Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32322d3234203d3e20383334.roa
File: 33312e362e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: ygGH3ojD4l0E/BKXnb4/H39JThfKfLGyx8DwoLRyIa0=
Subject key identifier: D7:68:19:A8:E1:46:E8:C9:C6:A7:52:88:93:B9:D2:C5:A3:32:D1:D8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 40E81061B77047B297CA1EBC77EC34042B0A6428
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32322d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:21:04 +0000
ROA not before: Mon 02 Oct 2023 05:16:04 +0000
ROA not after: Mon 30 Sep 2024 05:21:04 +0000
asID: 834
IP address blocks: 31.6.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e8:10:61:b7:70:47:b2:97:ca:1e:bc:77:ec:34:04:2b:0a:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:16:04 2023 GMT
Not After : Sep 30 05:21:04 2024 GMT
Subject: CN=D76819A8E146E8C9C6A7528893B9D2C5A332D1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:dd:15:f6:29:11:69:fc:eb:5f:a5:a3:0c:
81:7b:9b:8a:64:0f:e9:bd:ac:95:04:60:69:75:57:
23:f9:8f:53:d4:31:1f:3b:ef:f5:f3:b2:d9:71:4c:
25:5f:92:92:69:81:60:d4:0e:fa:42:c0:a9:6f:c2:
c0:83:0c:15:27:70:61:4d:9f:69:7b:64:aa:9c:58:
97:4e:78:dc:ea:08:d8:28:52:f1:34:1a:e7:70:27:
fd:cc:66:bb:d7:bb:07:78:5d:05:94:09:4b:52:3b:
4e:67:01:c2:0c:8e:68:e0:a4:c2:05:10:02:42:39:
eb:35:a7:ff:e6:e1:ad:fc:0c:37:ce:be:f9:81:68:
c5:9d:81:24:4c:4b:87:8e:cd:a0:66:b4:b7:f6:d5:
7d:99:24:ea:76:a9:59:ee:dc:0e:64:74:e0:34:33:
cb:b2:28:93:1b:0a:61:fd:b1:28:35:1d:6b:a6:2f:
db:a4:8c:7e:45:ea:9b:32:06:8e:93:7d:83:64:9f:
73:85:c4:cb:71:0b:ce:c8:54:67:7c:d4:b8:76:eb:
20:48:37:c2:9b:74:19:a7:1f:41:c9:91:5b:20:83:
61:b8:3c:1d:0a:23:f3:15:ee:e6:8f:78:b2:43:5b:
30:72:8d:ad:27:53:83:c1:ad:23:0c:9d:a3:e0:90:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:19:A8:E1:46:E8:C9:C6:A7:52:88:93:B9:D2:C5:A3:32:D1:D8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
55:67:40:b7:39:94:ab:17:c3:e8:21:76:16:07:8d:8c:41:68:
a2:9b:28:f5:a0:72:98:bf:f5:7d:8b:44:58:46:24:ea:28:92:
91:d4:f2:0f:97:b4:05:ec:99:fe:4e:77:a2:67:bf:a4:8b:eb:
74:67:fa:59:4d:8f:52:06:5a:2b:ad:0e:a0:8a:0a:8d:e1:fa:
6a:fe:27:c7:5d:76:81:5e:6e:d5:93:61:f1:f8:7e:c8:2b:fc:
03:22:0d:46:ef:d8:02:ca:bc:b3:73:5b:53:e0:1f:5d:ac:98:
8d:28:c0:e3:36:69:2c:b4:88:c7:f1:2f:19:42:ed:5d:bc:54:
3e:d1:05:b1:47:38:82:0b:8b:1b:71:bb:e7:8e:ae:f0:99:19:
92:a8:20:a8:ef:e8:83:f5:bc:ae:f8:c8:c0:ed:2e:ba:24:b0:
dd:09:80:07:6d:c0:b9:d1:d6:48:3c:70:53:0d:a9:71:96:20:
64:5f:1d:e2:f4:d8:ec:16:a6:32:27:f0:a4:29:33:d7:b6:49:
d3:f3:21:09:1f:ad:5f:80:27:29:30:ef:9f:96:a2:98:ec:38:
22:ea:03:50:ec:59:66:7a:a0:51:d0:bb:fa:6e:0a:d2:75:68:
7b:3e:41:55:0b:1a:43:ac:01:a1:cf:0c:d4:f2:63:cf:68:37:
08:42:82:18
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 17 11:00:57 2023 by rpki-client on console-fra.rpki-client.org