Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203231383539.roa
File: 33312e362e32372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 2GULyVnf74sZSeZywNWiOexrVBGVfdPDHglMUQK7oDI=
Subject key identifier: D0:11:7E:7D:12:D5:CD:48:42:85:AA:9F:12:E7:9F:56:71:DA:B3:D0
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0BD30A5207F70733282EDF480D7B500196C4D68A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203231383539.roa
Signing time: Tue 09 Jan 2024 09:49:23 +0000
ROA not before: Tue 09 Jan 2024 09:44:23 +0000
ROA not after: Tue 07 Jan 2025 09:49:23 +0000
asID: 21859
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d3:0a:52:07:f7:07:33:28:2e:df:48:0d:7b:50:01:96:c4:d6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 9 09:44:23 2024 GMT
Not After : Jan 7 09:49:23 2025 GMT
Subject: CN=D0117E7D12D5CD484285AA9F12E79F5671DAB3D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:e0:7b:71:66:63:59:fb:34:90:73:a5:08:
14:4c:ce:8d:38:f4:b9:de:61:98:39:18:c8:2e:c7:
66:f2:30:d3:9d:85:f0:fb:ab:ab:7f:ee:58:35:73:
4d:84:0e:26:5e:cd:08:86:80:8f:85:52:af:40:4d:
a2:ab:1b:c5:95:63:2b:a7:00:01:37:52:58:0c:ec:
ec:9b:6f:fb:69:c5:8d:91:ce:53:2b:b8:cc:57:78:
5e:19:b7:ea:f4:c4:01:c0:60:dc:b4:c8:a5:a3:28:
bf:d2:cb:dc:bc:57:a8:60:b7:b5:ac:9f:0b:07:05:
b2:ad:bc:4e:d8:90:ad:25:22:27:80:b3:61:9b:e0:
39:b2:ad:59:ea:9c:33:35:91:f8:5e:69:77:d6:cf:
04:11:0f:df:13:e3:d9:b5:a9:2d:74:9a:02:52:ef:
24:9c:a8:13:24:fe:68:a3:e1:86:06:f6:f4:70:23:
ca:af:a7:e2:1d:0b:18:3b:dc:0a:aa:41:99:8b:4f:
ff:0b:b1:51:5f:e7:a6:5e:aa:cf:02:33:72:38:99:
d3:73:8c:0d:76:68:87:a4:31:0c:6e:ae:5e:7e:57:
7d:12:80:a5:83:bb:65:5f:d0:1e:e2:df:63:db:02:
28:b8:30:e2:b8:89:2d:94:23:fc:5e:91:49:03:97:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:7E:7D:12:D5:CD:48:42:85:AA:9F:12:E7:9F:56:71:DA:B3:D0
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:93:20:11:29:3a:c8:70:45:9c:f4:f1:54:49:01:7a:7c:b2:
24:28:63:15:f6:4e:4c:4d:4c:da:bc:49:91:2d:6b:4f:3b:9f:
c9:21:79:ce:1d:52:b2:2a:8e:f1:da:55:de:bf:fd:76:c4:b8:
ff:40:a9:3f:10:f4:98:69:e5:c7:75:db:53:43:ec:a6:e6:33:
4a:d1:03:86:24:3b:0e:f8:5c:ee:1f:dd:20:cf:63:26:0f:a8:
d3:80:f5:37:d4:ab:91:75:cb:64:21:08:ef:59:0f:37:b5:b8:
28:ab:8f:8e:a5:6e:fa:da:6b:85:84:18:7b:02:e5:43:ac:0e:
06:ca:3f:ee:e8:70:47:a4:bc:dc:9b:23:bb:15:3a:c0:43:82:
19:a0:d9:dc:ba:a7:6f:86:5c:2f:f7:b0:8a:59:45:99:f2:2b:
b3:ca:2f:1e:4b:3e:81:ed:db:18:48:05:4f:0c:ab:91:ea:46:
ec:c0:b9:c4:1c:b4:b9:0c:fc:10:bc:a5:50:c7:7f:bf:db:48:
a4:4f:46:37:f6:83:a3:f7:a6:2e:61:de:93:c5:d5:75:e9:70:
d4:6a:58:b8:51:44:b6:44:d2:0d:01:82:79:6f:f6:31:a3:d9:
23:37:09:0c:8b:f5:27:62:6c:cd:d3:37:27:cc:00:af:a3:28:
8e:03:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 03:18:46 2024 by rpki-client on console-fra.rpki-client.org