Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
File: 33312e362e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lvXGBC3PMMmgdSt6Df8jX5fgzcOxVUDKgt5fcnb2DRw=
Subject key identifier: 74:FE:06:D5:AD:45:4D:82:CA:36:38:6D:18:EA:79:7D:9D:FC:18:65
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2D0EE0678E8B56D10531ADF7C343E3C2AD71C1B9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
Signing time: Wed 24 Apr 2024 00:02:30 +0000
ROA not before: Tue 23 Apr 2024 23:57:30 +0000
ROA not after: Wed 23 Apr 2025 00:02:30 +0000
asID: 834
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 13:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0e:e0:67:8e:8b:56:d1:05:31:ad:f7:c3:43:e3:c2:ad:71:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 23 23:57:30 2024 GMT
Not After : Apr 23 00:02:30 2025 GMT
Subject: CN=74FE06D5AD454D82CA36386D18EA797D9DFC1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:7b:b2:d8:a6:cd:88:45:b8:33:c2:76:86:
20:5d:ef:0e:1d:cd:ab:ba:c1:b8:f1:19:62:7d:ba:
73:1c:44:50:74:68:59:ee:fb:af:61:42:78:85:34:
bf:0f:ef:91:99:37:cd:87:cf:4e:42:78:23:19:ce:
c2:93:c2:ff:89:a6:41:6e:3a:05:5a:d9:95:b9:fd:
8e:9f:ca:23:86:c7:a5:2d:db:7a:cc:43:9f:7f:7b:
fa:a5:fd:f4:93:7c:d0:47:6e:f5:2a:5c:42:6f:57:
56:7a:8c:d6:5a:d0:01:2d:ae:33:43:f1:ea:ff:d6:
ab:8f:37:0e:37:92:4c:40:02:42:ec:8e:75:b6:2e:
75:fe:41:1b:40:76:d0:04:fb:46:ce:6f:81:c5:01:
5e:a8:e5:a0:52:77:74:b1:36:8d:09:85:ff:25:50:
14:c3:c3:0b:39:09:8a:14:de:15:e5:8b:e7:89:f5:
42:cc:fd:c9:85:b4:b2:f6:5c:89:31:da:c7:75:a5:
ae:c1:e7:5b:63:90:36:d1:b5:34:97:ea:1d:a1:1d:
83:d5:47:12:74:91:61:83:72:8f:86:99:2f:34:bf:
a2:94:1b:bd:c4:80:93:31:7d:f0:ce:e3:f8:33:9b:
3a:14:5e:d6:2d:f3:e6:7b:b6:42:03:5a:81:f3:0e:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:06:D5:AD:45:4D:82:CA:36:38:6D:18:EA:79:7D:9D:FC:18:65
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
35:45:1f:d1:0a:76:40:ef:f5:a3:0e:dd:f3:ca:f3:66:cc:7b:
de:d5:50:0a:06:50:2c:c0:ed:85:cc:d5:e7:fc:59:03:e7:9a:
e0:6b:01:05:44:d4:b3:fe:4a:0e:16:57:54:32:ff:45:75:23:
40:2f:4c:5f:9e:c6:e1:44:55:5b:b4:36:54:f1:63:96:7d:51:
62:ee:3d:6f:78:4e:01:2e:54:4a:86:3f:ae:f1:c8:3c:80:65:
71:25:b6:59:ff:2f:89:51:4d:51:00:3e:b8:0d:51:6f:61:1f:
7a:16:93:46:47:d7:fd:27:fc:ee:d0:9c:e9:79:d9:86:aa:c2:
94:65:c4:b6:27:5c:03:bd:c8:84:17:43:26:55:dd:59:21:da:
fe:b0:01:17:e4:64:91:95:48:49:98:62:8f:21:09:f0:13:7a:
70:ab:e6:b0:fd:2f:97:49:e4:47:ae:76:8a:44:ee:fa:9d:de:
c1:48:2c:27:ae:c3:6d:4d:f5:09:63:e5:37:0a:fe:b9:5e:be:
46:61:1a:62:59:7c:de:9d:13:1d:76:94:d8:ca:38:1e:95:41:
76:d8:ad:50:04:ed:40:ef:fb:7b:9d:ae:89:60:3e:1b:be:ec:
7b:7e:ad:b4:b0:55:86:64:db:5a:a1:3e:99:9d:ec:e9:ce:66:
00:10:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:24 2025 by rpki-client