Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20383334.roa
File: 33312e362e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AUTZjQDVUXnavMeq2WCn1IjIndMdJX+502KV6kqmTUE=
Subject key identifier: 57:A9:9D:68:C7:0A:1A:D1:5E:42:9D:49:83:B1:39:A9:31:D3:7E:8F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 24ED8E2A21CD4D85BC97ECA6719CBEE46DF7B076
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20383334.roa
Signing time: Tue 05 Mar 2024 17:19:53 +0000
ROA not before: Tue 05 Mar 2024 17:14:53 +0000
ROA not after: Tue 04 Mar 2025 17:19:53 +0000
asID: 834
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ed:8e:2a:21:cd:4d:85:bc:97:ec:a6:71:9c:be:e4:6d:f7:b0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 5 17:14:53 2024 GMT
Not After : Mar 4 17:19:53 2025 GMT
Subject: CN=57A99D68C70A1AD15E429D4983B139A931D37E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:cc:1a:97:31:9d:37:34:ee:7b:24:89:58:
80:ef:31:dd:ba:07:38:8b:30:47:dd:27:1d:6b:5c:
6d:2c:b9:ca:0e:38:a8:d2:75:67:45:41:bb:10:52:
ae:77:32:e3:5b:55:e1:ac:f3:03:d9:06:0c:49:ea:
87:0e:6d:4c:e6:3f:96:13:f4:c0:3a:e0:94:34:d6:
9d:8d:4c:76:be:40:16:19:24:a2:70:ba:0f:79:7b:
6d:fb:8c:ba:6c:a6:91:b4:77:43:04:bf:ea:86:85:
9e:fb:41:f8:0c:c2:89:e5:bf:6d:38:e5:e6:e3:59:
1a:51:36:c4:cd:fe:40:fd:b2:8d:7c:d7:8d:fd:c4:
03:ee:5a:dc:35:66:f4:c0:d5:f7:85:76:12:f8:9c:
bd:0f:b9:ab:4f:a5:46:2f:6f:eb:4e:27:b1:65:d1:
28:82:8c:5f:34:dc:83:bf:24:e0:27:82:57:d7:36:
78:1a:ee:6d:c0:ce:16:b6:69:9e:27:09:14:82:f9:
be:d5:2f:c5:75:14:20:0d:94:ff:bd:9f:c7:7d:8e:
fb:24:a5:a1:e9:b9:a1:94:d7:42:3f:53:7c:80:e7:
fc:25:82:0c:e5:a9:57:07:91:a6:e5:e2:f8:cb:47:
1b:29:a7:c9:23:2e:41:85:8a:b2:bd:b8:2a:68:64:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:9D:68:C7:0A:1A:D1:5E:42:9D:49:83:B1:39:A9:31:D3:7E:8F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
55:41:89:26:a5:fa:c7:6f:45:42:cd:2b:5c:40:49:21:52:5c:
e8:c4:8c:2f:e7:c9:ba:86:7a:2e:e9:21:af:a3:d7:58:e0:37:
e5:3a:23:5a:1e:35:37:6d:6e:0a:c9:fb:f6:c2:a7:15:21:87:
04:29:34:f1:89:36:42:ea:2d:c2:01:d3:9b:87:cb:5c:f7:9a:
3c:3a:cc:08:cd:7d:a6:3a:b2:d0:b9:26:de:8a:af:28:9d:1d:
07:63:6d:6d:ec:9d:c3:8e:aa:28:e3:37:af:72:4d:49:07:8e:
4b:4e:d6:21:d7:b3:54:77:b6:81:60:01:5f:16:ab:00:3b:1e:
86:ae:73:e2:75:36:80:3a:95:18:76:0c:82:fc:08:e7:51:75:
5c:24:23:89:f2:54:4b:05:7e:32:d3:16:bd:02:18:c3:1f:19:
6c:1f:30:b0:0b:cb:81:88:5d:39:30:17:f3:ab:9f:ef:45:c2:
cf:37:86:7b:e5:9e:5b:31:93:10:7c:3f:7b:00:4e:72:7c:e8:
c7:82:f7:8d:03:a4:c4:b3:55:a6:85:c7:4a:81:46:23:90:41:
c3:84:0f:8e:16:05:3a:9b:85:98:dd:47:bb:f1:50:40:35:2d:
c4:15:59:4b:eb:50:9f:d9:18:5c:a2:53:f6:0f:18:71:f8:f3:
89:48:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:27 2024 by rpki-client on console-fra.rpki-client.org