Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203134363138.roa
File: 33312e362e35372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: gLIN+RjgG5M5Ht6VPbwdsaLhzLDz8UJSqqKeuY043Ko=
Subject key identifier: F8:C8:A6:24:AD:6A:5F:48:C4:85:48:35:67:93:1F:20:DC:9B:DE:6E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1722CA27FF185B115CBA992E87CEF22BD6B208CC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203134363138.roa
Signing time: Fri 17 Nov 2023 13:25:33 +0000
ROA not before: Fri 17 Nov 2023 13:20:33 +0000
ROA not after: Fri 15 Nov 2024 13:25:33 +0000
asID: 14618
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:22:ca:27:ff:18:5b:11:5c:ba:99:2e:87:ce:f2:2b:d6:b2:08:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 17 13:20:33 2023 GMT
Not After : Nov 15 13:25:33 2024 GMT
Subject: CN=F8C8A624AD6A5F48C485483567931F20DC9BDE6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:ee:bb:42:2f:db:14:c9:40:63:ee:3c:0d:
68:4c:9a:10:24:94:5b:e4:a2:52:e8:ac:41:28:33:
88:8e:7c:bc:aa:ba:97:a0:1d:65:17:5f:22:db:26:
4c:99:d3:59:9f:ab:a8:31:e4:94:e2:b7:88:80:37:
04:55:92:53:72:9c:4c:23:3b:ef:e2:0d:71:99:1a:
64:c8:6b:04:ce:93:2a:94:94:78:27:e9:ec:51:07:
93:7c:1c:b0:0c:7e:df:0e:27:fb:f2:77:e2:3d:c6:
fd:c8:84:a1:cc:de:a3:87:88:f8:67:57:2d:e6:df:
95:f2:50:ee:d3:0a:02:ab:f7:e6:b9:f8:1b:43:e9:
0c:9a:4f:e3:38:fc:7a:78:34:a9:1e:da:1c:68:dd:
50:51:65:a7:f8:64:82:61:8b:64:1a:18:5a:91:da:
9c:cc:a9:ff:ff:49:46:77:2e:51:e1:41:92:0b:fc:
f7:5e:64:c3:2c:92:a6:5f:a2:7f:d8:be:b6:c4:a2:
f6:94:db:a5:0b:db:29:da:04:06:c7:d2:a3:14:13:
f4:1c:bc:17:96:d2:d3:8b:72:f7:1d:97:c4:e8:1e:
ee:85:a0:d9:e2:a5:71:18:1d:a0:5d:86:69:01:5e:
3d:3a:26:0a:12:fe:fb:7d:d0:46:a3:45:61:44:4f:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:A6:24:AD:6A:5F:48:C4:85:48:35:67:93:1F:20:DC:9B:DE:6E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
78:24:a7:d4:92:fb:8d:00:f3:74:d3:7b:95:c7:d2:99:3e:35:
52:c3:c3:67:25:74:bd:9c:f0:87:aa:00:ed:8c:2f:bf:3a:07:
af:9c:c6:35:49:da:5d:45:8f:83:a1:cb:8b:b0:f4:48:ae:d4:
dd:8b:19:26:37:e1:66:1a:82:b7:cd:f1:71:4b:ab:3d:c5:49:
4b:61:35:19:69:58:28:03:85:9f:f8:64:dd:65:a8:b4:22:be:
44:db:b9:a4:df:88:9d:9a:14:38:11:d9:5f:17:82:3e:5d:f4:
30:ed:5a:ea:c3:6d:22:85:53:d2:9a:bc:53:c2:6f:8f:fb:1e:
7e:61:44:8b:e0:a6:7e:09:c5:19:ef:11:58:fe:ee:41:d4:3c:
61:08:79:99:26:47:46:c3:e4:70:65:15:1b:ba:da:0f:2f:81:
83:27:56:d7:a1:49:6e:06:b2:07:29:9b:91:1a:f4:83:ff:ea:
2d:1c:c0:03:2a:12:48:9d:c2:5f:0c:5a:e9:2a:a0:18:3b:e7:
1d:41:a0:29:c8:27:f4:dc:35:2a:dc:b3:81:c8:77:8a:e6:80:
e8:13:28:81:b3:83:dd:e0:2a:f0:35:cb:75:ee:ce:47:55:4c:
f8:1c:95:4f:0c:73:3e:91:ea:73:2f:84:29:b2:ac:cd:5d:b3:
44:84:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:00:38 2024 by rpki-client on console-fra.rpki-client.org