Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20383334.roa
File: 33312e362e31362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bjzlvlI/305VDPNK8auk8gU85JGh3NWR+VNlau/mGk8=
Subject key identifier: 02:DB:43:98:67:76:CA:D1:54:E4:4E:1E:5E:26:5F:96:DC:52:D8:A3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2A2549DFE242E214435A232E747408B98972C98A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:58 +0000
ROA not before: Mon 02 Oct 2023 05:15:58 +0000
ROA not after: Mon 30 Sep 2024 05:20:58 +0000
asID: 834
IP address blocks: 31.6.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 13:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:25:49:df:e2:42:e2:14:43:5a:23:2e:74:74:08:b9:89:72:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:58 2023 GMT
Not After : Sep 30 05:20:58 2024 GMT
Subject: CN=02DB43986776CAD154E44E1E5E265F96DC52D8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:b1:cc:ed:7c:f9:5b:8d:3b:a5:95:41:20:
4a:aa:24:e9:5d:a4:2b:a1:93:cc:ac:f3:e6:2b:06:
d4:ad:6e:99:4c:6b:46:07:db:46:4d:65:a6:7b:ab:
aa:c3:8a:b5:22:33:61:7c:53:86:fc:cf:cc:70:98:
89:db:37:63:ba:f5:26:21:06:8b:ce:2a:a6:4a:d0:
e1:26:46:69:40:c8:e3:1d:17:c3:0e:c8:eb:b7:d2:
2e:88:d6:27:d6:13:65:1e:1d:44:d2:6b:a1:85:78:
2a:50:39:8e:d8:43:cb:98:42:29:e5:37:78:f3:7e:
67:d8:32:0f:19:97:49:0d:78:37:35:d6:3c:95:10:
27:c6:aa:d9:94:0f:ae:15:e2:d5:e2:00:0e:af:a0:
67:11:46:04:f5:25:2e:55:f0:df:35:d6:19:c9:65:
de:1f:20:7c:d1:22:7a:27:c7:6d:39:10:8f:1e:8f:
f7:d6:4b:3f:2e:fc:09:62:e4:c0:cf:b4:fb:e7:09:
fa:2a:54:74:54:4e:c9:1b:27:de:6b:d3:af:3a:cf:
3e:6f:ec:44:54:7d:f0:6b:40:82:67:5b:3d:49:a7:
71:e9:a5:8b:d6:4c:1b:9a:78:e3:b1:0d:f0:05:da:
f3:ad:1a:8f:5d:97:c7:e0:3f:1a:9c:51:b7:45:64:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:43:98:67:76:CA:D1:54:E4:4E:1E:5E:26:5F:96:DC:52:D8:A3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:13:7e:ae:fc:a4:77:c0:59:db:0d:5b:ab:45:a6:31:63:28:
16:c9:fb:17:d1:ba:e3:4b:d9:46:7a:b4:73:cc:54:1e:44:38:
c0:b0:64:13:cd:29:e6:9d:9e:8a:a7:df:09:df:54:4a:8b:8f:
80:e4:2e:22:68:71:5d:5e:cb:05:cf:ce:79:c5:6c:bf:ee:8c:
af:e4:66:40:07:dd:76:a7:e1:6b:9e:d9:49:fa:15:6a:5c:a0:
d9:d6:3f:77:d0:31:11:2d:b5:b8:2d:71:f0:2f:ca:07:ca:55:
c3:52:02:4a:d7:a6:4d:ca:a7:5f:ca:de:ae:88:77:68:cb:3b:
aa:c1:26:08:0b:db:d5:b7:06:e5:9d:4e:d5:e6:5f:f0:a4:c5:
95:3d:ab:c1:d4:7a:7e:5b:03:7e:3f:f3:eb:fe:08:ba:56:88:
c7:6f:f6:ca:ea:97:0f:55:00:93:15:87:ee:27:18:9e:07:b7:
1c:f4:35:fc:ba:5a:fa:d2:34:a6:3e:c3:a8:7a:12:a9:ea:cf:
b4:34:2c:3c:a2:78:ed:81:dd:2f:ac:5d:9c:a6:59:fc:26:af:
31:69:a9:cd:8e:f5:6d:4a:98:aa:4b:1f:9f:59:82:46:44:1b:
cc:71:ee:53:d3:27:46:24:7b:e5:10:5b:69:ab:e1:21:81:27:
12:b9:8c:ad
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 7 14:06:58 2024 by rpki-client on console-ams.rpki-client.org