Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
File: 33312e362e35342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: hs11uQI/rfe4KVN5qQOpevfKsKMFKacY53vVT3xgaqA=
Subject key identifier: CE:BB:3A:86:5C:99:91:B0:4E:DA:80:2C:16:B7:91:86:F8:18:B4:E7
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2BCD629C436FDC8B9AC7796BB8E70AF9229EF433
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
Signing time: Thu 14 Nov 2024 14:02:43 +0000
ROA not before: Thu 14 Nov 2024 13:57:43 +0000
ROA not after: Thu 13 Nov 2025 14:02:43 +0000
asID: 834
IP address blocks: 31.6.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cd:62:9c:43:6f:dc:8b:9a:c7:79:6b:b8:e7:0a:f9:22:9e:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 13:57:43 2024 GMT
Not After : Nov 13 14:02:43 2025 GMT
Subject: CN=CEBB3A865C9991B04EDA802C16B79186F818B4E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:e3:d3:07:5e:96:ba:d3:46:a3:ae:a1:1f:
8c:12:7c:ce:3b:8c:15:ce:47:ac:1d:54:aa:2e:f2:
5c:27:e2:d8:d9:3b:9d:0d:58:e2:06:21:e9:7f:07:
d6:28:c3:00:b9:e0:9d:26:d7:c1:3c:99:50:7a:0e:
0a:e0:96:03:6b:96:25:6f:1e:ea:87:cb:0b:cc:3e:
58:ac:ee:c9:c1:49:f0:93:9f:dc:26:1c:9b:36:2e:
cd:45:00:a0:b7:b6:d9:bb:51:b6:e4:4d:32:0e:e2:
d2:d9:1f:87:26:fb:a5:5a:6a:2b:86:fc:25:ba:a1:
44:de:f9:6a:8f:0d:ad:7d:72:61:c5:cd:68:ae:77:
28:c2:22:d6:24:83:92:03:d0:bb:23:99:1c:62:f3:
f3:97:cc:ba:44:86:6b:61:ca:d1:05:ba:1d:51:b5:
c6:40:69:03:e1:0b:43:bb:93:d8:53:46:21:ae:ef:
25:45:eb:04:41:42:b1:eb:f0:92:12:76:48:5b:d3:
4b:98:63:eb:4c:14:47:17:0d:93:b9:e3:b3:bd:8c:
d9:a9:9a:e6:c5:d4:6f:8f:43:29:33:10:57:0c:fa:
1c:25:f1:c0:e7:36:1f:97:d2:9d:28:39:94:0d:5c:
4b:e9:e2:d6:d5:29:33:4f:cb:1b:6e:b2:58:87:12:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BB:3A:86:5C:99:91:B0:4E:DA:80:2C:16:B7:91:86:F8:18:B4:E7
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.54.0/23
Signature Algorithm: sha256WithRSAEncryption
93:17:49:00:3f:e9:03:e5:7e:6b:fe:94:67:30:02:cb:b2:97:
d7:0a:06:83:16:2b:e4:60:a9:af:31:7e:d6:b8:21:60:f8:26:
d1:d8:54:4f:e7:6a:03:cc:03:a9:50:ea:be:a6:ba:c3:e7:e0:
de:40:b9:a0:9f:06:48:4d:99:39:23:f2:b6:9b:d3:59:25:bd:
7b:2b:3e:11:fd:91:ba:eb:08:5b:69:d3:66:80:f2:67:20:97:
28:d2:a7:1a:bc:83:3c:31:ef:1f:c8:1f:8c:57:aa:d3:ae:8e:
dc:fe:3d:2f:b7:a0:0d:41:ad:c8:4e:dc:d8:0f:b8:dc:1c:71:
87:df:4a:11:62:68:f7:da:ae:6e:52:02:13:95:22:4c:e3:0b:
a7:ce:94:98:db:17:c8:e9:71:21:43:ea:86:82:bb:66:3f:a9:
26:b8:61:dd:67:ff:f7:d7:4e:f9:5f:23:55:e9:cf:6e:34:1a:
b2:85:f7:e6:34:10:a9:28:b1:1d:a1:4e:8a:b3:e0:77:03:25:
0d:1c:87:2f:44:b1:40:4a:5a:ed:98:21:77:7e:12:65:1f:ca:
ff:67:61:95:0f:19:dd:c1:95:14:b5:ba:4a:97:e9:5f:6e:03:
5c:11:9f:55:d8:c7:be:dd:d3:3a:44:7b:5d:eb:69:b4:99:6a:
af:e1:6e:bd
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUK81inENv3Iuax3lruOcK+SKe9DMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDExMTQxMzU3NDNaFw0yNTExMTMxNDAyNDNaMDMxMTAvBgNV
BAMTKENFQkIzQTg2NUM5OTkxQjA0RURBODAyQzE2Qjc5MTg2RjgxOEI0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLePTB16WutNGo66hH4wSfM47
jBXOR6wdVKou8lwn4tjZO50NWOIGIel/B9YowwC54J0m18E8mVB6DgrglgNrliVv
HuqHywvMPlis7snBSfCTn9wmHJs2Ls1FAKC3ttm7UbbkTTIO4tLZH4cm+6VaaiuG
/CW6oUTe+WqPDa19cmHFzWiudyjCItYkg5ID0LsjmRxi8/OXzLpEhmthytEFuh1R
tcZAaQPhC0O7k9hTRiGu7yVF6wRBQrHr8JISdkhb00uYY+tMFEcXDZO547O9jNmp
mubF1G+PQykzEFcM+hwl8cDnNh+X0p0oOZQNXEvp4tbVKTNPyxtusliHEhMrAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUzrs6hlyZkbBO2oAsFreRhvgYtOcwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzQyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBjYwDQYJKoZI
hvcNAQELBQADggEBAJMXSQA/6QPlfmv+lGcwAsuyl9cKBoMWK+Rgqa8xfta4IWD4
JtHYVE/nagPMA6lQ6r6musPn4N5AuaCfBkhNmTkj8rab01klvXsrPhH9kbrrCFtp
02aA8mcglyjSpxq8gzwx7x/IH4xXqtOujtz+PS+3oA1BrchO3NgPuNwccYffShFi
aPfarm5SAhOVIkzjC6fOlJjbF8jpcSFD6oaCu2Y/qSa4Yd1n//fXTvlfI1Xpz240
GrKF9+Y0EKkosR2hToqz4HcDJQ0chy9EsUBKWu2YIXd+EmUfyv9nYZUPGd3BlRS1
ukqX6V9uA1wRn1XYx77d0zpEe13rabSZaq/hbr0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:59:26 2025 by rpki-client