Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203336313133.roa
File: 33312e362e34372e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier: skhWqKjftTegNXeWs5lNZ+NQDggK7rcRg9xbmqLChiE=
Subject key identifier: BB:DB:95:D0:7F:B8:DC:40:39:B8:CF:F6:9B:EB:08:85:1F:2C:A9:FA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7E898BB75A416E5436F74E8F4EFF27925312FD2B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203336313133.roa
Signing time: Fri 24 Nov 2023 13:35:48 +0000
ROA not before: Fri 24 Nov 2023 13:30:48 +0000
ROA not after: Fri 22 Nov 2024 13:35:48 +0000
asID: 36113
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:89:8b:b7:5a:41:6e:54:36:f7:4e:8f:4e:ff:27:92:53:12:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 24 13:30:48 2023 GMT
Not After : Nov 22 13:35:48 2024 GMT
Subject: CN=BBDB95D07FB8DC4039B8CFF69BEB08851F2CA9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:75:c4:82:24:69:a9:fd:49:03:cd:b1:0d:
d3:40:3f:94:0f:09:dd:71:21:53:e7:b7:34:5d:05:
30:6c:ab:04:95:d7:37:e8:c5:c8:a2:e2:f6:d3:d9:
39:3a:0d:f5:9c:83:7f:07:8e:40:ae:b5:52:53:52:
72:ee:af:91:e1:96:94:3e:71:9b:ec:b3:31:b7:d8:
93:4e:bd:b1:b0:db:93:d1:00:8e:b2:09:77:6d:ff:
4c:d6:31:3a:e5:c1:24:37:17:1e:a3:b5:19:ed:04:
dd:81:1d:a6:e6:26:b3:ab:1d:5c:3b:f7:7d:9a:ca:
61:ef:15:d7:0a:51:a8:3d:66:92:d8:68:6a:10:cd:
50:b4:c8:47:8f:a8:16:60:1f:de:c4:b3:51:3a:fd:
d5:de:79:80:04:4b:0a:d5:79:f8:e8:7e:52:7a:47:
b1:3a:e3:1d:35:ce:69:f0:cf:ba:8e:67:03:a9:c8:
72:79:6f:ec:1b:bd:1a:5b:4b:13:dd:ad:2f:07:c2:
b5:84:10:92:6e:72:0e:c1:ce:8e:ec:9d:b6:2a:06:
2b:9e:ee:6a:b8:da:e2:37:e5:41:7e:36:5f:33:dc:
ee:f0:bc:80:bf:27:ef:44:1f:97:b6:7e:0d:3f:2f:
0b:89:26:ad:c9:69:37:09:68:8e:5c:67:b9:9a:44:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:95:D0:7F:B8:DC:40:39:B8:CF:F6:9B:EB:08:85:1F:2C:A9:FA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203336313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
87:74:c2:e3:9c:95:51:34:53:7a:56:c3:49:b9:5d:c1:a6:ee:
26:5d:f6:23:bf:6e:bf:82:d9:16:78:ce:82:e1:c8:4e:e5:40:
45:9b:d9:30:3a:8b:4f:47:68:90:21:84:9a:9f:c6:10:66:b3:
c8:af:0f:ef:36:3e:66:dc:3a:d8:13:d2:53:b5:8a:49:f6:9e:
70:e0:d6:35:6a:79:8e:4b:3d:d7:6a:c9:06:dd:fe:b5:4d:18:
fb:d8:9e:0f:eb:ff:42:4d:9b:d5:f8:c1:21:77:9e:6f:56:c2:
d4:7b:49:52:53:45:6f:58:d9:79:02:a8:eb:0c:07:4a:05:00:
85:31:5b:29:31:e4:0f:90:ea:33:a2:7b:42:09:a0:8d:c9:54:
2f:90:a0:33:ce:be:cf:17:e7:fb:48:59:62:63:f9:7d:06:09:
fc:a6:cb:ac:05:93:66:14:06:67:ba:a5:7e:35:70:e5:28:c7:
cc:8f:d4:17:b3:d1:7e:f9:98:fc:54:82:e0:58:b1:f5:d7:06:
2e:3f:1e:c5:8c:b5:e7:86:b3:9b:f7:79:ea:b0:07:a0:dd:23:
83:93:00:50:f9:b4:ec:7f:d0:95:43:7f:4a:88:bb:9f:47:db:
05:fd:0e:72:00:f0:5a:66:f5:2f:4f:54:83:3f:a1:b1:be:30:
04:e1:b3:50
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfomLt1pBblQ2906PTv8nklMS/SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzExMjQxMzMwNDhaFw0yNDExMjIxMzM1NDhaMDMxMTAvBgNV
BAMTKEJCREI5NUQwN0ZCOERDNDAzOUI4Q0ZGNjlCRUIwODg1MUYyQ0E5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq93XEgiRpqf1JA82xDdNAP5QP
Cd1xIVPntzRdBTBsqwSV1zfoxcii4vbT2Tk6DfWcg38HjkCutVJTUnLur5HhlpQ+
cZvsszG32JNOvbGw25PRAI6yCXdt/0zWMTrlwSQ3Fx6jtRntBN2BHabmJrOrHVw7
932aymHvFdcKUag9ZpLYaGoQzVC0yEePqBZgH97Es1E6/dXeeYAESwrVefjoflJ6
R7E64x01zmnwz7qOZwOpyHJ5b+wbvRpbSxPdrS8HwrWEEJJucg7Bzo7snbYqBiue
7mq42uI35UF+Nl8z3O7wvIC/J+9EH5e2fg0/LwuJJq3JaTcJaI5cZ7maROXfAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUu9uV0H+43EA5uM/2m+sIhR8sqfowHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzcyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM2MzEzMTMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYvMA0G
CSqGSIb3DQEBCwUAA4IBAQCHdMLjnJVRNFN6VsNJuV3Bpu4mXfYjv26/gtkWeM6C
4chO5UBFm9kwOotPR2iQIYSan8YQZrPIrw/vNj5m3DrYE9JTtYpJ9p5w4NY1anmO
Sz3XaskG3f61TRj72J4P6/9CTZvV+MEhd55vVsLUe0lSU0VvWNl5AqjrDAdKBQCF
MVspMeQPkOozontCCaCNyVQvkKAzzr7PF+f7SFliY/l9Bgn8psusBZNmFAZnuqV+
NXDlKMfMj9QXs9F++Zj8VILgWLH11wYuPx7FjLXnhrOb93nqsAeg3SODkwBQ+bTs
f9CVQ39KiLufR9sF/Q5yAPBaZvUvT1SDP6GxvjAE4bNQ
-----END CERTIFICATE-----
Generated at Mon Jan 22 03:57:54 2024 by rpki-client on console-ams.rpki-client.org