Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203134343435.roa
File: 33312e362e33362e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: vrDESKLjoL39b2BHXTcUkTU1byKYJfGUX6oxwiP0UOk=
Subject key identifier: 7A:A4:63:76:E2:2B:9A:70:94:81:4B:AB:A1:55:93:D3:C8:79:59:50
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 35DDEE9A7266CA59900B195713BDAEBABA7DA9E3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203134343435.roa
Signing time: Wed 05 Jun 2024 18:42:11 +0000
ROA not before: Wed 05 Jun 2024 18:37:11 +0000
ROA not after: Wed 04 Jun 2025 18:42:11 +0000
asID: 14445
IP address blocks: 31.6.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 08:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dd:ee:9a:72:66:ca:59:90:0b:19:57:13:bd:ae:ba:ba:7d:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 5 18:37:11 2024 GMT
Not After : Jun 4 18:42:11 2025 GMT
Subject: CN=7AA46376E22B9A7094814BABA15593D3C8795950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7e:86:2b:16:72:c4:83:83:2a:0e:e4:6a:24:
c9:fa:cf:42:4d:6a:af:53:ac:ab:ee:fd:9b:dc:64:
2d:77:6b:d7:52:09:82:c7:60:6d:64:2c:89:90:da:
5f:70:52:50:4d:90:20:8c:26:0b:59:51:b6:dd:0c:
cf:f6:6e:f3:38:65:c7:ab:f9:a7:1c:45:87:b8:18:
b2:cf:af:c0:ad:75:88:a7:a7:8e:17:39:71:8d:e7:
c7:21:c7:4d:9f:8a:7e:48:57:7d:51:80:0f:42:98:
dc:72:31:9a:79:7e:68:bc:b1:da:4f:3e:86:ee:b9:
a9:90:58:c1:fe:04:1e:97:c3:d2:1e:c4:37:6e:cc:
73:84:42:03:42:5a:55:be:0f:be:93:05:07:ce:0c:
ff:22:8d:41:75:bc:11:bd:fc:bd:d8:31:12:f1:19:
81:b5:6b:49:f0:4e:5a:48:e2:a0:2e:10:44:e4:39:
a1:e0:06:15:ef:e9:06:83:52:f8:cc:f4:c4:73:9a:
96:cf:6c:d3:71:a5:b1:37:3d:ce:42:01:ef:b9:28:
9e:d3:c1:b7:8c:71:e9:92:fc:e1:86:7b:83:d1:59:
20:fb:b4:2e:ba:5c:96:d6:90:6e:10:5c:74:39:82:
8f:ab:fa:b3:cf:b2:a7:be:35:a4:1f:78:75:24:67:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:63:76:E2:2B:9A:70:94:81:4B:AB:A1:55:93:D3:C8:79:59:50
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
41:38:b3:df:41:f9:c2:ee:52:0b:d8:99:16:33:2b:18:39:f5:
0d:cf:4d:b5:63:f0:67:2b:ec:58:80:d2:32:fa:a3:0e:1e:e0:
45:bc:8c:b6:bb:e2:c4:28:ba:da:0b:6e:77:69:f6:0c:27:bf:
8a:f0:97:73:f8:7b:bc:f2:28:b9:12:2e:22:f5:c7:ef:fa:a4:
04:3a:7d:00:54:49:ee:5c:64:30:2b:59:5e:a1:86:fd:65:dd:
91:f8:d5:38:f8:ca:6d:70:3c:2c:47:44:ae:d9:65:d0:4a:81:
f4:60:2b:73:89:5d:20:a2:e7:ad:9e:91:18:d7:ae:71:87:95:
90:fc:08:36:08:c5:79:4f:e9:f2:b2:2d:08:ea:32:b3:dc:4f:
b8:46:c4:a7:6d:99:ea:ce:5c:7e:98:9b:1a:10:b1:63:43:17:
80:26:ed:7c:7a:c3:e7:22:01:1d:db:28:a2:14:19:0a:7c:67:
f7:a7:71:55:7a:e2:e8:83:eb:5d:9e:58:a9:8c:76:69:4c:df:
73:f9:8e:b1:53:6f:4c:57:d1:c2:5a:e8:d9:47:2a:2d:c7:23:
cf:d0:6c:d6:c9:f1:f3:b3:2e:41:73:22:14:8e:57:66:7b:da:
fa:b0:04:bb:75:69:e8:a4:18:77:f3:8d:6f:8a:01:92:f9:33:
a4:de:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 10:21:57 2024 by rpki-client on console-ams.rpki-client.org