Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203136353039.roa
File: 33312e362e35372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: MyWnO/xFrtDy3TiLdDKMd0ijSyvtVNl2NDxVOl3lWkU=
Subject key identifier: F5:5C:AB:21:E1:E5:9E:D7:67:F9:EF:B0:80:7A:8A:B5:2B:B0:12:5B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 19A38EBD6FE93CF469D46C0A345D3C23E76A1CCE
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203136353039.roa
Signing time: Fri 17 Nov 2023 13:25:33 +0000
ROA not before: Fri 17 Nov 2023 13:20:33 +0000
ROA not after: Fri 15 Nov 2024 13:25:33 +0000
asID: 16509
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a3:8e:bd:6f:e9:3c:f4:69:d4:6c:0a:34:5d:3c:23:e7:6a:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 17 13:20:33 2023 GMT
Not After : Nov 15 13:25:33 2024 GMT
Subject: CN=F55CAB21E1E59ED767F9EFB0807A8AB52BB0125B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:7f:6d:2c:bd:8b:50:f8:27:05:88:c4:99:
33:4c:73:09:0b:ae:07:68:48:d6:54:cc:ce:d3:da:
af:6b:e9:d8:8d:e4:e4:6d:93:4f:55:2b:52:2f:ad:
d2:46:08:66:fa:84:83:dd:1e:ba:53:73:a5:13:b0:
8e:07:95:62:60:73:db:78:83:ae:67:f9:10:15:54:
be:a9:8e:61:7d:04:b3:c8:6f:42:63:72:b5:10:10:
64:dc:61:49:9f:fa:76:b5:75:c8:25:8d:09:a5:1c:
29:9a:c8:8f:49:91:57:21:b2:d3:a6:85:20:b0:5a:
61:46:db:e3:ea:07:4a:78:4e:e3:c2:63:42:22:9e:
25:74:d7:f7:2c:b3:5e:d0:bc:fb:10:bb:19:1e:4e:
7c:af:42:78:89:38:f0:bc:19:c8:d4:c0:fa:90:f7:
66:95:70:78:2a:d7:56:ba:01:c7:19:a1:5d:8a:c4:
19:94:07:85:69:67:00:aa:89:14:15:a8:70:4c:24:
c9:5e:b1:15:07:d6:ce:bf:2f:fa:1d:87:dc:1d:dd:
ad:84:73:39:db:b9:4b:ed:5d:8c:47:8b:49:7a:1f:
46:ef:3a:a2:65:68:12:49:1f:fc:0d:e4:22:8e:41:
da:40:bd:fd:c8:8b:44:5f:f7:1d:1f:7d:75:e0:32:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:AB:21:E1:E5:9E:D7:67:F9:EF:B0:80:7A:8A:B5:2B:B0:12:5B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f5:3d:2d:81:d2:f3:f0:38:cf:17:0d:cb:22:c5:64:0b:d3:
bf:4b:d4:60:f3:01:5c:db:31:41:10:9d:50:a7:1a:ad:57:67:
55:2a:55:87:53:b0:46:bf:88:04:65:67:48:67:4a:41:a1:75:
5e:7d:2d:f5:43:3c:d7:59:9c:29:d6:d8:a8:5d:c3:48:3a:ef:
79:12:33:af:3c:66:97:86:a4:f8:07:06:b3:e0:42:68:9a:87:
8f:e3:e2:52:ee:92:a7:11:39:0b:bd:a7:b0:0e:22:4a:40:ee:
f6:aa:fe:e8:90:f9:e0:49:27:45:bc:ba:a4:b7:82:49:8c:f6:
6c:23:fb:0e:ce:a8:47:22:05:30:d0:95:eb:31:e7:c6:86:e2:
3f:53:36:02:cc:f0:71:d5:f9:97:a7:4a:0c:7d:e1:f0:4b:61:
ae:12:db:39:75:d2:c8:ea:63:90:7b:0a:ba:08:46:3f:21:c5:
32:42:80:c4:85:da:85:c2:2d:4e:67:d1:d4:79:fb:ed:d0:e1:
06:9c:c2:3d:6e:ed:3d:42:09:c0:37:f6:09:d4:86:a0:94:0a:
f1:eb:74:16:73:d8:b0:d5:39:f6:c8:3e:d9:82:34:a4:0b:ed:
1c:6b:14:d1:cb:31:4a:72:44:9a:30:e4:e5:36:42:ce:df:8b:
3b:55:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:01:49 2024 by rpki-client on console-ams.rpki-client.org