Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203233343730.roa
File: 33312e362e35362e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: NvrIdN3D1QDrij5KzUj2u6MOHgDKmz7CIcYEBgD8Q2Y=
Subject key identifier: A4:2E:DC:0E:69:CC:63:B9:34:D7:E1:35:5F:E4:D1:C9:32:9C:22:AD
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 173DB335348DB75A43913B1A2951DA9567ECEB55
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203233343730.roa
Signing time: Sat 18 Nov 2023 13:47:31 +0000
ROA not before: Sat 18 Nov 2023 13:42:31 +0000
ROA not after: Sat 16 Nov 2024 13:47:31 +0000
asID: 23470
IP address blocks: 31.6.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3d:b3:35:34:8d:b7:5a:43:91:3b:1a:29:51:da:95:67:ec:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 18 13:42:31 2023 GMT
Not After : Nov 16 13:47:31 2024 GMT
Subject: CN=A42EDC0E69CC63B934D7E1355FE4D1C9329C22AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:d9:aa:c4:8b:d4:74:e9:ea:6b:d4:cb:9a:
f1:2b:51:b6:e5:a7:38:3f:f4:3e:9e:ef:c9:be:56:
2f:1a:18:9e:30:02:44:cf:d6:5a:0c:6f:e4:2b:e3:
31:d9:11:86:96:f6:5a:ee:93:45:c9:ac:ed:d2:db:
80:a4:97:86:c0:03:43:75:cc:43:cc:4e:3a:12:f5:
79:a1:31:b9:49:20:e0:2d:c3:67:e5:75:3c:75:52:
d1:60:ea:ae:f5:e5:f4:09:e5:a5:64:5c:bb:2f:9f:
0e:e7:30:9a:85:81:a0:54:7b:49:0f:31:e2:87:95:
40:dc:4f:bf:9d:5e:c9:91:bb:02:c8:66:d6:d9:da:
60:76:4b:6a:a1:12:78:24:6e:2e:9a:50:f3:c0:e3:
bb:dc:c4:bb:04:a0:2e:d1:f6:04:86:db:e4:1d:f7:
c5:d6:5e:a6:b6:5b:b8:ac:2c:b0:10:de:e3:71:bd:
d8:3e:57:ea:e4:08:f3:6d:78:d9:86:9e:44:0a:0c:
f3:84:d2:a0:e0:18:e0:17:22:95:27:36:05:d6:b6:
28:27:0b:b6:70:57:8d:f2:64:4c:79:da:09:1d:47:
01:ab:28:cc:26:44:8b:7e:4b:0e:a1:6d:0b:b0:ee:
68:20:ff:fa:1b:07:40:bb:25:21:ad:30:90:fe:8f:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2E:DC:0E:69:CC:63:B9:34:D7:E1:35:5F:E4:D1:C9:32:9C:22:AD
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/24
Signature Algorithm: sha256WithRSAEncryption
37:90:17:94:d1:c4:7e:55:74:b7:54:6d:8f:bc:91:27:6b:b5:
ae:3f:d9:7d:37:dc:00:7d:fa:3d:6a:d0:4c:48:c9:f5:f3:3f:
58:4c:b9:b4:bd:d0:d7:80:96:a5:76:4a:32:b0:0e:e3:39:7b:
27:70:ef:98:ba:bc:6d:0e:ff:02:b5:0d:91:31:c4:c9:08:88:
b3:b7:5e:f5:62:a0:8f:d2:df:93:61:7e:b6:22:2a:63:50:a4:
5f:39:e9:b9:72:49:3e:7d:55:28:39:bd:63:6c:df:b4:b8:10:
23:c5:dc:25:f7:3f:f2:7e:71:2a:84:d6:90:7c:72:d5:85:13:
35:0b:31:a8:ae:53:d2:95:d4:bb:7b:07:1b:59:4d:e4:3c:2b:
6f:c8:7d:9c:ee:bd:54:d9:f9:28:99:e7:29:b5:d4:32:5a:c4:
90:20:cd:63:34:b0:54:24:f0:60:97:0a:8a:9a:c7:b5:86:c7:
d5:e0:65:8d:ae:bf:e0:ae:97:b5:04:6f:13:7b:01:7a:57:cf:
7c:2b:fd:a2:4f:fc:ce:46:77:06:3a:fd:81:03:cb:72:9b:7a:
c7:97:d1:36:3b:d9:0d:67:b1:8d:b4:6d:a6:40:b9:a4:4d:e7:
17:c8:46:13:88:55:3b:0f:55:3b:93:f0:1b:80:1d:18:bf:65:
2c:20:5a:94
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUFz2zNTSNt1pDkTsaKVHalWfs61UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzExMTgxMzQyMzFaFw0yNDExMTYxMzQ3MzFaMDMxMTAvBgNV
BAMTKEE0MkVEQzBFNjlDQzYzQjkzNEQ3RTEzNTVGRTREMUM5MzI5QzIyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTtmqxIvUdOnqa9TLmvErUbbl
pzg/9D6e78m+Vi8aGJ4wAkTP1loMb+Qr4zHZEYaW9lruk0XJrO3S24Ckl4bAA0N1
zEPMTjoS9XmhMblJIOAtw2fldTx1UtFg6q715fQJ5aVkXLsvnw7nMJqFgaBUe0kP
MeKHlUDcT7+dXsmRuwLIZtbZ2mB2S2qhEngkbi6aUPPA47vcxLsEoC7R9gSG2+Qd
98XWXqa2W7isLLAQ3uNxvdg+V+rkCPNteNmGnkQKDPOE0qDgGOAXIpUnNgXWtign
C7ZwV43yZEx52gkdRwGrKMwmRIt+Sw6hbQuw7mgg//obB0C7JSGtMJD+j29pAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUpC7cDmnMY7k01+E1X+TRyTKcIq0wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzYyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwY4MA0G
CSqGSIb3DQEBCwUAA4IBAQA3kBeU0cR+VXS3VG2PvJEna7WuP9l9N9wAffo9atBM
SMn18z9YTLm0vdDXgJaldkoysA7jOXsncO+YurxtDv8CtQ2RMcTJCIizt171YqCP
0t+TYX62IipjUKRfOem5ckk+fVUoOb1jbN+0uBAjxdwl9z/yfnEqhNaQfHLVhRM1
CzGorlPSldS7ewcbWU3kPCtvyH2c7r1U2fkomecptdQyWsSQIM1jNLBUJPBglwqK
mse1hsfV4GWNrr/grpe1BG8TewF6V898K/2iT/zORncGOv2BA8tym3rHl9E2O9kN
Z7GNtG2mQLmkTecXyEYTiFU7D1U7k/AbgB0Yv2UsIFqU
Generated at Mon Dec 18 00:41:34 2023 by rpki-client on console-ams.rpki-client.org