Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
File: 33312e362e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1SJwMBq8L7h+MHE19CC0e/WmTU0WNkKiUQF1z2WjZRI=
Subject key identifier: 18:3A:B6:2C:A7:47:23:0C:49:8A:65:5C:42:84:4D:BD:B0:9A:63:34
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 516EFECCC1FC64B96CFBF11CF875DA42EAD7BE78
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
Signing time: Thu 01 Feb 2024 00:00:06 +0000
ROA not before: Wed 31 Jan 2024 23:55:06 +0000
ROA not after: Thu 30 Jan 2025 00:00:06 +0000
asID: 834
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 06:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6e:fe:cc:c1:fc:64:b9:6c:fb:f1:1c:f8:75:da:42:ea:d7:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 31 23:55:06 2024 GMT
Not After : Jan 30 00:00:06 2025 GMT
Subject: CN=183AB62CA747230C498A655C42844DBDB09A6334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fc:b6:50:04:71:a6:f7:9d:d6:5e:14:32:f1:
0f:26:8f:71:97:a6:6f:20:a6:10:19:af:79:0e:63:
2d:d1:96:5a:29:30:24:bc:40:ab:93:fb:8b:b3:92:
33:62:cb:73:45:66:bd:ff:4c:54:79:d9:95:cb:b3:
5b:eb:d2:ad:94:d5:ce:91:fa:65:62:40:77:de:23:
14:ed:c6:21:34:bd:fc:1d:6b:98:94:35:96:f0:2b:
7c:15:89:9f:b9:4c:4e:11:73:b0:99:7d:1d:7c:60:
1e:5c:51:5c:af:83:ee:90:85:9c:6f:79:5f:f5:c3:
aa:93:88:ab:5c:64:e4:22:bd:e1:53:70:4c:bc:45:
e4:81:ab:d7:7b:14:27:45:a2:67:ac:77:0f:35:90:
bb:9f:5e:95:0f:a9:85:7b:98:87:c1:b0:99:6a:0a:
47:64:1c:70:b3:c8:51:87:98:a8:13:9c:5e:39:59:
57:51:0c:0f:2b:cd:15:05:a2:9a:58:fd:ca:25:56:
af:b1:8e:69:65:bd:af:7a:dd:45:53:99:a8:5a:7c:
92:f6:29:0b:02:03:a6:a8:c4:f5:d3:cf:de:92:88:
13:39:0c:2f:52:32:7e:ce:49:2c:65:12:a1:87:7f:
36:e5:2c:52:8f:48:14:0b:6f:64:f6:92:58:c8:3e:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:B6:2C:A7:47:23:0C:49:8A:65:5C:42:84:4D:BD:B0:9A:63:34
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:35:b2:04:9c:47:67:93:d9:13:f3:07:db:8e:8d:55:d0:a0:
b6:d5:95:bf:d3:0c:64:ca:ad:48:b5:01:9a:53:54:16:c9:c7:
81:a7:df:e1:54:60:d7:63:5c:ce:84:42:d7:88:c7:5d:49:eb:
02:bd:73:ca:05:86:1f:3a:c6:43:06:a4:a8:bc:c6:90:e1:96:
2f:3d:49:c3:9a:f1:bf:c4:50:ea:ac:c1:8e:7e:d7:0d:d4:b0:
ed:c5:42:3e:1f:45:c4:4c:68:15:d6:01:26:9a:03:0e:fd:da:
00:41:b2:29:7e:48:3b:f5:1a:3c:0a:67:7e:fb:91:67:f3:2d:
1c:6e:97:13:67:09:ee:32:a5:9e:be:ad:ab:66:16:c3:e1:d3:
c5:11:ad:e7:50:11:d4:14:ea:2f:51:4e:32:24:2d:b0:fa:12:
8d:8d:1f:79:95:71:c4:d4:bb:41:1a:a5:00:82:92:f0:29:57:
e9:2e:96:4d:e6:28:b0:fc:59:d3:4c:d0:69:c9:4a:45:67:1a:
a8:cd:ef:43:5e:2f:2c:0e:da:f1:6a:51:bc:ae:0f:f3:84:05:
0a:f2:62:24:e1:b0:65:0b:a2:62:31:f3:a5:e5:d9:62:e0:c2:
7d:cd:16:a0:aa:6d:99:67:93:f5:69:98:de:d2:51:12:9e:e2:
4d:a8:6a:7b
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUW7+zMH8ZLls+/Ec+HXaQurXvngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDAxMzEyMzU1MDZaFw0yNTAxMzAwMDAwMDZaMDMxMTAvBgNV
BAMTKDE4M0FCNjJDQTc0NzIzMEM0OThBNjU1QzQyODQ0REJEQjA5QTYzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw/LZQBHGm953WXhQy8Q8mj3GX
pm8gphAZr3kOYy3RllopMCS8QKuT+4uzkjNiy3NFZr3/TFR52ZXLs1vr0q2U1c6R
+mViQHfeIxTtxiE0vfwda5iUNZbwK3wViZ+5TE4Rc7CZfR18YB5cUVyvg+6QhZxv
eV/1w6qTiKtcZOQiveFTcEy8ReSBq9d7FCdFomesdw81kLufXpUPqYV7mIfBsJlq
CkdkHHCzyFGHmKgTnF45WVdRDA8rzRUFoppY/colVq+xjmllva963UVTmahafJL2
KQsCA6aoxPXTz96SiBM5DC9SMn7OSSxlEqGHfzblLFKPSBQLb2T2kljIPr17AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUGDq2LKdHIwxJimVcQoRNvbCaYzQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjAwDQYJKoZI
hvcNAQELBQADggEBAKU1sgScR2eT2RPzB9uOjVXQoLbVlb/TDGTKrUi1AZpTVBbJ
x4Gn3+FUYNdjXM6EQteIx11J6wK9c8oFhh86xkMGpKi8xpDhli89ScOa8b/EUOqs
wY5+1w3UsO3FQj4fRcRMaBXWASaaAw792gBBsil+SDv1GjwKZ377kWfzLRxulxNn
Ce4ypZ6+ratmFsPh08URredQEdQU6i9RTjIkLbD6Eo2NH3mVccTUu0EapQCCkvAp
V+kulk3mKLD8WdNM0GnJSkVnGqjN70NeLywO2vFqUbyuD/OEBQryYiThsGULomIx
86Xl2WLgwn3NFqCqbZlnk/VpmN7SURKe4k2oans=
-----END CERTIFICATE-----
Generated at Thu Feb 1 10:39:43 2024 by rpki-client on console-ams.rpki-client.org