Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
File: 33312e362e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 15kB/rwS/minnHXkakGTvJHtKSxp9r7Pgm7gqwht9SE=
Subject key identifier: 75:00:52:53:D2:B1:14:FC:70:7D:64:70:A2:D5:E9:5C:95:77:41:6B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 24B21260EFB8DD6AC238251143E3E4A3B1D88506
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Aug 2024 00:01:21 +0000
ROA not before: Wed 21 Aug 2024 23:56:21 +0000
ROA not after: Thu 21 Aug 2025 00:01:21 +0000
asID: 834
IP address blocks: 31.6.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 17:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b2:12:60:ef:b8:dd:6a:c2:38:25:11:43:e3:e4:a3:b1:d8:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 21 23:56:21 2024 GMT
Not After : Aug 21 00:01:21 2025 GMT
Subject: CN=75005253D2B114FC707D6470A2D5E95C9577416B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:92:92:95:4e:27:9f:45:c3:27:0b:4c:64:
af:dd:a8:52:2e:9c:eb:c4:68:79:15:ba:d8:a8:a1:
60:2c:0c:ef:af:20:35:43:ac:ad:3e:b2:21:c5:7a:
13:18:cd:a7:52:59:5b:f5:31:60:fe:80:cc:ad:f9:
c7:6b:fb:05:57:ce:17:6f:64:fa:e2:b2:4c:9c:28:
a6:f3:4b:3f:00:e7:d9:dc:de:cd:30:03:ae:5f:ba:
e7:2d:2c:69:28:4d:c8:46:69:c3:0d:3d:f8:f2:6a:
b6:13:d8:33:ab:aa:b1:d6:ba:67:ed:63:bc:71:b1:
c3:4a:d2:0b:36:fa:ee:df:66:6a:7f:7e:74:65:af:
85:77:cc:c2:b3:c7:11:bf:0c:01:a6:71:48:4c:ef:
44:95:e2:63:a8:02:cc:4d:fc:3a:9e:98:d6:77:5e:
5e:1d:e2:12:45:c2:71:ec:27:da:4b:23:ca:69:02:
c2:f3:4a:cb:84:6b:85:a3:f1:02:7d:7d:ef:50:1e:
e3:dc:e6:e4:4b:95:76:00:01:85:10:40:29:da:55:
21:20:7f:af:b0:56:30:49:2d:3e:e3:a7:68:ee:35:
ab:d3:b7:9b:11:8e:12:28:01:a2:ce:98:cc:2c:72:
74:b1:25:71:62:5b:cd:f1:32:8d:86:53:7a:92:65:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:52:53:D2:B1:14:FC:70:7D:64:70:A2:D5:E9:5C:95:77:41:6B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.25.0/24
Signature Algorithm: sha256WithRSAEncryption
47:17:30:13:7e:c6:67:6c:5f:10:29:36:b8:9c:0b:81:1c:8e:
2b:ec:e4:44:b8:74:a7:b2:84:d1:d5:30:2b:c5:f5:54:23:f9:
0a:68:de:a5:1e:e8:5b:7f:e0:ea:8c:a3:c5:3e:e9:a4:bd:ec:
48:9d:b9:48:9f:6c:e0:d2:c6:1f:b4:2f:29:58:ee:51:b0:7b:
87:ec:73:41:59:05:98:b7:d2:10:cf:7a:ab:75:df:8b:c2:15:
4b:be:f0:20:48:38:88:64:bf:90:10:5e:de:f0:c8:d3:fb:18:
f3:d1:ba:7e:f5:4f:96:0d:1b:44:61:0c:0d:5d:30:60:28:02:
5b:e2:49:aa:ef:08:f7:c1:bd:ef:25:81:eb:5c:6c:f1:3e:e0:
01:8e:a7:95:a2:d5:aa:8c:b0:64:eb:70:9f:92:1a:28:de:6a:
04:0b:a7:32:6a:4d:03:c2:4a:c6:73:f9:04:71:39:b3:a5:f7:
6c:2d:31:c4:0c:9f:46:cb:2b:aa:a0:13:19:cb:d9:27:94:3e:
f9:cc:29:e5:af:af:e7:ce:35:9c:5e:e9:b1:55:65:81:da:54:
00:68:14:ce:fd:3f:44:41:4b:4f:6c:bf:02:e3:03:e4:5d:e0:
eb:c2:79:24:3e:86:3b:53:09:c7:74:f3:6a:df:ba:e3:50:dc:
49:24:dc:81
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUJLISYO+43WrCOCURQ+Pko7HYhQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA4MjEyMzU2MjFaFw0yNTA4MjEwMDAxMjFaMDMxMTAvBgNV
BAMTKDc1MDA1MjUzRDJCMTE0RkM3MDdENjQ3MEEyRDVFOTVDOTU3NzQxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTpKSlU4nn0XDJwtMZK/dqFIu
nOvEaHkVutiooWAsDO+vIDVDrK0+siHFehMYzadSWVv1MWD+gMyt+cdr+wVXzhdv
ZPriskycKKbzSz8A59nc3s0wA65fuuctLGkoTchGacMNPfjyarYT2DOrqrHWumft
Y7xxscNK0gs2+u7fZmp/fnRlr4V3zMKzxxG/DAGmcUhM70SV4mOoAsxN/DqemNZ3
Xl4d4hJFwnHsJ9pLI8ppAsLzSsuEa4Wj8QJ9fe9QHuPc5uRLlXYAAYUQQCnaVSEg
f6+wVjBJLT7jp2juNavTt5sRjhIoAaLOmMwscnSxJXFiW83xMo2GU3qSZcPBAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUdQBSU9KxFPxwfWRwotXpXJV3QWswHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzUyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBhkwDQYJKoZI
hvcNAQELBQADggEBAEcXMBN+xmdsXxApNricC4Ecjivs5ES4dKeyhNHVMCvF9VQj
+Qpo3qUe6Ft/4OqMo8U+6aS97EiduUifbODSxh+0LylY7lGwe4fsc0FZBZi30hDP
eqt134vCFUu+8CBIOIhkv5AQXt7wyNP7GPPRun71T5YNG0RhDA1dMGAoAlviSarv
CPfBve8lgetcbPE+4AGOp5Wi1aqMsGTrcJ+SGijeagQLpzJqTQPCSsZz+QRxObOl
92wtMcQMn0bLK6qgExnL2SeUPvnMKeWvr+fONZxe6bFVZYHaVABoFM79P0RBS09s
vwLjA+Rd4OvCeSQ+hjtTCcd082rfuuNQ3Ekk3IE=
-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org