Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3234203d3e20383334.roa
File: 33312e362e32382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Zad3rm2HnUDdCwNqafMgWdpTYlU2RcJMgoo+PDQQDRI=
Subject key identifier: 38:7A:63:AB:05:A7:11:1E:84:34:A1:90:05:FE:11:44:CB:C0:A6:FF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 79616DD58070E1C69E35B06669ADED5339CD1C02
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 18:41:58 +0000
ROA not before: Thu 08 Feb 2024 18:36:58 +0000
ROA not after: Thu 06 Feb 2025 18:41:58 +0000
asID: 834
IP address blocks: 31.6.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 10:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:61:6d:d5:80:70:e1:c6:9e:35:b0:66:69:ad:ed:53:39:cd:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 8 18:36:58 2024 GMT
Not After : Feb 6 18:41:58 2025 GMT
Subject: CN=387A63AB05A7111E8434A19005FE1144CBC0A6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:38:bc:be:53:20:f5:2f:33:4f:85:72:37:
51:78:20:9b:1d:47:a9:e4:e5:58:30:cf:ee:d6:6a:
37:88:30:d9:1d:2a:7a:60:4a:e1:b7:e5:7f:24:f6:
32:2f:a1:d4:bc:a5:43:2f:e0:ea:10:88:f0:89:19:
d5:7b:b2:71:ca:e8:28:37:61:4e:43:a4:8d:9c:30:
3f:37:77:54:06:39:3c:96:98:60:59:c4:d5:da:bb:
07:64:f5:91:22:15:e2:45:74:36:3e:a0:f6:9e:13:
45:ab:ce:dd:ea:0c:af:28:00:71:06:5e:57:0d:f5:
75:6a:24:af:3e:20:86:91:dc:a1:6e:6e:ae:18:70:
6a:5d:8a:14:34:fb:69:2d:09:2f:64:34:9f:8f:45:
4a:3a:b0:a8:3a:73:37:b9:a1:b7:23:5f:d3:31:e0:
8f:90:2c:ca:c2:c9:af:e3:ae:43:90:a3:1f:d7:dc:
0c:09:a9:c1:2e:7c:4c:e6:c6:ab:59:25:ac:20:4a:
2e:4b:62:72:e5:3d:a6:1d:dc:48:6f:a0:a7:df:1a:
68:34:57:1e:bf:66:18:f8:56:62:d8:fc:2a:e2:84:
fb:14:a7:ad:4e:15:0b:de:13:32:dc:8b:fe:f8:49:
60:13:41:3b:a0:3c:07:21:8d:a0:d5:5f:26:9f:d3:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:63:AB:05:A7:11:1E:84:34:A1:90:05:FE:11:44:CB:C0:A6:FF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:95:61:a9:50:06:68:3f:9d:39:21:1a:8c:a8:56:6e:4c:36:
cb:0a:9c:8b:27:05:56:a1:1c:91:3c:36:a0:c4:d2:dd:d2:45:
cc:3a:65:fc:8d:6f:7b:67:dc:ab:f7:f7:87:c1:dd:43:48:9e:
75:3b:88:c9:9f:3b:58:f1:df:a9:78:75:a4:0d:1f:9c:2a:31:
9b:3a:e6:c7:df:c0:8c:3d:69:25:4d:b4:8b:59:3c:7b:4d:1c:
c1:04:0a:ca:0f:35:bb:08:4f:fd:a4:3d:4d:c5:01:cb:fd:8e:
28:92:aa:4b:02:ec:33:9c:4f:f9:37:4d:1e:73:c7:07:4b:f8:
f7:20:56:5e:4a:92:27:14:dd:42:55:76:5b:34:4d:05:0c:9c:
3b:9b:9a:6b:6f:9c:2d:c5:15:82:63:18:ea:54:a4:6f:58:8c:
38:5e:59:fe:b6:e1:3d:aa:2a:74:87:8f:e2:97:35:15:d3:a7:
95:81:97:3a:a4:5d:a8:15:b8:54:c1:05:d7:79:37:fb:db:06:
1d:d9:9f:55:f6:c1:2f:1e:c9:40:65:29:a7:22:3b:d3:54:22:
49:18:08:6f:61:90:e2:df:a9:48:70:25:21:2e:ef:6c:0f:3b:
6e:33:3c:45:57:fb:f9:00:4e:56:f8:b9:71:7c:47:e5:7b:f7:
a1:c5:5d:fc
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUeWFt1YBw4caeNbBmaa3tUznNHAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDAyMDgxODM2NThaFw0yNTAyMDYxODQxNThaMDMxMTAvBgNV
BAMTKDM4N0E2M0FCMDVBNzExMUU4NDM0QTE5MDA1RkUxMTQ0Q0JDMEE2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzADi8vlMg9S8zT4VyN1F4IJsd
R6nk5Vgwz+7WajeIMNkdKnpgSuG35X8k9jIvodS8pUMv4OoQiPCJGdV7snHK6Cg3
YU5DpI2cMD83d1QGOTyWmGBZxNXauwdk9ZEiFeJFdDY+oPaeE0Wrzt3qDK8oAHEG
XlcN9XVqJK8+IIaR3KFubq4YcGpdihQ0+2ktCS9kNJ+PRUo6sKg6cze5obcjX9Mx
4I+QLMrCya/jrkOQox/X3AwJqcEufEzmxqtZJawgSi5LYnLlPaYd3EhvoKffGmg0
Vx6/Zhj4VmLY/CrihPsUp61OFQveEzLci/74SWATQTugPAchjaDVXyaf0wc5AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUOHpjqwWnER6ENKGQBf4RRMvApv8wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzgyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBhwwDQYJKoZI
hvcNAQELBQADggEBAJ2VYalQBmg/nTkhGoyoVm5MNssKnIsnBVahHJE8NqDE0t3S
Rcw6ZfyNb3tn3Kv394fB3UNInnU7iMmfO1jx36l4daQNH5wqMZs65sffwIw9aSVN
tItZPHtNHMEECsoPNbsIT/2kPU3FAcv9jiiSqksC7DOcT/k3TR5zxwdL+PcgVl5K
kicU3UJVdls0TQUMnDubmmtvnC3FFYJjGOpUpG9YjDheWf624T2qKnSHj+KXNRXT
p5WBlzqkXagVuFTBBdd5N/vbBh3Zn1X2wS8eyUBlKaciO9NUIkkYCG9hkOLfqUhw
JSEu72wPO24zPEVX+/kATlb4uXF8R+V796HFXfw=
-----END CERTIFICATE-----
Generated at Fri Mar 15 13:33:41 2024 by rpki-client on console-fra.rpki-client.org