Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20383334.roa
File: 33312e362e34332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dpX/XuBdLUo0KMOjz3sjGyyo/tKXzU4oPh7QdTI5YBQ=
Subject key identifier: 51:CB:D9:E2:DD:A5:57:BB:AE:E5:C1:DB:4B:99:AC:53:2C:7A:CF:C9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 38D84DEAEE85F2DB3FD0EA311E089480380C4009
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:21:10 +0000
ROA not before: Mon 02 Oct 2023 05:16:10 +0000
ROA not after: Mon 30 Sep 2024 05:21:10 +0000
asID: 834
IP address blocks: 31.6.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d8:4d:ea:ee:85:f2:db:3f:d0:ea:31:1e:08:94:80:38:0c:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:16:10 2023 GMT
Not After : Sep 30 05:21:10 2024 GMT
Subject: CN=51CBD9E2DDA557BBAEE5C1DB4B99AC532C7ACFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:35:ab:79:f9:c6:ac:da:18:9a:64:84:93:
86:91:a4:d8:c4:a3:ac:e2:d3:73:eb:9d:5e:6c:f8:
14:cf:10:05:9c:9e:2b:d8:20:2d:26:1f:c9:12:90:
6b:49:e4:d4:45:30:f1:61:4a:9c:e1:c3:c7:eb:22:
3c:37:a6:10:bb:66:f2:7c:1e:d8:5a:23:12:cb:39:
eb:03:0b:e9:86:e6:58:b2:5e:33:9d:11:ce:7a:db:
77:b7:f7:fe:a1:25:b1:4a:b1:b8:33:18:db:fc:10:
d2:1a:7d:a6:b3:71:c8:eb:7f:af:ba:b1:3d:4c:55:
5d:9c:3a:dd:6d:26:14:33:f4:45:07:11:46:f6:ca:
d1:5c:25:2e:70:14:40:03:41:6c:c5:de:b1:6d:29:
6e:63:ee:f5:af:66:cf:eb:60:7e:81:6f:7d:e1:87:
29:d3:83:c5:19:57:88:07:12:f0:a8:2d:57:ba:7c:
8c:d8:1f:18:f6:f8:aa:c5:57:6e:ca:f2:39:31:34:
67:d0:2d:75:1b:5e:9f:b3:7d:63:f3:17:51:b3:54:
5e:55:10:65:8e:9d:fb:5a:54:a8:ed:55:33:34:2a:
10:bc:57:60:98:ff:ac:91:7d:77:90:22:fc:c5:e6:
e2:55:ad:fa:c6:7e:e6:53:6f:df:ce:68:b8:a0:2f:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:D9:E2:DD:A5:57:BB:AE:E5:C1:DB:4B:99:AC:53:2C:7A:CF:C9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f0:3c:28:80:0c:7c:ad:b6:e2:02:fc:ad:ef:53:75:1f:38:
fc:ac:5a:70:9d:d5:c1:f5:22:d0:cd:7a:10:f3:ec:02:be:42:
9a:3c:1c:86:f1:b4:76:9f:d6:87:c5:e4:1a:26:65:5e:8c:ab:
a3:cd:ec:93:ad:2b:c9:72:80:01:e2:18:eb:28:cd:57:fd:bc:
08:a9:53:9f:5d:04:33:50:5c:a7:4f:24:60:6e:46:e0:73:20:
8a:d3:a2:f1:81:c3:34:8c:c4:2f:23:89:dd:a6:2e:6d:15:19:
de:5e:62:72:d6:42:83:12:82:81:2f:0b:70:18:03:8d:5a:d7:
bb:30:ae:db:ec:65:1a:f1:d3:aa:d7:f9:27:34:2b:e8:b5:fb:
a7:41:72:04:2a:f9:9b:59:84:0c:df:d3:b5:60:d0:2d:eb:51:
14:a4:52:8b:ca:ba:23:1f:89:55:80:f2:0e:3f:8d:8a:97:8f:
0e:01:dc:09:82:12:67:d6:a1:d7:36:69:4a:f3:41:a1:78:81:
51:6f:4f:8f:cb:70:54:77:7a:b8:86:aa:b0:39:1e:de:6f:8c:
4c:3f:66:22:17:15:95:5d:18:1d:01:f0:00:29:60:31:7c:77:
a2:b9:38:d7:f1:c1:92:dd:8d:b0:1d:2e:ca:d8:ef:31:25:2f:
cb:8e:be:5d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUONhN6u6F8ts/0OoxHgiUgDgMQAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzEwMDIwNTE2MTBaFw0yNDA5MzAwNTIxMTBaMDMxMTAvBgNV
BAMTKDUxQ0JEOUUyRERBNTU3QkJBRUU1QzFEQjRCOTlBQzUzMkM3QUNGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6jWrefnGrNoYmmSEk4aRpNjE
o6zi03PrnV5s+BTPEAWcnivYIC0mH8kSkGtJ5NRFMPFhSpzhw8frIjw3phC7ZvJ8
HthaIxLLOesDC+mG5liyXjOdEc5623e39/6hJbFKsbgzGNv8ENIafaazccjrf6+6
sT1MVV2cOt1tJhQz9EUHEUb2ytFcJS5wFEADQWzF3rFtKW5j7vWvZs/rYH6Bb33h
hynTg8UZV4gHEvCoLVe6fIzYHxj2+KrFV27K8jkxNGfQLXUbXp+zfWPzF1GzVF5V
EGWOnftaVKjtVTM0KhC8V2CY/6yRfXeQIvzF5uJVrfrGfuZTb9/OaLigL7idAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUUcvZ4t2lV7uu5cHbS5msUyx6z8kwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBiswDQYJKoZI
hvcNAQELBQADggEBAIrwPCiADHyttuIC/K3vU3UfOPysWnCd1cH1ItDNehDz7AK+
Qpo8HIbxtHaf1ofF5BomZV6Mq6PN7JOtK8lygAHiGOsozVf9vAipU59dBDNQXKdP
JGBuRuBzIIrTovGBwzSMxC8jid2mLm0VGd5eYnLWQoMSgoEvC3AYA41a17swrtvs
ZRrx06rX+Sc0K+i1+6dBcgQq+ZtZhAzf07Vg0C3rURSkUovKuiMfiVWA8g4/jYqX
jw4B3AmCEmfWodc2aUrzQaF4gVFvT4/LcFR3eriGqrA5Ht5vjEw/ZiIXFZVdGB0B
8AApYDF8d6K5ONfxwZLdjbAdLsrY7zElL8uOvl0=
Generated at Wed Dec 6 16:09:29 2023 by rpki-client on console-ams.rpki-client.org