Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
File: 33312e362e35372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: F25/V/PORGAtsN9ul1YSGhITJl8WtS7K1m+REpJyJOE=
Subject key identifier: 41:B5:65:1F:1A:7C:4C:37:CB:77:0C:2D:31:2F:2D:6B:47:97:07:8F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 544AFF7E9B595DA439CAA370F453F89B1CE5A5DA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 19 Feb 2025 17:53:55 +0000
ROA not before: Wed 19 Feb 2025 17:48:55 +0000
ROA not after: Wed 18 Feb 2026 17:53:55 +0000
asID: 20473
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 00:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4a:ff:7e:9b:59:5d:a4:39:ca:a3:70:f4:53:f8:9b:1c:e5:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 19 17:48:55 2025 GMT
Not After : Feb 18 17:53:55 2026 GMT
Subject: CN=41B5651F1A7C4C37CB770C2D312F2D6B4797078F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:24:c2:21:8a:74:a7:60:77:1a:e2:17:c5:
c4:b1:cf:bd:e6:7c:e3:6a:cc:1e:21:69:0a:34:e3:
50:ad:97:2e:40:4a:90:35:19:87:a7:61:2e:c7:ce:
b1:e6:05:43:4c:2e:d0:52:82:9b:14:0d:20:23:15:
2a:34:39:b9:b3:73:11:aa:68:0c:78:85:00:fa:79:
c5:e1:77:93:36:5e:79:b1:29:1c:06:1d:bf:ee:db:
b0:6b:b9:7f:2e:e4:93:c1:98:cc:e3:75:82:2c:e9:
34:54:79:fc:7f:a3:19:3a:07:5f:9e:46:f1:c0:e0:
ef:aa:41:7a:34:7e:c9:50:80:70:2e:f0:2a:98:6d:
2b:8f:aa:dd:1f:0a:f2:bb:8e:86:69:cf:4e:aa:20:
89:8a:8a:c1:fa:05:08:51:6c:05:bf:03:64:6d:6c:
3b:aa:08:45:4e:28:be:88:76:d0:55:cf:49:b4:f0:
04:2c:f2:de:68:5c:f6:9e:83:22:a9:1a:9d:e7:69:
1a:9f:67:e3:fd:60:a6:3b:7c:24:40:79:67:fc:8d:
d5:14:e9:61:21:8b:9f:4a:e6:0a:cd:a9:90:00:00:
b4:5b:5f:0f:38:c1:ce:d0:19:90:75:be:07:1a:45:
9f:7c:8a:f9:07:7f:f1:ca:e4:ba:95:98:a1:74:c1:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:65:1F:1A:7C:4C:37:CB:77:0C:2D:31:2F:2D:6B:47:97:07:8F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c2:d5:ec:f7:ef:c0:f4:72:61:03:5b:9f:71:12:4f:bd:ca:
d4:6c:e9:92:a3:09:de:f5:87:90:12:37:b6:82:ec:52:0f:94:
d4:32:ab:de:19:24:a5:03:a0:8d:80:f4:23:ac:c7:63:d9:89:
e4:b5:ae:6c:be:9d:2a:5c:fd:71:42:fa:08:63:20:ce:0f:d1:
26:72:32:6f:76:cc:3b:11:4c:f0:61:2d:0b:b2:8d:43:ea:52:
c3:7b:9c:6c:8d:7a:d6:fe:d4:35:a1:60:c6:77:2c:93:df:17:
3d:48:66:45:b1:3f:8b:a3:a1:0e:40:bd:d7:4f:e1:b0:59:b1:
37:ec:99:82:c9:50:b8:39:c2:65:58:9b:eb:34:c7:0f:cd:17:
1c:39:e5:16:e4:c1:49:6d:24:2a:19:24:72:6f:40:bb:e2:f2:
fb:12:15:64:10:8d:63:0c:9d:94:4a:f4:66:38:0d:19:6b:89:
da:02:97:54:7d:02:51:3e:1c:92:ce:8d:0c:cc:a9:ea:67:eb:
ad:c2:c0:92:6f:62:7c:1a:cd:93:64:2f:95:35:59:0a:b7:1e:
5d:79:a5:44:04:85:11:54:99:d6:8c:fd:85:85:cc:83:36:f9:
84:59:0e:f2:bf:46:73:9b:b8:00:18:15:28:87:5b:24:fa:3d:
7f:1d:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:40 2025 by rpki-client