Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e203634323637.roa
File: 33312e362e32302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: GetJQn1Veskk0TZvezv5krJ2pi3vQbPswIBMY4S/M8E=
Subject key identifier: F1:85:14:26:B9:AF:8C:BD:76:12:14:89:91:74:1E:25:37:94:18:84
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5BB427DF5D9F6EAC6DE9DF6FB46F183E68449DC5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e203634323637.roa
Signing time: Thu 30 Nov 2023 15:24:17 +0000
ROA not before: Thu 30 Nov 2023 15:19:17 +0000
ROA not after: Thu 28 Nov 2024 15:24:17 +0000
asID: 64267
IP address blocks: 31.6.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:27:df:5d:9f:6e:ac:6d:e9:df:6f:b4:6f:18:3e:68:44:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 30 15:19:17 2023 GMT
Not After : Nov 28 15:24:17 2024 GMT
Subject: CN=F1851426B9AF8CBD7612148991741E2537941884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:51:a3:af:c4:a9:b1:95:30:b6:ae:70:4d:
39:1d:7c:c8:b0:1c:42:84:01:be:b5:2b:19:1a:3d:
62:8d:da:59:ab:c3:53:8b:8b:a5:49:f3:db:6c:96:
1e:af:bf:1e:a2:ce:07:36:dd:b3:4b:15:0e:e2:e5:
37:36:87:78:9c:e1:59:bf:2b:d0:7a:45:1e:9e:9e:
8f:cc:97:af:16:c7:0d:78:8b:a8:9f:8c:2a:7a:7a:
a1:2c:c9:dc:38:77:4a:67:fc:9f:bf:67:c4:7b:15:
dc:0f:6f:ac:4b:89:8e:c3:91:98:80:4a:91:1b:52:
b3:b3:d3:2d:ff:dd:90:46:29:2d:4d:9f:13:fe:57:
0c:e8:b4:47:18:bd:30:cb:70:1b:c5:39:9e:b6:2d:
12:ad:d1:15:ca:1b:1c:27:fb:74:35:ae:ff:44:35:
0c:bb:57:59:23:ab:56:7e:9d:e8:0c:af:7e:43:4b:
ba:3e:81:06:ab:fb:ff:dc:b8:99:1e:95:25:d0:76:
98:60:85:90:99:30:9b:44:d0:2e:a7:04:6e:b8:43:
43:e7:dc:71:45:3b:26:07:a6:8e:28:fc:55:8d:94:
99:bb:2c:13:f6:6b:83:15:68:c8:7e:7c:d3:2f:ea:
bb:03:e2:e6:c6:d1:6a:8e:ce:aa:7d:d5:9f:dc:29:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:85:14:26:B9:AF:8C:BD:76:12:14:89:91:74:1E:25:37:94:18:84
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.20.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7a:29:63:9e:e3:0d:e4:11:50:bd:bc:88:09:cc:35:f2:c1:
3c:c9:dc:dd:98:12:e4:30:c2:d2:00:e5:fb:c9:64:d7:7a:9a:
a9:6e:56:11:c3:6e:46:a8:43:63:65:20:c7:e1:0d:87:f0:7c:
8b:5f:86:91:8e:d2:80:0e:77:f6:24:18:85:a9:8e:e5:39:ae:
16:89:02:cc:48:41:02:b3:5d:7b:72:55:33:92:70:75:57:b3:
f9:9b:43:05:49:a0:99:65:32:81:65:35:f0:5c:4d:61:c9:bb:
5d:4d:df:de:8d:51:cb:a0:e0:05:41:37:16:7b:c3:05:94:49:
8c:25:5b:0d:dd:54:68:65:ea:c1:2b:ea:7a:fe:07:34:76:96:
c2:c1:d5:d6:a0:d1:f2:d7:f4:88:4e:c4:55:a8:39:56:d3:ad:
ae:cd:1c:a5:55:89:ea:f4:97:62:28:49:e9:cd:57:c6:17:80:
d3:82:5e:1a:35:03:84:fd:a6:e0:3c:6e:9a:d6:1a:06:2b:f9:
9f:58:fe:49:45:5e:ec:01:bb:34:a3:96:6c:99:77:7f:01:18:
0b:60:94:6e:43:90:b9:5c:06:2c:6b:3f:1e:e6:25:66:f0:77:
ec:3f:d1:df:64:d9:4b:ca:dd:00:12:bd:d1:7d:06:5f:90:bb:
d9:79:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:18 2024 by rpki-client on console-fra.rpki-client.org