Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
File: 33312e362e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XHslsV16ZFPTWQ/uUooW71g3pT5me++poKUAhgy3c/4=
Subject key identifier: 26:A7:F0:D1:17:7B:35:21:F3:49:3F:23:6D:BC:F5:18:79:74:A2:9E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 01B501125813CC8018BA25360DD5C9C52980213E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
Signing time: Fri 09 Feb 2024 00:03:17 +0000
ROA not before: Thu 08 Feb 2024 23:58:17 +0000
ROA not after: Fri 07 Feb 2025 00:03:17 +0000
asID: 834
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 19:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b5:01:12:58:13:cc:80:18:ba:25:36:0d:d5:c9:c5:29:80:21:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 8 23:58:17 2024 GMT
Not After : Feb 7 00:03:17 2025 GMT
Subject: CN=26A7F0D1177B3521F3493F236DBCF5187974A29E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:ae:a6:50:63:49:83:cd:bc:ad:78:12:22:
da:6d:6c:c4:ac:e5:e3:ae:cb:d1:6e:a5:12:4f:2a:
73:d3:7e:8e:a8:c9:3c:4a:60:51:95:78:ce:8b:d2:
1c:96:fc:d8:81:0f:e7:a9:28:97:04:26:04:17:e9:
4b:c7:80:4f:5b:3c:79:54:39:3f:3d:c9:bd:fc:af:
ae:7e:49:77:5a:2b:7e:be:c6:4d:e8:d4:83:eb:4f:
61:d7:fb:d0:9a:04:01:f5:32:d1:57:ef:f3:5d:6a:
19:74:fa:eb:38:94:62:55:6c:5c:87:34:e0:43:4f:
fc:1b:fd:c3:bb:39:d4:14:9b:3d:d8:1d:66:19:fe:
ba:e5:83:94:3b:2d:63:f6:6f:b0:41:71:61:a5:de:
ae:5b:d4:0b:90:e6:95:08:31:7d:b7:f8:9f:01:01:
ee:bd:06:97:d5:3c:f0:a9:07:e1:0f:4e:33:74:8b:
d8:50:5c:fd:44:dd:1f:08:e7:35:a5:b5:e3:9b:e7:
df:8e:40:33:fb:17:c9:33:f3:dd:c5:f7:01:59:91:
d6:84:35:17:61:33:83:d2:b6:a6:9b:7d:57:91:ad:
e0:2b:72:d5:44:6f:64:39:6d:cb:5e:5d:11:83:22:
fe:c4:96:6f:59:0c:33:4e:50:db:ec:41:ff:80:1b:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:F0:D1:17:7B:35:21:F3:49:3F:23:6D:BC:F5:18:79:74:A2:9E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:46:15:51:19:b9:84:bf:16:bc:ef:01:cb:3d:ec:0b:1b:fe:
22:60:d6:fc:19:f4:64:98:d3:2c:9a:41:64:b6:42:c2:19:db:
79:40:65:ae:60:09:69:5c:2f:09:29:e2:7b:78:7a:21:99:68:
05:6f:67:49:96:69:29:cd:60:7f:c4:02:f9:a3:e3:f8:b5:d4:
02:a3:41:80:cb:0f:fc:8e:d4:15:33:68:8d:e3:db:f0:e7:1f:
ed:32:e9:2f:36:4d:fc:e7:50:29:a7:4a:09:9b:ed:4d:fe:b9:
f8:4c:10:59:ec:2e:0e:e7:bf:7d:31:e1:0a:a3:57:85:6f:9c:
9d:be:c9:2a:05:79:bf:d0:81:73:9e:d6:07:c0:0a:da:ed:43:
5e:0d:40:bf:06:33:fe:fc:7e:94:9b:3e:03:84:e7:c1:14:e0:
f6:04:e8:f7:c0:84:0a:7e:6f:b7:e3:10:af:94:b1:b8:b6:c8:
50:3f:bd:aa:11:77:98:c7:5b:ee:72:4e:d8:6e:88:a3:ca:cd:
b6:4e:4b:04:fe:3a:9e:d4:b6:7a:6c:f7:bf:00:9e:f4:a4:8a:
a2:fa:22:a0:fe:2a:de:3a:ce:9d:c6:00:c1:b2:cc:56:08:7b:
6a:a4:64:48:79:76:2b:5e:ad:58:fd:0e:a8:2b:38:e3:13:18:
13:a8:ab:e9
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 10 20:13:14 2024 by rpki-client on console-fra.rpki-client.org