Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203231383539.roa
File: 33312e362e34382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: o9b9QCiuiPA1HkqsjXTPHY4CX9HFTClcbw1ia/2Vb6E=
Subject key identifier: 89:D0:5F:5D:49:6C:8B:BE:87:9F:A2:EA:4C:CF:B0:C7:4B:6B:23:B6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1A97FA5D3488324FFBDBD16C3164F8E34ECF7A6A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203231383539.roa
Signing time: Mon 18 Dec 2023 08:51:56 +0000
ROA not before: Mon 18 Dec 2023 08:46:56 +0000
ROA not after: Mon 16 Dec 2024 08:51:56 +0000
asID: 21859
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:97:fa:5d:34:88:32:4f:fb:db:d1:6c:31:64:f8:e3:4e:cf:7a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 18 08:46:56 2023 GMT
Not After : Dec 16 08:51:56 2024 GMT
Subject: CN=89D05F5D496C8BBE879FA2EA4CCFB0C74B6B23B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:6a:1f:da:96:5d:5a:07:15:33:ee:bf:c3:
67:38:15:b7:ab:65:e1:6a:4c:e2:71:de:22:e2:37:
55:36:e4:3c:96:db:74:f8:48:72:e8:1d:14:8f:26:
5f:2f:8b:d3:53:12:e4:8b:ad:d8:b3:c5:55:d7:41:
10:52:5d:bc:e9:8a:62:1c:d8:ca:8c:02:47:d5:74:
3b:f5:fb:4b:26:33:43:7a:0f:d0:21:34:66:f7:46:
41:b6:79:21:c6:03:a2:10:aa:13:38:66:c5:38:85:
1e:33:5d:3d:91:e7:4f:e4:97:2f:c8:41:54:e4:ab:
21:1d:68:3b:9b:cb:2b:0e:2d:f5:54:bb:44:f1:e6:
45:07:90:9e:77:d0:62:a4:d7:11:70:d6:ef:aa:86:
f8:ec:3a:ee:0d:ce:50:07:42:67:87:71:77:cd:93:
cb:42:e8:da:43:e9:a7:11:03:d1:7c:71:30:49:3d:
2d:7e:09:f8:58:2a:5b:bd:b0:37:5d:8f:ef:c7:93:
d5:d8:9d:b4:8d:c6:9d:cc:84:90:be:5d:cf:05:d4:
d2:15:e1:c2:f7:35:94:84:fb:f1:25:05:fe:22:2c:
6b:1e:3f:07:3a:91:44:ba:12:e7:67:db:38:2e:ec:
47:84:18:72:02:71:fa:10:cd:b8:57:af:d1:d5:d1:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:5F:5D:49:6C:8B:BE:87:9F:A2:EA:4C:CF:B0:C7:4B:6B:23:B6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
14:90:fa:35:d1:52:29:d4:1f:fb:a3:d5:ef:60:ee:dc:d6:4e:
5f:73:76:ca:47:36:f0:8a:7d:0b:f2:cb:97:28:c6:d7:d8:90:
0f:4d:7a:69:60:a7:52:2c:7b:66:b1:ed:36:9d:83:e6:0f:d2:
60:4e:9f:66:2b:75:de:f3:53:cd:55:72:f2:ff:17:80:8d:47:
d9:0d:60:5b:27:56:34:bc:70:8c:44:2e:f1:1c:52:53:c1:1d:
e8:d4:dd:73:01:c9:d7:2f:0a:33:cb:04:1b:70:84:4f:7d:10:
9a:2b:d5:4a:19:27:be:5a:81:ff:bd:6d:45:72:35:31:3d:1d:
0f:f6:0d:9b:56:b0:50:91:cb:a9:bf:00:ee:83:30:1c:35:39:
ad:6d:59:07:b7:df:81:9e:4e:7d:8d:ea:39:80:ee:15:8c:47:
24:b6:11:09:e9:fb:8d:a8:cb:59:6a:29:90:f9:c1:f6:9d:ad:
29:c9:99:b7:78:8e:ac:2e:63:38:e8:34:8a:5b:ee:71:42:50:
e3:18:ff:81:d1:6c:22:7b:b1:67:7a:da:33:8e:5d:13:82:b5:
da:f2:b6:b0:5e:fb:6e:e7:4b:26:0e:44:7c:bd:bb:97:0a:d9:
3b:54:79:0f:e4:76:38:30:bc:f3:8e:90:73:8f:7f:e9:e2:02:
88:51:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 02:12:47 2024 by rpki-client on console-ams.rpki-client.org