Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20383334.roa
File: 33312e362e35332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2/9PgiXoID6fEnOfQJw23yOW+pojgknDFswrzV5ah8Y=
Subject key identifier: 9E:49:47:AF:70:63:B4:FC:8F:65:80:B5:39:1C:D6:02:71:4C:75:FC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 52C3C7019380CE823D55CFA11A144F13ECC83F9F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 Nov 2024 14:02:43 +0000
ROA not before: Thu 14 Nov 2024 13:57:43 +0000
ROA not after: Thu 13 Nov 2025 14:02:43 +0000
asID: 834
IP address blocks: 31.6.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 23:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c3:c7:01:93:80:ce:82:3d:55:cf:a1:1a:14:4f:13:ec:c8:3f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 13:57:43 2024 GMT
Not After : Nov 13 14:02:43 2025 GMT
Subject: CN=9E4947AF7063B4FC8F6580B5391CD602714C75FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:0a:41:86:98:72:75:36:1e:33:a1:bc:4d:
f4:01:93:87:6d:e2:57:28:2c:05:45:3b:37:fe:bb:
ea:9b:68:ff:90:74:71:c3:fd:a8:7a:e5:54:f6:2b:
34:19:9c:d9:22:61:21:cc:3e:65:a7:6a:aa:cf:1f:
0a:8e:13:7e:3d:f1:fd:2a:a3:0f:7f:b6:7c:64:71:
01:a7:a1:9c:ac:9b:9e:ea:08:a2:b6:17:06:1f:60:
ba:e1:d6:a0:a4:12:07:2a:58:40:7e:f5:76:5b:0c:
c5:24:db:ed:8d:47:60:65:00:5b:3a:4d:b0:67:f2:
c5:ab:85:8e:48:43:b5:48:29:c0:a5:1e:b2:ad:e7:
ce:1b:de:fb:22:ad:41:8c:8b:c9:de:12:2e:1c:6f:
95:11:9f:1e:a2:23:e2:15:31:cf:6c:75:32:19:1d:
e1:7f:00:b8:38:12:b4:e8:4d:9b:2a:79:1c:f1:ad:
7a:09:23:62:af:af:b3:44:24:78:11:a4:27:5a:f4:
ec:14:7d:b4:8c:4b:54:63:5b:22:c4:ec:38:83:46:
fd:0b:3b:ba:07:b2:fc:fd:ac:b7:59:c7:65:e4:80:
ba:4c:a9:86:4e:6c:de:66:09:bf:94:01:d5:ac:8b:
e1:f1:93:b0:e7:4d:82:88:bb:97:22:ae:bb:dc:09:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:47:AF:70:63:B4:FC:8F:65:80:B5:39:1C:D6:02:71:4C:75:FC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.53.0/24
Signature Algorithm: sha256WithRSAEncryption
85:92:0e:2f:96:d4:c3:51:8c:1a:dc:90:bd:15:3d:38:58:fd:
fb:27:02:5f:1b:5c:ae:d4:ca:b2:c0:b6:a9:b4:cb:59:11:70:
48:2d:7c:96:cf:1f:8b:8c:2d:7b:0d:77:2e:1f:ca:a5:88:a3:
11:55:ec:2a:6f:e3:a9:85:8b:d8:96:bd:b3:d3:b5:61:b6:4a:
2d:dc:0c:dd:ba:51:e2:96:51:f4:85:62:68:0f:55:2b:91:88:
be:c6:ae:0c:ca:81:e9:81:27:3d:6e:b8:90:59:c6:02:0a:0d:
a4:43:fc:37:27:fa:33:f2:6d:25:28:de:c1:ce:59:91:40:ba:
75:91:79:d5:bd:81:8b:0e:92:ba:b5:a3:c1:e3:c6:0b:7b:aa:
e0:f7:b7:06:dc:06:d1:25:a2:0a:72:14:3a:fa:92:b4:01:03:
29:18:67:fc:14:f9:37:58:7b:6d:15:db:54:03:fe:c1:d3:26:
31:9c:5e:0c:17:8f:92:65:4c:18:e8:27:34:f6:e9:12:e4:f1:
01:44:5a:88:15:f4:93:69:27:4b:13:c9:ae:6c:7e:69:3a:23:
cc:24:2d:46:25:aa:29:2f:d9:7c:ea:92:95:78:98:a0:85:cb:
f3:b6:d9:65:bf:97:83:4a:bd:f9:a7:aa:48:09:c8:81:f5:f2:
35:bb:7c:44
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUsPHAZOAzoI9Vc+hGhRPE+zIP58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDExMTQxMzU3NDNaFw0yNTExMTMxNDAyNDNaMDMxMTAvBgNV
BAMTKDlFNDk0N0FGNzA2M0I0RkM4RjY1ODBCNTM5MUNENjAyNzE0Qzc1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvApBhphydTYeM6G8TfQBk4dt
4lcoLAVFOzf+u+qbaP+QdHHD/ah65VT2KzQZnNkiYSHMPmWnaqrPHwqOE3498f0q
ow9/tnxkcQGnoZysm57qCKK2FwYfYLrh1qCkEgcqWEB+9XZbDMUk2+2NR2BlAFs6
TbBn8sWrhY5IQ7VIKcClHrKt584b3vsirUGMi8neEi4cb5URnx6iI+IVMc9sdTIZ
HeF/ALg4ErToTZsqeRzxrXoJI2Kvr7NEJHgRpCda9OwUfbSMS1RjWyLE7DiDRv0L
O7oHsvz9rLdZx2XkgLpMqYZObN5mCb+UAdWsi+Hxk7DnTYKIu5cirrvcCeEfAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUnklHr3BjtPyPZYC1ORzWAnFMdfwwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjUwDQYJKoZI
hvcNAQELBQADggEBAIWSDi+W1MNRjBrckL0VPThY/fsnAl8bXK7UyrLAtqm0y1kR
cEgtfJbPH4uMLXsNdy4fyqWIoxFV7Cpv46mFi9iWvbPTtWG2Si3cDN26UeKWUfSF
YmgPVSuRiL7GrgzKgemBJz1uuJBZxgIKDaRD/Dcn+jPybSUo3sHOWZFAunWRedW9
gYsOkrq1o8Hjxgt7quD3twbcBtElogpyFDr6krQBAykYZ/wU+TdYe20V21QD/sHT
JjGcXgwXj5JlTBjoJzT26RLk8QFEWogV9JNpJ0sTya5sfmk6I8wkLUYlqikv2Xzq
kpV4mKCFy/O22WW/l4NKvfmnqkgJyIH18jW7fEQ=
Generated at Fri Nov 15 01:01:24 2024 by rpki-client on console-fra.rpki-client.org