Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
File: 33312e362e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: y9/6D8ouFZcIrg+5pzVngQ/Roc6zJdsmM2NXzChkZEY=
Subject key identifier: FE:C7:44:A6:11:5A:FB:4E:6D:89:88:C3:DA:24:17:BB:60:43:70:8C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 72F835F8BD6C6A5FFC21F97E8C0022914C24F51F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 Jan 2024 00:00:08 +0000
ROA not before: Thu 25 Jan 2024 23:55:08 +0000
ROA not after: Fri 24 Jan 2025 00:00:08 +0000
asID: 834
IP address blocks: 31.6.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 13:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f8:35:f8:bd:6c:6a:5f:fc:21:f9:7e:8c:00:22:91:4c:24:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 25 23:55:08 2024 GMT
Not After : Jan 24 00:00:08 2025 GMT
Subject: CN=FEC744A6115AFB4E6D8988C3DA2417BB6043708C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:f3:32:76:58:b8:e5:7c:76:f5:7e:bc:57:
01:4a:98:1b:d3:e2:ce:78:4a:ad:70:1b:ea:c1:55:
d9:44:db:90:c8:9d:60:bb:cc:55:2a:a8:00:05:b8:
5c:6f:6c:a1:95:7b:3f:78:44:17:a0:5c:68:36:d7:
fb:f6:fd:90:3d:47:55:fa:91:b3:e7:4a:a7:35:b5:
79:c4:ac:49:fd:f8:6d:71:fe:21:d4:41:96:3e:c5:
d1:0a:7e:f8:68:ac:2d:25:c0:af:35:4b:4e:9f:e4:
59:5e:fc:d3:6d:5c:b1:4c:97:3a:8d:90:2b:85:e8:
85:a9:53:e4:e0:5f:16:ef:b9:87:0b:8b:d3:ac:4d:
05:0d:6e:c5:9c:87:84:b6:df:ec:10:15:25:f8:f0:
49:84:c8:60:b9:f9:ba:5e:b7:89:38:4b:c4:9c:a4:
10:fe:fc:c0:58:2b:d5:9c:77:ea:c6:f8:b7:b0:20:
af:cd:09:c0:91:06:d1:c3:b4:cf:23:07:09:24:44:
5c:09:b2:2c:3b:e1:f9:67:d5:6e:ec:9b:18:21:ea:
85:a9:b0:96:8f:38:5e:90:23:b2:39:52:8c:2b:e0:
df:52:bd:a3:6b:12:80:60:a4:e3:43:86:75:0e:10:
50:ee:ac:36:e8:8c:5d:fa:86:ac:dc:61:44:fa:0e:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:44:A6:11:5A:FB:4E:6D:89:88:C3:DA:24:17:BB:60:43:70:8C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/24
Signature Algorithm: sha256WithRSAEncryption
66:72:3b:1e:03:9e:4f:f7:04:9a:9c:0e:46:fb:8d:93:72:6f:
5c:f9:b5:d5:37:b4:16:ed:31:59:52:c0:3d:ff:e7:ce:7e:df:
6f:cf:7f:11:91:19:b4:3d:0c:dc:ec:70:b8:f5:ad:88:32:b2:
84:e8:b3:63:cf:58:f2:67:bf:3c:2c:60:85:8a:86:fa:94:d4:
d0:48:5f:f9:dd:33:05:c0:05:37:7e:64:6e:98:98:af:07:fd:
4d:f1:e4:b2:73:85:91:3f:62:a3:00:1a:55:f8:f0:26:28:b4:
d6:f4:dc:2f:f0:0e:ea:4f:2c:2c:5d:04:48:97:bd:c1:c8:82:
4c:0f:90:64:45:70:f2:24:ec:9b:c6:a3:e9:75:85:d4:93:0e:
14:e2:de:fe:bf:c7:3a:88:33:c8:10:ee:4e:88:cf:6f:40:01:
db:e9:22:33:7d:9f:3e:fa:19:6a:c5:91:91:18:53:72:32:95:
fe:42:6f:65:3e:a1:91:50:e2:7a:a4:2b:45:cd:21:ed:15:3c:
27:23:e2:a9:d3:fa:bc:1b:49:91:b2:3d:fe:54:c4:69:1d:f4:
55:a3:96:a7:ce:c2:cc:c8:cd:ff:25:90:ab:57:6f:c4:e1:3c:
93:0c:35:e8:79:0c:12:69:07:84:f9:1a:a1:f1:c5:68:6d:40:
ac:9a:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 18:48:41 2024 by rpki-client on console-ams.rpki-client.org