Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
File: 33312e362e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ssOFWTpDImbNPpAsGhpdVX56NGHXODPBMElrDDdaYp4=
Subject key identifier: 11:96:93:BC:96:36:C8:DE:1F:87:D9:DE:D3:BC:C5:92:7C:6F:5F:A6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 62D22E2F3669F10623B2F4D60356933C05D60156
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 May 2024 10:07:10 +0000
ROA not before: Fri 17 May 2024 10:02:10 +0000
ROA not after: Fri 16 May 2025 10:07:10 +0000
asID: 834
IP address blocks: 31.6.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 08:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d2:2e:2f:36:69:f1:06:23:b2:f4:d6:03:56:93:3c:05:d6:01:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 17 10:02:10 2024 GMT
Not After : May 16 10:07:10 2025 GMT
Subject: CN=119693BC9636C8DE1F87D9DED3BCC5927C6F5FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:97:70:f4:cd:17:0e:97:a0:14:b0:84:f2:
76:7e:1a:ca:9f:71:28:16:95:45:9c:7c:11:e5:60:
78:e9:ba:10:ea:6d:88:bb:f6:b2:cc:58:a6:ce:b9:
3d:11:35:dc:c0:5c:60:23:37:6b:2a:fa:1e:7f:66:
d8:b4:01:3b:41:75:6e:d6:3e:33:b8:23:5f:a5:2f:
b3:cc:b2:91:dc:a5:8f:04:f5:b6:bf:1b:44:fd:83:
58:cd:5f:f3:36:19:b0:42:0f:28:ac:d4:81:42:ff:
32:f2:4d:77:aa:fc:b1:b9:15:05:3c:f9:c0:d8:d2:
0c:c6:bf:45:b4:7d:9d:c7:1f:6c:0e:9a:f4:45:a4:
61:02:b4:34:28:de:d4:ad:18:46:ed:95:e3:7d:4a:
30:8e:68:6f:65:ea:0e:4d:05:1d:a8:99:5f:6b:84:
88:02:75:f7:84:05:b9:01:34:9d:da:f8:e9:62:b3:
bb:08:82:9e:d2:be:e8:84:c5:3f:af:57:d6:02:8d:
a2:1f:1d:22:2e:2d:78:23:e9:21:3f:84:6f:78:90:
39:12:0d:d6:8b:a9:c3:84:4d:1f:19:b9:57:43:ec:
a7:c8:1e:3c:a1:8f:f6:d5:48:76:b6:d9:57:a0:5f:
ab:f5:ad:1f:65:cc:7f:25:f2:cb:4b:76:f6:13:42:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:93:BC:96:36:C8:DE:1F:87:D9:DE:D3:BC:C5:92:7C:6F:5F:A6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.51.0/24
Signature Algorithm: sha256WithRSAEncryption
25:45:12:1d:5f:57:1a:e4:33:13:43:cf:64:7f:7d:3b:4d:f5:
91:94:1f:a5:42:a1:3d:e9:65:db:23:82:2c:06:51:a8:1d:0b:
0f:77:88:aa:1f:1d:50:6b:f1:88:8f:48:5c:42:98:2c:99:70:
fb:c5:e1:d4:61:47:98:5c:1c:50:cf:67:5e:98:e0:52:a1:93:
e7:69:42:13:89:3a:47:ff:77:30:63:d3:cf:db:33:8d:11:f9:
24:6c:8d:f9:1e:1c:e4:d5:7e:1b:d1:dc:20:0b:d5:a0:ce:3e:
16:50:6b:80:b3:f9:4d:b5:23:3b:f7:e0:11:61:27:90:d0:6d:
c0:17:b7:ed:55:9e:69:58:9e:2f:09:37:35:90:82:9e:09:f9:
16:83:4b:d5:99:fc:8a:80:56:7e:72:33:4c:2b:14:7e:d3:8b:
b2:6f:27:02:05:2c:94:3d:d3:bd:f9:fc:28:5f:bf:58:fd:21:
28:b0:d4:ab:50:25:4c:08:48:99:73:a4:a0:f1:b9:42:0f:af:
af:bc:aa:55:4b:ec:55:21:b1:50:8b:7a:fd:f9:28:b5:0e:90:
5a:07:80:90:e8:1a:c1:33:17:ae:97:53:12:3b:15:4e:cd:cd:
1e:59:94:41:07:90:ad:56:dd:a8:68:8b:29:32:00:fd:0d:48:
0f:b3:86:3c
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUYtIuLzZp8QYjsvTWA1aTPAXWAVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA1MTcxMDAyMTBaFw0yNTA1MTYxMDA3MTBaMDMxMTAvBgNV
BAMTKDExOTY5M0JDOTYzNkM4REUxRjg3RDlERUQzQkNDNTkyN0M2RjVGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOupdw9M0XDpegFLCE8nZ+Gsqf
cSgWlUWcfBHlYHjpuhDqbYi79rLMWKbOuT0RNdzAXGAjN2sq+h5/Zti0ATtBdW7W
PjO4I1+lL7PMspHcpY8E9ba/G0T9g1jNX/M2GbBCDyis1IFC/zLyTXeq/LG5FQU8
+cDY0gzGv0W0fZ3HH2wOmvRFpGECtDQo3tStGEbtleN9SjCOaG9l6g5NBR2omV9r
hIgCdfeEBbkBNJ3a+Olis7sIgp7SvuiExT+vV9YCjaIfHSIuLXgj6SE/hG94kDkS
DdaLqcOETR8ZuVdD7KfIHjyhj/bVSHa22VegX6v1rR9lzH8l8stLdvYTQp1NAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUEZaTvJY2yN4fh9ne07zFknxvX6YwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzEyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjMwDQYJKoZI
hvcNAQELBQADggEBACVFEh1fVxrkMxNDz2R/fTtN9ZGUH6VCoT3pZdsjgiwGUagd
Cw93iKofHVBr8YiPSFxCmCyZcPvF4dRhR5hcHFDPZ16Y4FKhk+dpQhOJOkf/dzBj
08/bM40R+SRsjfkeHOTVfhvR3CAL1aDOPhZQa4Cz+U21Izv34BFhJ5DQbcAXt+1V
nmlYni8JNzWQgp4J+RaDS9WZ/IqAVn5yM0wrFH7Ti7JvJwIFLJQ90735/Chfv1j9
ISiw1KtQJUwISJlzpKDxuUIPr6+8qlVL7FUhsVCLev35KLUOkFoHgJDoGsEzF66X
UxI7FU7NzR5ZlEEHkK1W3ahoiykyAP0NSA+zhjw=
-----END CERTIFICATE-----
Generated at Mon May 20 12:33:10 2024 by rpki-client on console-fra.rpki-client.org