Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
File: 33312e362e35322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: Cf6IWJUHXozljARNIFhkmaA00cwKh1M4KHiiNHVFARQ=
Subject key identifier: E8:36:C9:DD:53:84:77:D5:42:D1:53:72:70:86:7D:30:73:6C:05:CB
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 68FECA31A507A7463CA4A6B622AFB3E6EB2EC68A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
Signing time: Thu 14 Nov 2024 00:02:08 +0000
ROA not before: Wed 13 Nov 2024 23:57:08 +0000
ROA not after: Thu 13 Nov 2025 00:02:08 +0000
asID: 834
IP address blocks: 31.6.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fe:ca:31:a5:07:a7:46:3c:a4:a6:b6:22:af:b3:e6:eb:2e:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 13 23:57:08 2024 GMT
Not After : Nov 13 00:02:08 2025 GMT
Subject: CN=E836C9DD538477D542D1537270867D30736C05CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:82:3f:8a:a3:bf:54:ab:07:e4:c9:a0:41:
18:5b:6a:86:45:70:44:5e:d9:f1:f1:8f:6d:f4:05:
66:15:9f:5c:2e:a9:8f:54:f4:dd:a0:78:39:25:dc:
7c:32:7c:e0:51:38:4f:fb:f8:31:0d:ad:5f:c9:e3:
1b:41:6b:8b:ca:36:f9:2a:1b:6d:87:87:d4:89:28:
62:c0:9a:fe:eb:7c:51:1e:d8:43:d6:8a:92:c4:3b:
66:0c:0d:25:9c:2a:43:e6:93:96:95:98:b4:8a:43:
ca:38:52:ab:63:9c:60:60:33:cb:d1:7c:6d:7c:67:
4b:05:52:4f:26:be:19:72:70:b9:ed:20:5b:f5:b7:
41:ca:4c:83:dd:cf:54:c0:bf:a8:66:7e:40:fb:03:
6d:8c:42:0c:09:b0:9e:2c:47:3a:92:f6:ff:1a:a6:
c8:19:22:4e:3b:9c:65:c9:37:aa:2f:99:08:ba:63:
df:aa:04:42:46:74:7b:c2:7c:4e:ac:e2:c8:86:36:
31:82:7e:88:8c:bd:6e:57:ba:ec:44:ac:cc:03:1c:
ba:99:c7:97:55:c8:cb:da:53:0b:53:4a:63:36:c3:
14:56:d9:0f:25:52:bb:3c:38:6c:4f:ee:d1:81:2c:
a3:cc:e8:62:d3:09:1d:59:51:11:28:5f:1e:eb:02:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:C9:DD:53:84:77:D5:42:D1:53:72:70:86:7D:30:73:6C:05:CB
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/22
Signature Algorithm: sha256WithRSAEncryption
70:7a:c6:6e:69:12:93:eb:6c:03:10:36:42:0d:32:ee:39:36:
3d:0f:58:3e:ff:9d:48:e3:3b:26:11:23:66:9c:eb:e9:7a:44:
15:45:64:bf:da:67:e2:36:1f:6e:a1:68:8c:7f:2d:6b:e2:c8:
01:b0:c1:c1:af:70:bb:4a:dd:62:01:cb:7b:58:ed:b6:3b:62:
a4:4d:28:e2:a6:5f:7e:0a:30:7f:cd:6e:97:93:a5:c6:1a:1b:
44:d4:70:47:bd:2b:42:61:80:f1:cd:c2:60:13:c0:1d:e8:8f:
66:94:a8:8a:f1:02:c0:6e:0d:b2:6f:9c:c7:ad:f8:f2:7e:61:
d4:f3:14:81:97:79:8e:23:a2:c0:d4:a5:6b:9e:89:ac:25:e2:
99:c3:8b:ef:a0:a1:99:3a:57:37:91:f2:e0:65:79:07:87:07:
81:22:a5:95:68:d5:41:fe:c0:14:30:66:eb:31:1c:38:80:17:
6c:07:44:79:96:7e:27:55:54:52:bb:69:9d:1e:84:8d:94:c0:
bc:87:07:a0:65:c2:f9:c1:d8:60:a7:2d:25:e8:1a:2f:b3:63:
a7:3e:d7:37:7d:95:0f:dd:17:6a:41:b5:50:35:eb:b5:fe:88:
2b:f7:eb:8e:82:16:74:52:dc:e9:2c:6a:bd:6b:ab:3d:1b:29:
4b:c4:43:d0
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 14 17:49:49 2024 by rpki-client on console-ams.rpki-client.org