Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
File: 33312e362e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pv69BWucQg/mkKaNybZMJAc/GCSOmTFNGWKO6ezhSZM=
Subject key identifier: CC:A0:47:F7:32:4A:A2:16:4F:54:76:81:5B:02:70:61:25:C8:29:B8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6654181C46C28D35F1259CA39812884D79B4495F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
Signing time: Tue 20 May 2025 00:04:16 +0000
ROA not before: Mon 19 May 2025 23:59:16 +0000
ROA not after: Tue 19 May 2026 00:04:16 +0000
asID: 834
IP address blocks: 31.6.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 12:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:54:18:1c:46:c2:8d:35:f1:25:9c:a3:98:12:88:4d:79:b4:49:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 19 23:59:16 2025 GMT
Not After : May 19 00:04:16 2026 GMT
Subject: CN=CCA047F7324AA2164F5476815B02706125C829B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:ab:38:d5:a3:3a:f4:48:eb:36:74:f3:8a:
e8:3c:f6:99:40:d2:1b:63:02:c7:de:62:a3:e3:ab:
ab:4d:f8:00:21:c5:b7:a4:e6:59:45:ed:af:25:a5:
e6:6f:f0:60:ee:53:2b:90:80:8c:f7:02:12:d4:9e:
bd:9a:7e:1b:80:92:5e:50:04:06:e5:2b:8b:1d:f2:
de:32:9b:53:69:0e:26:dd:de:c4:b7:41:13:e6:97:
45:50:69:e0:5f:6b:08:b4:7c:2a:30:8b:7f:e5:f9:
8c:06:21:f7:0a:f2:78:41:0e:01:f3:b1:81:9b:45:
1f:6b:06:df:38:58:41:d5:3a:ba:47:b6:29:eb:84:
4e:a4:99:b8:54:82:7f:2b:14:e2:02:b0:49:dc:2f:
2b:8c:20:8a:c4:bc:5a:a1:d3:06:73:05:c3:fe:a0:
d1:21:09:10:de:c0:4d:44:ec:30:e6:1d:38:00:c8:
ed:bc:a4:97:11:71:0f:5a:03:91:db:b3:0a:85:23:
e1:32:41:fb:35:80:70:c8:9d:1a:a1:cc:7a:a7:e4:
db:b2:36:50:0a:e8:a2:f6:27:2c:25:60:bf:10:da:
c6:b1:82:13:48:a8:47:2e:bf:ed:f6:79:e5:f7:c8:
46:21:6e:be:77:88:ef:1d:69:b9:c7:e6:f3:da:8a:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:47:F7:32:4A:A2:16:4F:54:76:81:5B:02:70:61:25:C8:29:B8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.51.0/24
Signature Algorithm: sha256WithRSAEncryption
83:56:76:e7:76:00:7b:67:4d:37:db:8b:bd:ef:3d:9b:9b:e1:
52:ad:6b:22:75:00:1d:03:1e:3a:c7:d0:5a:c8:84:0c:d3:13:
40:c5:b8:8f:2f:10:c3:eb:c1:02:17:13:19:63:ef:4f:a1:26:
7f:ac:6b:ad:4f:2b:30:bb:a5:c3:82:33:29:ed:9c:d9:9b:8a:
7e:c8:47:13:1f:e7:b0:fb:79:1f:e3:4e:ce:3a:bf:37:4d:f7:
d0:dd:60:9f:d7:2f:64:08:f8:68:a8:87:47:6c:40:06:37:3f:
cc:46:72:7c:73:fd:4e:fb:7c:20:8d:2f:89:2f:25:46:e4:54:
a0:b6:5a:65:20:d1:00:88:85:92:e8:5a:ce:e8:ae:a3:41:8e:
bc:46:8f:de:81:f3:9d:43:b6:be:77:55:68:f4:61:3e:98:a8:
92:c6:ec:57:bf:48:ba:d0:17:55:40:6c:af:6b:06:7a:56:f6:
62:a7:5c:f8:b6:d2:5a:c3:81:48:3f:c8:96:6f:01:ef:f1:35:
30:66:57:c2:dc:b7:7e:b4:41:12:ab:72:63:8d:5e:8f:97:a8:
fb:a7:d9:e3:37:df:73:24:59:c6:ec:e8:01:d4:13:f1:5e:08:
5d:ac:d8:c6:c5:5f:0f:0c:67:49:c1:e4:62:31:24:94:7d:e8:
40:4e:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:47 2025 by rpki-client