3:88:ec:35:cf:0c:fb:11:2b:cc:60:c4:be:1f:a8:ac:ee:12:
dd:6a:91:fc:e0:b0:f0:42:a4:d2:dc:be:db:6a:f7:01:02:1e:
29:e8:b4:58:e0:f0:89:48:98:bc:11:4a:7e:59:4a:dd:f5:9c:
11:8b:25:28:76:3c:bd:cd:43:c1:c6:da:20:40:a3:fa:e8:4c:
cc:03:4f:e6:8e:a4:f6:99:ee:97:ab:80:08:84:2b:c6:6a:0e:
08:73:3c:6e:64:3f:1e:92:8c:4c:c3:31:0a:da:08:bb:44:b7:
7d:a2:fc:b2:2d:79:8c:d3:7d:25:9e:c5:b4:84:cc:27:e7:c9:
49:45:6d:9f:fc:ea:01:be:f0:a7:b6:c8:c8:78:b2:aa:e8:b7:
ea:d5:5d:4a:78:8a:d2:cf:07:ac:47:dd:e6:c2:f9:9a:20:b2:
c4:c4:a3:b8
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUA8Zl3ypMFX6QMvo6Ui6tFUONj10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA1MzAxMDAzNDlaFw0yNTA1MjkxMDA4NDlaMDMxMTAvBgNV
BAMTKEU3NEQ5NDRDNTYzQThBRjU0RENCN0JERUEzMTgyOUE3ODcyMjk2NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+4kwyG4NssoDdyOAnkDk8k0G
7Tkn/pnG7LJcb4VKiRgqOky/TOO6FKTU0MivQVULzOhA14r4/Q8aHJ+x5bWE5N7a
YkvqZpdFzT3a4ofxCUxVBMOWzGnFypeIlDpJirjYYhHqOajdhWGltU9fZRbWB3oc
fd66omkTK7J6Fp5C86YnGEpmfXwmgvJ2+CNZNGpLkuGbmzKjyRIp/IMBDmCdTZOK
vKPnLBFqWvlddvBWrDI6dLy4mJI5wt/x+FR1TtMpEkwiSt6UBukua750MsknHc/o
B/WxQsywWWwZ9/3t5DH7cf5PCRDlTu0unOtgdfBOdykZItn9n04BBvGLcGuXAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU502UTFY6ivVNy3veoxgpp4cilmQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg4wDQYJKoZI
hvcNAQELBQADggEBAAWu+KZOj0QmxfMkmECk2EzoFtlBlMQQKR4FrzYaUinboXjk
+/9902wkiOcvbc4U9hWwJ+E6heDtLsVJA4pq44sHWTofZloM1Rx1nS8ZC1hoHD4L
lUm3VPuBd6OI7DXPDPsRK8xgxL4fqKzuEt1qkfzgsPBCpNLcvttq9wECHinotFjg
8IlImLwRSn5ZSt31nBGLJSh2PL3NQ8HG2iBAo/roTMwDT+aOpPaZ7pergAiEK8Zq
DghzPG5kPx6SjEzDMQraCLtEt32i/LIteYzTfSWexbSEzCfnyUlFbZ/86gG+8Ke2
yMh4sqrot+rVXUp4itLPB6xH3ebC+ZogssTEo7g=
-----END CERTIFICATE-----
Generated at Thu May 30 17:52:23 2024 by rpki-client on console-ams.rpki-client.org