Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
File: 33312e362e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: llQc3a8ohQFnf9Kj8bZfSQTJZC1rlSZ1VpVR2iZ6fjg=
Subject key identifier: F9:6D:5F:E5:54:BD:03:8F:52:34:B2:C9:8A:C8:B1:0D:F3:9C:C0:7A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0513C572763E93F5FF13AF81D329F0CBD1CE038E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 27 Sep 2024 10:42:53 +0000
ROA not before: Fri 27 Sep 2024 10:37:53 +0000
ROA not after: Fri 26 Sep 2025 10:42:53 +0000
asID: 834
IP address blocks: 31.6.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 12:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:13:c5:72:76:3e:93:f5:ff:13:af:81:d3:29:f0:cb:d1:ce:03:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 27 10:37:53 2024 GMT
Not After : Sep 26 10:42:53 2025 GMT
Subject: CN=F96D5FE554BD038F5234B2C98AC8B10DF39CC07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:16:a1:11:e5:1c:97:a1:14:ef:70:b7:68:
92:59:96:b7:2d:8e:1e:56:af:d5:99:bb:38:85:a9:
c8:68:7b:65:0a:b0:1c:9b:b1:02:83:d3:0a:00:bb:
8f:ce:15:0b:8d:b2:3f:6a:24:d8:9c:bf:30:12:5b:
71:f3:df:75:22:16:8a:f3:3c:01:fa:7a:f0:c4:09:
00:03:e6:d4:09:3d:17:c8:b8:40:28:6f:67:39:c7:
6c:3d:c6:91:6d:1a:98:34:ab:10:a1:23:1e:d8:0e:
6e:67:59:e1:5c:cd:a4:59:68:df:b5:e8:80:b4:e0:
0f:da:98:c6:3a:75:c1:9c:8f:c6:86:77:5d:45:03:
3c:a3:6e:36:f1:b2:bc:7c:f5:df:2d:c1:cc:a9:59:
5e:33:ce:d2:7d:d0:c3:5c:b1:b2:92:d2:be:1b:ba:
dd:8e:b4:93:83:d8:a8:6c:09:91:db:68:cf:8f:1c:
68:8d:00:8e:8b:9f:27:64:0f:05:54:63:88:73:ad:
02:93:6f:92:ff:0a:f6:6c:27:ef:c1:a5:3d:e1:9d:
75:27:ab:43:8d:7e:c7:d1:ee:51:70:f8:70:54:f1:
fe:2d:d7:6a:d1:1e:85:b4:53:f1:db:96:8a:1d:0f:
23:50:6b:f7:60:75:67:88:c9:19:e6:ab:c7:32:5d:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:5F:E5:54:BD:03:8F:52:34:B2:C9:8A:C8:B1:0D:F3:9C:C0:7A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c0:35:4f:78:4f:99:14:80:e5:bc:6d:32:52:43:f0:96:a7:
4c:f6:c7:b7:d7:50:96:2c:22:7e:55:f2:2e:b4:a8:bf:d6:71:
56:34:ce:a5:6c:c7:78:f9:65:ec:3f:9f:08:72:6c:2e:75:5a:
7a:c7:0d:c8:ce:c3:47:a8:d9:81:7e:9a:49:91:39:fc:4d:5f:
d9:02:47:ed:4a:29:6e:b8:c0:b5:69:3f:35:92:5e:bd:ab:46:
b9:01:ad:a5:ad:6d:a3:96:95:47:31:05:a7:dd:7c:b5:5d:cc:
a5:10:ea:a8:cd:df:e3:6a:09:5a:96:99:a3:ff:cf:86:cd:91:
62:68:b5:2e:31:dd:f8:b8:4c:d6:55:34:22:cc:c5:4c:75:1e:
53:ae:ff:bf:17:9f:a5:14:c9:94:6c:b1:ca:bb:a0:60:71:87:
c9:b0:a4:cc:92:02:f0:fd:8c:48:9f:42:64:51:9f:f3:32:cb:
96:b4:f7:f6:d4:14:81:96:25:99:0c:67:50:9a:25:c2:af:9b:
87:75:cf:d2:46:14:d2:49:cf:05:30:e9:e4:04:19:6c:f9:9b:
60:d4:36:0f:bc:c2:b6:67:50:f7:ab:f0:29:66:aa:67:f0:c0:
b9:91:5f:f2:e7:cb:87:7a:f4:5d:f1:4c:22:6a:4e:a0:ae:d8:
d2:f2:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:21 2025 by rpki-client