Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32332d3234203d3e20383334.roa
File: 33312e362e34362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: tZnF0/sQK11qncM1jH5Xn0V0bRA49TEx879lMjihAn8=
Subject key identifier: 80:17:ED:A8:CA:58:E3:5D:D9:60:4A:84:4E:91:8B:6B:A4:08:3A:02
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2CD8992EB4B6AA34422F1A57597B86E28A09D284
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:36 +0000
ROA not before: Mon 02 Oct 2023 05:15:36 +0000
ROA not after: Mon 30 Sep 2024 05:20:36 +0000
asID: 834
IP address blocks: 31.6.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d8:99:2e:b4:b6:aa:34:42:2f:1a:57:59:7b:86:e2:8a:09:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:36 2023 GMT
Not After : Sep 30 05:20:36 2024 GMT
Subject: CN=8017EDA8CA58E35DD9604A844E918B6BA4083A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:9a:50:0f:8e:56:e0:02:83:4e:e8:8d:9b:
a8:e1:cc:34:a3:7f:ed:4a:61:9d:44:8c:df:49:98:
76:f3:5e:67:ab:95:a1:74:19:f0:bf:df:fa:2c:74:
5b:c9:96:64:57:aa:d6:1c:74:11:37:93:b5:6a:3f:
7a:82:82:52:a1:62:49:f9:8f:16:6f:e9:83:5e:3d:
3d:a2:bf:80:14:2b:55:53:b1:c5:ba:cb:e7:f6:c7:
b4:4e:e3:ce:2f:ad:75:bc:6e:47:3d:7c:03:35:7e:
19:7e:ff:8f:b4:8f:fd:44:55:85:7b:40:58:c3:51:
bf:82:8a:95:9f:c7:95:e3:1b:95:ee:36:46:a7:fb:
f0:a2:eb:8a:0e:63:16:b0:7e:f9:77:fb:d4:fc:9e:
e1:98:a7:02:d5:21:f7:89:b3:a9:bd:71:0e:01:d2:
7a:9d:4a:68:b6:1e:fe:4c:3c:76:9d:77:0c:4b:63:
b0:f6:38:25:7f:ae:6e:ef:37:f1:4d:e5:2f:ac:3d:
5f:76:eb:db:f7:8a:8b:c5:f3:f6:36:3e:1a:38:8f:
c2:48:a4:d1:ba:3c:a4:bf:5e:53:43:09:d4:29:bc:
67:08:95:6a:da:2b:70:3d:45:d8:7d:ce:c1:61:cd:
71:52:c9:1b:db:d3:32:52:10:32:7a:0a:8a:51:0b:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:ED:A8:CA:58:E3:5D:D9:60:4A:84:4E:91:8B:6B:A4:08:3A:02
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/23
Signature Algorithm: sha256WithRSAEncryption
53:26:5a:90:7f:af:f8:c2:fb:f9:4b:b0:20:e6:1e:fe:e7:8c:
61:39:3c:8e:43:ee:c3:cf:ef:90:62:3e:79:78:a1:29:85:5f:
b7:db:5a:1c:f5:64:ae:7e:c0:0a:42:4d:34:fc:51:83:53:9f:
7c:4b:ae:31:00:10:1b:2a:44:93:3a:7c:54:5f:47:06:3a:70:
e1:fb:35:1d:1a:fb:5f:4e:ed:32:36:ff:f3:86:31:2a:f3:8b:
89:c7:1e:1c:22:c1:48:48:0c:d6:88:40:a2:f2:15:1c:e0:cc:
f3:75:9c:65:4b:d1:c6:d1:1b:1d:34:56:78:ae:cc:92:83:94:
e7:98:7d:84:cc:d8:9b:2d:b3:c2:db:f4:1e:9f:64:64:3c:10:
6e:c0:63:c6:dc:9f:ce:d0:44:3b:2a:ba:ef:26:81:48:a9:a9:
42:dd:3d:ae:82:ea:81:bf:1c:34:67:83:ea:2f:1d:43:e5:d6:
92:fa:5a:c3:34:f9:8c:e1:0e:c8:8b:61:c7:29:fe:68:e9:59:
e5:3e:cc:43:bf:b2:46:01:5f:17:60:5b:fc:b3:80:0a:f3:49:
ec:5f:50:d1:07:fe:69:34:ef:52:df:33:40:79:0a:84:e8:9a:
69:7b:95:56:f1:ef:41:36:98:10:f3:73:98:7b:af:41:6b:5e:
cc:91:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 04:52:41 2024 by rpki-client on console-fra.rpki-client.org