Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203539383935.roa
File: 33312e362e35362e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: w8tVOQUdwl9iKGJyCFMIyl9J9a109DqZtahWGThPORw=
Subject key identifier: 1F:8B:42:04:22:A9:1F:AB:B3:3F:66:60:3B:46:C2:E8:23:31:A9:61
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 60AC2D3C0F9FC498378F9D5F0C86E6C87632A0CE
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203539383935.roa
Signing time: Thu 29 Feb 2024 15:06:22 +0000
ROA not before: Thu 29 Feb 2024 15:01:22 +0000
ROA not after: Thu 27 Feb 2025 15:06:22 +0000
asID: 59895
IP address blocks: 31.6.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ac:2d:3c:0f:9f:c4:98:37:8f:9d:5f:0c:86:e6:c8:76:32:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 29 15:01:22 2024 GMT
Not After : Feb 27 15:06:22 2025 GMT
Subject: CN=1F8B420422A91FABB33F66603B46C2E82331A961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:0b:1a:25:93:35:23:96:ef:32:0a:fd:2e:
2d:5b:3f:37:11:19:17:e0:ae:b9:0a:ee:4e:59:f1:
12:e5:5f:b8:e6:74:03:02:a3:9a:ac:79:78:e4:b7:
28:aa:01:ae:22:4a:8e:78:5e:9f:9a:8f:a3:d2:d4:
ab:d6:79:ef:e1:ce:09:d3:1e:65:7e:72:9e:bf:39:
80:c3:3f:69:90:25:42:96:8c:83:bf:b8:7f:91:d0:
48:8d:b7:85:fd:bb:85:13:07:f4:00:df:0c:b9:3f:
81:65:75:81:c6:84:d1:ca:5c:39:78:f4:4f:98:20:
d4:b8:48:aa:ed:4f:10:76:4e:0a:ad:f7:3d:f5:04:
98:ce:ba:aa:17:d5:4a:06:a8:d4:e8:fe:0c:62:b2:
bc:a0:10:cf:30:68:ec:01:a9:b2:54:1a:5a:95:74:
07:c7:2b:12:3b:d3:98:bc:22:4a:c2:1b:43:3c:47:
e5:b1:81:5e:00:85:9e:99:e6:2e:62:e8:a1:c0:ff:
dd:95:9e:7d:59:2f:61:29:55:39:a4:4f:f3:7b:e9:
0d:23:4f:a2:f2:e9:cf:26:00:02:b5:bf:57:dd:5d:
3b:22:46:a7:63:d5:9e:eb:53:82:f9:fd:55:76:36:
77:25:c7:b9:38:06:12:15:24:01:7d:0f:7e:67:e2:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:42:04:22:A9:1F:AB:B3:3F:66:60:3B:46:C2:E8:23:31:A9:61
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ab:d5:9a:de:88:c5:a8:6b:a3:65:8e:b8:9a:b2:a4:5c:ed:
23:41:7d:d2:97:0a:4e:5a:3a:0f:9e:27:24:03:bf:1c:b1:f4:
31:c8:ee:90:1b:cf:14:5a:54:6d:32:2f:29:b0:28:a8:f6:cc:
c9:96:75:60:a7:f3:d4:20:78:f8:39:0d:e2:d6:fb:f1:72:d0:
5e:d3:ac:20:8a:5d:7e:2f:ed:7c:b7:55:74:33:0a:a7:56:3d:
85:2f:d6:08:b7:24:f9:77:99:d7:17:08:df:dc:31:98:a6:70:
48:be:ef:07:77:d6:7b:75:84:64:ad:40:fb:82:7a:58:a9:4e:
fe:c8:40:5d:07:04:fe:b4:82:eb:25:c1:b9:ab:9b:6b:88:b3:
c1:14:e9:ce:5b:fe:d4:6f:47:b3:e6:40:95:e9:91:76:44:50:
ed:37:00:17:5d:03:55:61:a5:c0:a0:f0:2a:1f:78:90:7c:ac:
d4:01:66:77:00:f3:54:10:93:3e:16:42:08:53:22:b0:2b:60:
1d:c7:26:82:11:8c:f8:bb:4b:24:ad:5b:77:d7:d0:68:b6:f0:
46:3a:f0:2d:b5:d9:0d:83:9e:3b:c6:05:2c:be:da:dd:44:f1:
7d:f2:73:71:c9:12:bf:b8:77:ed:e8:0f:a2:dd:c1:fc:d1:57:
8d:43:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 01:22:48 2024 by rpki-client on console-fra.rpki-client.org