Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32342d3234203d3e20383334.roa
File: 33312e362e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: geZ025IB9N3YM44b9UK4ddEJwfIKVi2n6XPhQ7a0vqk=
Subject key identifier: 25:6D:58:DD:38:6E:2F:32:74:EF:84:6C:68:28:05:5F:1E:F4:3A:35
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2440E11EEB616E445A7576977F8F01E1B9F5EBCC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Nov 2024 00:02:24 +0000
ROA not before: Tue 05 Nov 2024 23:57:24 +0000
ROA not after: Wed 05 Nov 2025 00:02:24 +0000
asID: 834
IP address blocks: 31.6.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 05:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:40:e1:1e:eb:61:6e:44:5a:75:76:97:7f:8f:01:e1:b9:f5:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 5 23:57:24 2024 GMT
Not After : Nov 5 00:02:24 2025 GMT
Subject: CN=256D58DD386E2F3274EF846C6828055F1EF43A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:47:08:1d:8a:75:89:f8:91:95:6f:ea:02:
5c:ab:35:37:7d:53:0e:f8:8a:2c:8f:ba:b9:df:3c:
42:43:cf:72:1b:fa:04:1d:3c:8b:c2:15:62:33:70:
31:d5:29:2f:14:ee:0c:aa:96:e8:42:12:21:a4:6d:
77:4d:12:ef:9b:f7:4c:f8:15:ea:07:2d:6e:d1:fc:
6f:1e:3f:96:f5:12:3a:ec:6f:b0:d3:66:53:a1:19:
b1:33:08:e0:4e:b7:b9:40:24:2e:22:c8:50:44:7c:
85:44:5c:21:e2:61:0a:b8:ed:11:bf:59:b1:29:c8:
77:38:0b:3f:bc:19:47:0d:2b:5c:00:38:ed:3b:11:
4d:fa:69:66:78:00:8f:91:9d:4f:58:22:f8:af:10:
6e:89:1b:6c:67:62:de:e1:92:7a:50:09:9b:e8:0e:
b6:ee:8a:b1:aa:60:83:93:98:25:ca:6c:1d:c0:e6:
d1:9b:c7:d5:54:22:ed:1c:0e:6e:b7:df:66:40:e1:
04:3f:14:eb:7b:3c:68:67:8b:75:a4:7c:6e:fd:89:
da:98:02:cd:93:38:33:f6:a9:ab:96:64:d0:34:12:
e7:cf:ba:38:1a:f3:67:15:9a:f9:d7:dc:0d:b3:d5:
92:48:1a:51:6f:0a:21:2b:2b:d5:52:d8:fd:d0:06:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:58:DD:38:6E:2F:32:74:EF:84:6C:68:28:05:5F:1E:F4:3A:35
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c9:f1:ed:f6:a7:7d:c4:d0:ec:3e:5f:54:b2:7a:f2:68:d0:
3b:0c:6f:a0:be:ff:81:ee:40:60:52:79:41:1c:b7:c0:ef:0e:
09:f3:44:5f:da:20:74:7c:0e:9f:85:60:d7:fc:e0:c9:d3:82:
85:6d:14:3e:3b:c3:fc:06:98:90:ef:39:a9:e4:52:6b:44:b8:
27:fd:b7:08:d8:10:ce:df:43:ce:5a:a8:82:29:34:dd:f4:e3:
3c:7f:61:aa:80:2f:34:c0:b9:ac:25:ae:36:19:0f:e9:3c:bc:
ef:49:07:1d:1d:a4:5e:40:8b:2f:f0:80:08:0c:68:4d:76:c1:
f4:82:f7:83:bb:78:b3:63:fe:03:db:fd:8b:ac:11:36:c5:5b:
f4:5e:a4:92:29:b8:7a:7b:21:0e:d2:a0:a4:13:c6:df:a4:d4:
ea:6f:97:f9:e0:d9:b7:ef:b6:62:4a:37:76:a6:0a:31:7f:af:
7b:1a:5f:ef:9d:d0:99:73:30:34:92:4c:70:fe:7e:3c:3f:dc:
46:f4:48:7c:8b:e2:12:af:33:75:7b:35:38:30:d8:4c:d6:51:
bc:9b:6c:bc:38:7c:8f:3b:b9:ee:bd:ad:99:52:b3:fb:b6:dc:
7d:6a:4c:34:67:d7:10:15:bf:fe:95:85:56:0a:ca:55:cd:d3:
7a:7f:11:37
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 6 08:29:11 2024 by rpki-client on console-fra.rpki-client.org