Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323030313933.roa
File: 33312e362e33322e302f32342d3234203d3e20323030313933.roa (raw, json)
Hash identifier: OFpYcJbW0w9Q3Tz46XcbQKK0iBPIzIpaovp/vJbzAi0=
Subject key identifier: 7F:7B:C0:DA:B2:06:45:CD:89:F9:19:04:96:04:89:AB:91:5F:07:C9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1DA46CF7FB6184285EA56AEFC6CB43EA86F31E5B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323030313933.roa
Signing time: Fri 12 Jan 2024 10:16:14 +0000
ROA not before: Fri 12 Jan 2024 10:11:14 +0000
ROA not after: Fri 10 Jan 2025 10:16:14 +0000
asID: 200193
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a4:6c:f7:fb:61:84:28:5e:a5:6a:ef:c6:cb:43:ea:86:f3:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 12 10:11:14 2024 GMT
Not After : Jan 10 10:16:14 2025 GMT
Subject: CN=7F7BC0DAB20645CD89F91904960489AB915F07C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:46:cb:88:4e:8e:f0:59:3b:af:1a:47:61:
a6:21:6c:15:56:ea:4d:cc:86:db:ef:0d:11:e7:12:
0a:d1:ab:29:8a:71:be:17:4a:6c:2d:ee:75:d8:05:
44:a7:b0:7c:19:1f:4e:32:10:92:6c:eb:3d:02:0f:
32:ee:2f:82:8b:cd:74:29:3e:fd:d7:45:e3:51:08:
92:d5:74:7e:6d:6f:75:ef:69:35:fa:c7:f3:b8:22:
ce:ff:35:c9:83:c1:1a:1d:5b:ae:a1:6a:58:04:06:
f9:b8:12:df:cf:c2:92:34:cd:d0:96:b1:38:ae:16:
ba:f8:ca:3c:97:d1:a5:fb:e2:05:94:8d:ed:d8:7f:
3e:3a:33:fe:ba:45:1d:d9:9a:ce:d6:ef:4a:29:f7:
6f:79:5b:5f:a8:7e:be:42:2a:8e:0c:82:90:3e:e1:
2e:46:6e:d8:07:91:94:7f:14:bf:a7:35:33:08:ae:
b0:37:fd:dc:bf:0f:57:c4:e6:86:a2:05:db:75:42:
cc:96:49:37:de:84:e5:4e:47:b8:94:38:81:0d:04:
52:a4:3c:82:76:ac:a1:59:be:0f:85:91:07:70:98:
56:4a:2a:15:87:2f:77:8a:d7:6a:d3:3e:2c:f5:c7:
d7:7e:3f:84:dc:ec:c0:57:01:18:ff:ef:eb:2d:61:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:C0:DA:B2:06:45:CD:89:F9:19:04:96:04:89:AB:91:5F:07:C9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323030313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:55:83:4c:6e:d4:09:31:66:fb:8f:d5:e7:bd:04:17:a5:10:
d3:fd:1c:df:11:30:ec:28:0f:83:b2:05:27:e6:5d:b4:46:8a:
91:37:d9:a1:74:ab:eb:01:65:2e:d9:8f:01:e9:3a:fc:ee:a1:
e4:a3:3a:3c:cb:34:a4:f2:ad:ce:e8:b5:f3:dd:9b:ec:b5:a9:
1a:45:35:91:63:95:6b:e0:f7:93:9d:17:8d:05:03:e6:ce:7f:
78:df:9b:17:1a:0b:a8:ae:40:cb:d4:f8:74:e0:01:f9:8f:08:
c9:3c:d5:45:83:c3:0c:ab:fe:9b:6c:03:dd:6e:24:f6:a4:cf:
22:02:84:a5:b2:7b:d3:03:a7:f9:4f:71:db:87:6b:6d:17:8f:
d4:2d:ba:f4:c4:5e:70:4b:52:49:42:1d:30:15:fd:e1:af:94:
a2:8f:89:91:f7:bb:ca:87:12:dd:8c:12:79:b9:96:99:c5:94:
3a:2d:a6:94:88:f9:da:c1:09:1b:09:9f:86:47:2f:4b:87:96:
ed:42:75:b6:ce:ef:29:9c:fd:c4:44:e4:26:11:1b:09:03:84:
26:e8:9f:d3:cc:78:4a:68:a0:9a:ff:65:40:58:01:c5:87:6b:
eb:f0:b6:5c:9e:57:21:1b:02:07:21:1a:f7:f2:4b:2f:bc:bd:
5a:d6:f8:c1
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 29 14:02:48 2024 by rpki-client on console-ams.rpki-client.org