Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20323031353735.roa
File: 33312e362e34372e302f32342d3234203d3e20323031353735.roa (raw, json)
Hash identifier: JyD/XgcTXbxt0kPj5x8JFjXWida0hE3xJP/+II+MGjs=
Subject key identifier: 4C:BB:14:FB:C4:AF:CD:E8:C4:90:5C:42:93:5E:EA:A6:EE:C1:35:63
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 30F63DC59540655EDE0BE473AB04D568F2355E4C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20323031353735.roa
Signing time: Mon 22 Jan 2024 07:41:28 +0000
ROA not before: Mon 22 Jan 2024 07:36:28 +0000
ROA not after: Mon 20 Jan 2025 07:41:28 +0000
asID: 201575
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f6:3d:c5:95:40:65:5e:de:0b:e4:73:ab:04:d5:68:f2:35:5e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 22 07:36:28 2024 GMT
Not After : Jan 20 07:41:28 2025 GMT
Subject: CN=4CBB14FBC4AFCDE8C4905C42935EEAA6EEC13563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:3f:ee:fd:da:31:3d:e5:11:84:b8:96:58:
cd:2a:0c:dd:27:52:4e:99:86:c8:93:fa:44:fb:0c:
38:b3:d5:97:17:6f:6b:7b:3e:3f:f5:94:dc:81:5d:
67:56:f4:85:d5:42:9e:99:e8:bd:83:2a:7f:94:1e:
a3:cc:cf:d1:74:30:60:1d:02:9b:b1:9f:c7:09:df:
e0:c9:6e:3d:32:81:bd:ed:17:5f:d8:a4:96:dc:ec:
0c:e3:be:0f:b6:60:51:c9:2e:69:29:da:50:17:bc:
3d:86:16:69:fd:db:32:e0:4b:bd:aa:f2:84:51:d0:
6d:53:ad:53:bb:84:b0:82:d9:36:52:d3:00:ab:76:
5f:10:76:43:66:3d:bc:ae:5e:a3:1f:92:13:e4:2c:
62:92:1d:8e:1e:4b:2d:cf:dd:4a:a9:41:7d:86:b7:
30:bd:82:b9:a6:0b:b7:d8:51:41:41:82:4b:30:24:
3e:e5:6b:6f:5d:5d:13:48:b3:7c:b7:9b:67:14:54:
4a:fa:78:d0:e1:ce:15:26:c7:48:ee:be:6b:ad:cc:
7e:9b:e6:e4:90:ca:a2:1c:58:fb:82:e8:7f:15:52:
c3:a4:59:66:1a:7d:55:77:25:e6:dd:9a:d8:d3:62:
a7:05:37:41:3a:9f:7e:64:8b:4a:6a:bb:12:ee:b3:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BB:14:FB:C4:AF:CD:E8:C4:90:5C:42:93:5E:EA:A6:EE:C1:35:63
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20323031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
88:55:ef:55:02:04:16:63:95:61:a6:b7:d3:07:db:b2:57:9a:
f9:f4:42:6e:24:e3:b5:26:f2:f8:ae:e7:8f:b4:e1:69:7a:8f:
d3:dc:50:dd:b8:b1:bc:67:7c:18:96:6c:01:b2:e4:73:2b:73:
ca:da:da:b4:2c:0a:4a:54:fd:f1:7d:b6:c0:6d:86:6c:9f:d2:
76:bd:48:56:68:47:f9:14:75:48:1d:cf:e7:c8:cf:f2:09:49:
6e:09:1f:1b:5a:0c:f7:ef:bd:b7:21:2f:17:87:22:7d:d2:48:
af:9d:57:2a:aa:70:ba:8a:cf:4d:9f:97:7c:a3:50:7c:3a:08:
9e:de:a6:bc:1b:96:f5:4f:89:2e:29:dd:a4:f1:bb:8d:e5:11:
43:b4:d6:26:f7:98:38:4c:54:83:65:fe:97:ea:ba:c8:df:f7:
17:61:93:37:b4:38:3d:0c:fb:5a:06:50:8a:1c:a5:b9:52:58:
de:54:a1:6b:09:7a:ad:35:12:4c:f7:f6:45:48:6e:92:a5:ed:
d4:ff:2a:2f:8e:96:55:85:87:84:b3:55:40:b1:f8:1f:e1:08:
51:49:84:4a:b0:99:fb:66:5b:d6:30:b0:0b:ec:9c:be:06:02:
d2:d6:95:c2:49:87:2f:48:7d:42:72:94:14:ae:54:02:29:f8:
4c:12:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:50 2024 by rpki-client on console-fra.rpki-client.org