Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
File: 33312e362e33322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: DoTMXex09Rs7KAmNclOi02eBPJagSI9/rh8b1/ov49U=
Subject key identifier: 9F:0F:15:C0:E2:D8:1F:0F:E2:AB:CD:2C:7F:CC:A2:E4:30:90:E6:6E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 51C83659A1216F0D40EE047D6942FB9DFB740E1D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
Signing time: Mon 02 Oct 2023 05:23:09 +0000
ROA not before: Mon 02 Oct 2023 05:18:09 +0000
ROA not after: Mon 30 Sep 2024 05:23:09 +0000
asID: 61317
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c8:36:59:a1:21:6f:0d:40:ee:04:7d:69:42:fb:9d:fb:74:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:18:09 2023 GMT
Not After : Sep 30 05:23:09 2024 GMT
Subject: CN=9F0F15C0E2D81F0FE2ABCD2C7FCCA2E43090E66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:47:42:b8:ed:96:7a:b4:a3:23:0b:34:fe:
ef:b3:dd:55:02:cc:02:ec:44:9a:08:57:58:34:d0:
e8:15:5b:f0:5a:2b:5b:0a:db:c4:00:8e:d1:14:c3:
32:c4:35:b5:d8:74:c8:10:19:62:bb:37:c1:7c:f2:
3c:34:06:66:b0:b5:10:fc:7b:f4:4c:51:16:24:4f:
de:d3:88:e9:13:15:23:b9:29:78:be:b1:c5:0f:a9:
47:00:9a:42:82:2e:90:67:32:33:8d:0a:cd:e2:a3:
9e:48:43:a2:1e:42:d4:ac:cf:42:55:55:21:d4:f4:
04:52:64:56:15:40:4f:16:a0:43:87:96:15:ae:e8:
10:12:07:b2:ba:2c:02:4b:c2:a5:e3:4e:3b:36:f3:
5c:6c:80:f3:05:8a:26:95:42:ac:84:13:bc:56:db:
05:bb:73:c2:84:8b:e2:56:c0:d8:63:77:db:00:84:
72:99:26:e8:dc:61:3f:38:37:07:23:23:ea:a8:39:
a0:2f:a9:81:8a:e3:a7:dd:94:93:b7:92:64:5e:52:
42:ab:4c:da:68:01:6b:2f:88:24:b1:aa:a2:5e:a3:
7a:2e:13:93:58:97:09:73:2d:03:20:b6:84:6d:62:
e5:61:1b:89:67:ea:06:e7:50:4b:6e:01:de:0a:b2:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:15:C0:E2:D8:1F:0F:E2:AB:CD:2C:7F:CC:A2:E4:30:90:E6:6E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4d:42:b5:27:14:53:88:e8:ef:da:7b:c5:a8:a3:b5:a5:2b:
98:71:aa:69:ae:b3:0e:4c:3c:6b:38:59:26:67:18:32:c8:ee:
00:84:4b:c0:0e:6a:74:66:b4:f6:0d:73:84:c4:6f:14:8b:f9:
57:38:48:6c:c0:2e:89:44:95:ef:a0:16:97:41:7b:97:ba:c7:
f4:18:a1:6b:ff:73:f1:b2:0b:26:1d:af:f7:df:bb:35:78:06:
9d:c0:55:ba:0a:08:49:e9:0b:73:20:69:a6:97:e4:db:78:26:
1d:13:cc:24:a7:f5:e4:00:8e:1b:0b:c1:e8:c7:f3:da:a7:21:
7b:39:5d:d7:6a:6b:d2:e7:0d:a5:58:79:00:39:c3:72:f1:e6:
36:43:1d:d2:2b:bf:d5:97:4e:c8:5c:33:46:74:10:4f:39:bf:
06:9c:f3:67:f9:41:b3:e0:ef:97:18:66:93:ba:a7:a8:9c:e1:
7f:84:0d:b1:32:e0:97:cf:6a:08:5c:9e:af:dc:27:c6:92:8c:
ad:6b:4b:a8:5e:dd:6a:31:42:9b:f8:c5:1f:43:ca:f4:8f:fd:
f2:61:73:a8:0b:ab:0d:e8:d4:db:f5:0f:49:e7:c9:6a:74:01:
40:49:52:bd:46:bd:f1:b1:ca:a9:73:06:21:c5:88:8c:0f:28:
64:62:39:f8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUcg2WaEhbw1A7gR9aUL7nft0Dh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzEwMDIwNTE4MDlaFw0yNDA5MzAwNTIzMDlaMDMxMTAvBgNV
BAMTKDlGMEYxNUMwRTJEODFGMEZFMkFCQ0QyQzdGQ0NBMkU0MzA5MEU2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxkdCuO2WerSjIws0/u+z3VUC
zALsRJoIV1g00OgVW/BaK1sK28QAjtEUwzLENbXYdMgQGWK7N8F88jw0BmawtRD8
e/RMURYkT97TiOkTFSO5KXi+scUPqUcAmkKCLpBnMjONCs3io55IQ6IeQtSsz0JV
VSHU9ARSZFYVQE8WoEOHlhWu6BASB7K6LAJLwqXjTjs281xsgPMFiiaVQqyEE7xW
2wW7c8KEi+JWwNhjd9sAhHKZJujcYT84NwcjI+qoOaAvqYGK46fdlJO3kmReUkKr
TNpoAWsviCSxqqJeo3ouE5NYlwlzLQMgtoRtYuVhG4ln6gbnUEtuAd4KstnvAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUnw8VwOLYHw/iq80sf8yi5DCQ5m4wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYgMA0G
CSqGSIb3DQEBCwUAA4IBAQCITUK1JxRTiOjv2nvFqKO1pSuYcapprrMOTDxrOFkm
ZxgyyO4AhEvADmp0ZrT2DXOExG8Ui/lXOEhswC6JRJXvoBaXQXuXusf0GKFr/3Px
sgsmHa/337s1eAadwFW6CghJ6QtzIGmml+TbeCYdE8wkp/XkAI4bC8Hox/PapyF7
OV3XamvS5w2lWHkAOcNy8eY2Qx3SK7/Vl07IXDNGdBBPOb8GnPNn+UGz4O+XGGaT
uqeonOF/hA2xMuCXz2oIXJ6v3CfGkoyta0uoXt1qMUKb+MUfQ8r0j/3yYXOoC6sN
6NTb9Q9J58lqdAFASVK9Rr3xscqpcwYhxYiMDyhkYjn4
Generated at Thu Jan 11 02:23:03 2024 by rpki-client on console-ams.rpki-client.org