Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e322e302f32342d3234203d3e203631333137.roa
File: 33312e362e322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: rSsEZ//nKnJXUm9/xccEd+TJeCeeGH8BRjtc9h7daQg=
Subject key identifier: EC:50:6C:A5:E5:27:AB:C1:AA:FC:14:CD:59:48:07:15:7C:65:38:D4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 27BCAC8642F9AE3DFDAEF42267CEA86786A92FB4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e322e302f32342d3234203d3e203631333137.roa
Signing time: Tue 17 Sep 2024 14:54:57 +0000
ROA not before: Tue 17 Sep 2024 14:49:57 +0000
ROA not after: Tue 16 Sep 2025 14:54:57 +0000
asID: 61317
IP address blocks: 31.6.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 12:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bc:ac:86:42:f9:ae:3d:fd:ae:f4:22:67:ce:a8:67:86:a9:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 17 14:49:57 2024 GMT
Not After : Sep 16 14:54:57 2025 GMT
Subject: CN=EC506CA5E527ABC1AAFC14CD594807157C6538D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:a1:b4:46:ae:30:7d:5f:a9:f7:41:fa:55:
a9:74:db:78:6d:bf:7d:9c:dc:75:4b:7a:64:67:5a:
bd:74:46:4d:24:24:69:af:dc:72:7b:8f:3c:19:c3:
8c:8a:fe:f9:e8:a4:0e:95:54:16:2e:3f:c4:67:2f:
41:54:e1:e5:77:48:28:88:64:42:69:42:69:ec:7d:
db:9f:6d:9b:e5:cf:c9:47:43:6e:89:e7:d7:e8:7c:
f2:82:78:3d:1a:01:3d:62:d6:25:10:ee:d3:3f:c6:
70:9f:18:fd:bc:2a:13:8a:45:27:ce:92:6e:4d:ed:
66:5d:b5:2a:f5:1d:29:8f:66:07:48:22:e9:84:43:
1a:02:0d:14:45:80:dc:32:fe:56:74:91:e5:0f:ba:
b2:34:29:b5:99:93:8f:fd:ee:6b:10:c0:79:ab:84:
7e:29:ff:3a:32:ed:59:dc:19:d9:26:3f:82:5b:a4:
93:4c:a0:be:7d:ac:a5:a1:eb:8e:b8:30:c2:8a:b8:
e6:bf:52:99:8a:06:4d:39:fa:b7:26:6b:b1:09:1d:
80:85:97:21:b0:bf:22:17:66:9f:11:93:ee:f3:67:
c1:f9:6f:ad:2a:2d:3d:1f:f7:6a:37:4f:d5:86:20:
e9:78:0c:e1:9a:d0:b1:ca:40:27:fa:3f:48:e8:e9:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:6C:A5:E5:27:AB:C1:AA:FC:14:CD:59:48:07:15:7C:65:38:D4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:37:7c:21:3f:10:e1:35:d8:0d:b6:02:32:e7:00:aa:45:4d:
bf:34:26:38:d4:82:14:05:4a:5c:68:18:54:7f:68:60:be:8a:
48:ee:80:63:cd:1b:4a:60:96:af:25:b4:0f:0b:80:03:cc:d1:
53:5e:42:80:2f:a6:1f:00:72:89:11:4b:7b:af:9f:5c:ff:70:
3f:ec:05:f0:08:b7:dd:7d:ce:54:03:9d:cf:fe:25:7a:15:2d:
d7:70:f8:80:d4:3c:bf:64:d7:ad:ab:7e:c5:2c:43:23:7f:25:
66:17:bf:b6:52:4c:32:fb:a1:e8:26:cb:de:c4:25:21:9e:cc:
c6:f9:f2:c2:90:14:37:44:a2:c5:91:92:14:94:af:5a:92:04:
08:74:cb:2b:ef:aa:1a:2b:fa:2c:59:a2:5d:04:a9:e7:6c:89:
2d:48:e5:92:8a:6c:f5:8c:91:92:4b:e8:69:3e:c4:d8:5f:9d:
19:c1:50:be:f9:1b:ce:aa:9c:13:9f:76:d2:9d:01:93:b0:ae:
5a:28:9c:8f:2c:e9:b0:10:2c:a1:05:9f:c8:87:a4:8f:2a:7d:
0e:76:a8:74:24:4b:74:7a:e8:6c:11:6c:2c:2c:cc:29:d8:c2:
5f:52:bb:d7:74:be:36:0c:ea:82:98:aa:b2:a1:87:8e:b7:ac:
7d:2f:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:31 2024 by rpki-client on console-ams.rpki-client.org