Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20383334.roa
File: 33312e362e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DxY0/nYdmCHiKNXPuvnN5ECZJRDhCz56fR1SUpquRgM=
Subject key identifier: 0C:76:3D:79:18:38:8B:64:8D:1A:4B:8E:8E:6D:B7:CE:1F:FA:AA:EA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 66851F4CB18DA117B74B441ED374635CD46923C6
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20383334.roa
Signing time: Tue 14 May 2024 00:02:24 +0000
ROA not before: Mon 13 May 2024 23:57:24 +0000
ROA not after: Tue 13 May 2025 00:02:24 +0000
asID: 834
IP address blocks: 31.6.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 09:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:85:1f:4c:b1:8d:a1:17:b7:4b:44:1e:d3:74:63:5c:d4:69:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 13 23:57:24 2024 GMT
Not After : May 13 00:02:24 2025 GMT
Subject: CN=0C763D7918388B648D1A4B8E8E6DB7CE1FFAAAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:fb:23:7f:d2:d3:92:23:e5:05:bb:ac:df:
78:7e:1b:4e:d0:5e:82:7e:30:0b:6b:be:f7:10:6e:
8b:46:d7:25:52:d2:ba:39:a7:41:c7:bc:b2:ce:32:
40:40:c5:d5:f6:f7:ed:82:1c:dd:e7:c9:d5:58:b0:
d7:8a:d9:7a:20:76:28:ad:b7:7b:fa:06:cc:25:53:
66:8d:26:58:03:f2:52:7b:49:33:fa:a4:63:a8:e5:
49:82:54:13:30:01:29:9f:d6:94:1c:e5:f4:0d:f6:
b1:83:27:81:de:a6:e3:13:8f:a0:af:6d:b2:62:4e:
f8:b9:6a:10:15:0b:58:48:8b:26:72:4a:41:5f:17:
42:cf:87:ce:0b:89:b4:46:3b:de:f0:91:1b:df:2f:
60:e5:a0:db:7d:47:22:4f:e9:c1:43:3c:d2:7d:85:
65:13:a0:1f:43:7f:73:cc:82:d7:cb:74:e7:b3:d4:
11:f9:58:6c:40:5c:81:52:67:66:5f:14:39:cd:bc:
08:c4:e4:5e:8e:11:4d:92:eb:2a:ef:cf:f4:9f:3b:
10:70:8c:92:23:8e:e7:74:b6:be:45:29:a1:55:8e:
9b:26:d3:d9:ef:48:1d:21:51:2d:74:4f:42:bd:48:
55:91:53:dd:57:69:7d:ea:00:d2:75:7b:4c:e0:04:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:3D:79:18:38:8B:64:8D:1A:4B:8E:8E:6D:B7:CE:1F:FA:AA:EA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:15:05:89:90:8a:9a:c4:05:b5:d9:f1:ca:f5:8b:90:eb:0a:
ea:0c:d4:02:82:e8:a4:7c:6c:af:19:3a:52:9f:e4:f3:9c:fa:
45:f5:eb:08:d9:38:b8:18:1e:50:27:56:43:6a:8b:40:c4:30:
51:ee:5d:78:59:31:23:29:dc:b1:5f:55:4d:6f:e7:db:7c:a3:
8b:62:cc:14:58:68:0d:c3:1e:a3:de:4a:87:b2:c2:b7:49:64:
f2:c6:10:16:f3:72:0b:cb:4c:e0:14:02:fb:91:4a:bc:30:bf:
9d:8c:43:3d:46:b4:d0:86:ff:7e:cb:e4:b5:41:24:1f:81:68:
4e:07:55:80:51:c8:61:bb:d5:2a:b9:41:01:ca:74:25:d8:c3:
f8:0e:6c:0c:02:31:30:26:64:8c:a6:83:7b:da:63:fc:d4:93:
3b:0e:55:24:86:e6:6a:bb:fc:d0:5a:95:d2:52:f2:2a:0e:b0:
39:63:b8:9f:59:6a:34:d8:54:57:78:fb:29:f0:ce:19:96:ff:
4c:9e:8d:df:54:d9:3c:e3:9d:99:f6:df:f8:86:f8:d8:79:89:
99:05:02:f5:1f:7a:14:f1:fc:b2:6e:91:e8:b5:c8:10:8c:e8:
52:36:eb:d1:26:6b:78:07:dd:bd:eb:59:22:f4:fc:87:a3:2e:
16:ed:b2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 13:27:31 2024 by rpki-client on console-fra.rpki-client.org