Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20383334.roa
File: 33312e362e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QZOk0Mwmu0hsp6EA0uO4UqkukixVA6XURknSsdPUzqI=
Subject key identifier: 26:D1:89:71:5F:08:CF:11:BC:50:CB:2A:BA:2B:F5:D0:29:2B:D1:21
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 13613FFFC37E06BAB4347AB8813DDB8C48C74CAA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20383334.roa
Signing time: Tue 30 Apr 2024 00:02:04 +0000
ROA not before: Mon 29 Apr 2024 23:57:04 +0000
ROA not after: Tue 29 Apr 2025 00:02:04 +0000
asID: 834
IP address blocks: 31.6.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 06:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:61:3f:ff:c3:7e:06:ba:b4:34:7a:b8:81:3d:db:8c:48:c7:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 29 23:57:04 2024 GMT
Not After : Apr 29 00:02:04 2025 GMT
Subject: CN=26D189715F08CF11BC50CB2ABA2BF5D0292BD121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:4c:80:50:1d:be:62:a7:35:62:1d:55:ad:
af:78:7a:c3:f7:59:5e:32:a2:6f:e4:c9:07:1e:94:
46:43:cd:1f:3c:eb:b6:80:86:91:1a:ff:4b:75:20:
10:0e:8e:a7:7c:22:2c:84:f3:a5:74:be:20:23:c5:
3d:94:30:da:ea:20:3e:b8:11:7f:1f:e3:3d:a9:49:
40:6a:ef:50:3d:dc:e4:41:0f:d2:ab:f1:db:14:f8:
31:89:5a:ef:dc:e2:c3:4c:65:f2:74:42:c5:54:78:
2e:76:6f:37:be:98:d4:db:13:86:8e:66:e1:4f:45:
ac:33:41:50:29:6b:b2:de:0b:18:d2:8d:ff:38:d5:
f9:7c:7a:07:d2:d2:3b:c2:a6:26:e8:79:28:89:28:
66:86:f4:b8:bc:25:76:33:83:ba:8d:c4:84:61:08:
8a:91:ef:b7:0a:78:b2:2c:14:39:00:0f:ce:a5:8a:
1e:c3:a1:dd:5b:5f:47:ed:b9:86:e9:5c:e6:9f:e0:
ee:65:c1:24:59:c3:f6:5f:4b:ad:61:0b:7d:65:26:
f3:c7:8c:39:7a:d2:d7:76:68:7a:2d:0a:0b:97:e0:
70:6f:82:74:b4:cb:0d:aa:69:23:29:bd:29:22:f1:
f9:53:08:f3:46:79:e7:37:5b:21:fa:39:a9:f7:40:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:89:71:5F:08:CF:11:BC:50:CB:2A:BA:2B:F5:D0:29:2B:D1:21
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2d:84:35:31:db:fd:25:99:19:e7:c8:ef:0f:95:4f:2b:4d:
86:75:05:c3:83:32:fa:40:94:c1:c5:b5:99:74:a2:49:9b:ec:
34:b7:78:fc:17:85:da:87:48:ec:78:cd:fe:6c:7c:6e:08:63:
27:00:c1:4d:8d:c6:f5:f4:98:70:92:78:68:f0:29:d8:c5:c8:
04:6b:f9:5a:8d:c2:72:f9:0b:3f:ec:76:9a:3e:45:72:74:10:
3d:ab:fc:0c:4b:76:fa:f1:83:c2:7d:eb:0b:55:c1:1a:cf:2b:
ae:6e:b1:4c:dc:6d:12:1f:f5:eb:15:89:d2:6d:ab:b3:e7:fe:
aa:32:90:5e:06:62:ad:60:9e:ef:7b:76:96:8a:1a:25:b4:79:
12:92:6d:98:6d:8a:d7:ba:4d:49:7b:3d:74:12:86:2a:c9:b8:
a9:c5:03:85:3e:cb:cd:44:91:1d:ed:40:26:4c:c4:ed:d6:7a:
37:14:2c:59:81:54:ea:c9:cf:d2:29:60:6a:48:76:8e:55:02:
bd:f8:a1:d7:31:88:f4:81:f5:c5:d9:cb:cf:66:6f:db:3e:ff:
58:3d:32:eb:ac:a7:46:ed:06:22:da:61:0f:df:20:e6:fa:12:
60:2a:db:52:d6:df:f2:94:09:f7:7a:01:98:12:90:48:b4:24:
c9:20:65:a7
-----BEGIN CERTIFICATE-----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Generated at Sat May 11 08:34:21 2024 by rpki-client on console-fra.rpki-client.org