Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203231383539.roa
File: 33312e362e35362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: I5cg2/IkWgP/LUSkMTtFlqbUCQoSEpA3HM1+vsfZjXk=
Subject key identifier: 3A:10:C1:85:71:1C:A7:22:05:45:72:FE:CD:F1:20:D3:0A:3C:76:D3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2480C16F338B057CBF46261695637AFB16832341
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203231383539.roa
Signing time: Tue 26 Dec 2023 02:44:44 +0000
ROA not before: Tue 26 Dec 2023 02:39:44 +0000
ROA not after: Tue 24 Dec 2024 02:44:44 +0000
asID: 21859
IP address blocks: 31.6.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:80:c1:6f:33:8b:05:7c:bf:46:26:16:95:63:7a:fb:16:83:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 26 02:39:44 2023 GMT
Not After : Dec 24 02:44:44 2024 GMT
Subject: CN=3A10C185711CA722054572FECDF120D30A3C76D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:38:ff:4f:00:78:d8:bb:c7:c0:eb:06:96:
f8:cd:7a:f0:48:c0:8a:ad:9c:e1:f5:28:e9:b4:5f:
8e:83:41:9e:d8:a3:bb:e4:11:92:67:43:f1:b0:13:
69:23:d1:de:fa:77:5a:31:c3:59:f8:5d:b5:8c:d3:
e2:e4:ce:57:88:73:1f:82:e9:c0:d2:37:ae:2a:21:
cd:85:a9:77:71:08:30:c4:0f:b4:6b:c9:b9:f9:2b:
be:79:1c:61:6c:a0:69:64:0c:bb:9f:87:f4:7b:46:
0b:8d:07:f0:41:dd:0d:47:da:a5:e1:4a:2e:86:c2:
bc:67:7e:3a:d4:97:63:5a:f8:c4:b4:97:7b:b5:d5:
b1:0d:7b:c1:7d:e0:a8:f9:6c:4d:db:11:d3:d3:cc:
92:59:77:0c:cb:49:31:f5:a0:34:1a:1c:30:c2:1a:
fe:f4:ed:8f:c4:a2:d4:81:5a:f6:a6:12:8d:6e:e1:
9b:c5:86:8f:1d:94:5b:d4:d3:58:16:e5:44:27:aa:
4c:33:86:c3:28:d5:3b:74:09:47:94:5b:3c:89:c6:
1c:b6:bf:b3:8b:c4:b2:55:7b:07:c8:f5:9a:41:a9:
59:26:7e:b2:5b:c8:43:ab:e9:11:b1:81:d6:b6:a6:
50:9e:bf:be:be:b9:2b:53:6e:90:84:08:7f:42:20:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:C1:85:71:1C:A7:22:05:45:72:FE:CD:F1:20:D3:0A:3C:76:D3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a3:af:f1:52:59:80:b9:69:c8:9b:e4:76:72:8f:6d:7b:ee:
58:13:f3:cb:69:96:ee:41:e7:a3:60:fc:88:c4:4b:50:2f:8b:
c5:42:73:86:90:09:bc:ba:f4:e4:ae:22:1c:e6:19:71:4e:11:
58:69:20:7f:7e:b4:c8:6b:89:e5:c9:98:2a:5e:e6:d8:8f:df:
c7:ce:9b:e8:a9:2a:dc:79:d7:db:68:7e:f4:41:e2:64:67:77:
33:a4:a9:45:9a:69:db:f3:2f:81:9f:02:29:40:fc:c4:53:a0:
c3:4c:37:ae:7d:f4:26:8a:de:cb:e1:6d:e7:a5:11:af:8a:62:
dd:1e:a8:be:e9:16:5c:6a:46:1d:d4:54:81:5e:4b:7b:bb:e5:
f4:6a:81:ed:a3:55:3c:8d:84:af:c4:d5:c0:1e:54:56:1a:f8:
ea:8b:16:f2:e8:6c:2b:18:54:8f:8f:ee:e8:75:2b:77:9c:67:
33:9c:6e:50:a4:9b:78:ea:e4:2f:42:4d:77:06:38:6d:5a:f2:
cf:b8:14:51:27:bf:d7:ea:a5:33:55:dd:a2:a0:f2:0b:8c:09:
42:6d:44:b3:9e:9c:87:ab:6f:91:12:b7:b3:da:f1:32:c1:c2:
85:a6:67:94:14:23:d8:94:37:68:14:78:16:f3:29:e3:fa:83:
0d:8a:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 01:41:52 2024 by rpki-client on console-fra.rpki-client.org