Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32332d3234203d3e20383334.roa
File: 33312e362e35302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: WIrZEVBavr24R/LCHKjjk/DuLbIrLvxoVSzMDX42mxs=
Subject key identifier: 9D:32:0C:F3:7F:D6:46:8C:0B:2F:3A:4B:B9:EB:B8:07:95:F6:C7:B0
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 45E03AFD7BF00A179931594B9E135CB9EBA1B0C7
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:29 +0000
ROA not before: Mon 02 Oct 2023 05:15:29 +0000
ROA not after: Mon 30 Sep 2024 05:20:29 +0000
asID: 834
IP address blocks: 31.6.50.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e0:3a:fd:7b:f0:0a:17:99:31:59:4b:9e:13:5c:b9:eb:a1:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:29 2023 GMT
Not After : Sep 30 05:20:29 2024 GMT
Subject: CN=9D320CF37FD6468C0B2F3A4BB9EBB80795F6C7B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:a9:e6:81:99:e9:77:25:31:52:62:58:77:
0c:ae:24:32:36:fb:27:77:af:ad:8e:40:b8:32:84:
4a:1c:5e:ae:17:97:09:9b:b5:bd:24:ef:16:01:6c:
00:e5:d9:c9:1c:5f:9d:45:2a:6a:1a:32:02:a6:5d:
0b:da:7d:c4:b3:d9:11:b1:69:9f:f3:3f:72:2d:c2:
06:81:a3:af:f5:e2:18:50:4f:ff:5a:6d:9a:ab:4e:
6a:71:d0:72:ee:42:a7:8a:b0:f1:68:3e:ae:8a:a7:
ad:53:05:6b:39:fc:45:c8:8f:7c:7b:62:71:1d:92:
a6:7e:54:30:b5:02:27:37:41:a7:c4:17:c8:a7:15:
88:76:bb:a9:48:c9:89:df:11:7e:52:a0:4d:7d:8a:
c5:80:65:3a:fb:15:be:5b:a3:2c:32:a3:60:3a:fb:
7f:ef:79:dd:68:21:fc:09:9e:0f:26:dc:92:09:28:
52:12:da:21:b0:d3:60:ae:c8:48:13:8c:26:d2:a2:
bb:f1:ff:64:29:b6:42:39:ea:53:5b:35:f1:09:4b:
c5:46:56:62:48:04:c7:41:72:c2:16:fa:f1:ae:90:
6d:28:ef:5c:f0:38:ae:f3:04:2d:01:6f:28:6c:d1:
3d:51:de:a9:18:4c:ba:97:61:8a:1f:c5:65:b3:b2:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:0C:F3:7F:D6:46:8C:0B:2F:3A:4B:B9:EB:B8:07:95:F6:C7:B0
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/23
Signature Algorithm: sha256WithRSAEncryption
17:30:8e:c1:c2:4d:1c:8d:c3:a0:64:53:98:cd:11:54:29:23:
77:ec:cc:16:e2:4d:da:af:d5:32:82:f9:8f:69:e9:d1:91:7e:
4d:47:b4:92:27:88:a0:db:9b:87:de:59:33:32:2e:b6:b8:8d:
cd:3f:4d:71:0a:ab:2b:3a:68:8b:f7:0a:ca:ce:81:69:8a:5c:
d7:2f:35:45:de:c8:f3:a3:99:03:ca:4c:f7:e9:61:7d:1d:ae:
0b:ed:5b:d3:ed:5c:9c:0a:4b:61:52:51:ee:79:d2:f9:b5:be:
d0:87:e0:9d:e1:3a:e8:b8:e1:70:7f:dc:92:50:47:95:03:a2:
1d:2a:12:ab:01:89:82:27:20:4f:00:33:fd:d1:af:c5:62:c1:
ad:fc:41:f9:64:f4:eb:c9:42:d9:33:a3:31:e3:c4:70:30:32:
6b:c0:c5:9b:0c:30:82:34:ba:34:1c:7d:3e:c4:06:c4:c9:ec:
8f:9e:27:79:8e:7c:e1:1e:41:df:84:c5:35:a4:ad:fb:1c:c8:
64:9d:8d:b1:ba:d9:5b:22:87:39:92:f8:7d:17:51:29:2c:6c:
80:07:44:39:f5:c9:e7:c8:29:fe:1c:61:5c:e7:e4:25:44:2a:
fb:44:4b:d1:a6:0e:6c:bd:52:e9:b6:a7:0f:1f:07:9d:6c:ea:
49:aa:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 04:31:20 2023 by rpki-client on console-ams.rpki-client.org