Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203233343730.roa
File: 33312e362e35372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: JSo3+VvRf9KRJQ/cLGJOELaFi+x+U9hnYUluLwmkh3I=
Subject key identifier: 06:1C:A4:FC:69:6C:F7:69:C3:B9:B8:E5:45:1C:E9:3A:D4:53:61:4D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 719F6A8698204F2D6C045191C62D1E253C054357
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203233343730.roa
Signing time: Sun 18 Feb 2024 09:32:04 +0000
ROA not before: Sun 18 Feb 2024 09:27:04 +0000
ROA not after: Sun 16 Feb 2025 09:32:04 +0000
asID: 23470
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9f:6a:86:98:20:4f:2d:6c:04:51:91:c6:2d:1e:25:3c:05:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 18 09:27:04 2024 GMT
Not After : Feb 16 09:32:04 2025 GMT
Subject: CN=061CA4FC696CF769C3B9B8E5451CE93AD453614D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:83:5a:2f:ea:9d:cf:a6:fa:2d:ca:92:3f:
0b:82:3e:1c:43:ce:2a:95:59:2e:87:bf:b1:14:81:
9e:e4:2c:d9:3f:f5:5b:16:bb:51:2c:30:78:be:c7:
8c:8b:93:c2:a8:f2:53:b9:be:20:56:69:3f:1d:3a:
ea:77:b1:3e:a8:77:f6:58:3b:cc:0c:fc:6b:b3:34:
18:63:02:c4:5f:f6:1f:b4:c8:ae:dd:7d:3c:e2:73:
75:19:64:fb:ec:84:a7:c0:55:d9:b5:68:64:06:7c:
be:6b:92:d8:87:e8:4f:3f:f5:0b:da:e7:b7:43:4f:
1a:b1:66:90:00:dd:74:b1:3a:16:8f:a7:0a:f3:6f:
e2:e5:41:9d:2d:0a:2f:1a:f5:1b:6a:19:23:e8:64:
5f:ea:f5:7b:69:af:2f:91:64:a1:e4:4f:26:93:e2:
84:10:89:89:ae:db:b6:12:7c:d3:85:f3:17:08:84:
4e:cc:3b:55:b9:a2:45:9f:09:7e:de:b5:a7:ff:69:
55:2f:8a:16:f2:66:2e:14:31:ca:b3:0b:f2:b1:c2:
08:59:48:86:8f:45:e2:1a:5c:c1:37:35:dd:bd:62:
fb:e5:fa:d0:f7:80:dc:e0:4b:af:3f:4f:83:9c:47:
65:38:55:11:8d:df:1a:e8:55:0e:a8:0a:ab:bd:a1:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:A4:FC:69:6C:F7:69:C3:B9:B8:E5:45:1C:E9:3A:D4:53:61:4D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c7:c8:7e:8a:47:2b:8d:eb:06:99:04:b5:0f:0b:99:19:5c:
92:d4:c4:92:e2:42:ec:22:1d:3b:5c:bc:85:db:92:02:8f:96:
3d:9e:24:da:5b:35:9b:8c:09:aa:dd:42:9e:8f:db:e7:38:2f:
4a:e0:fa:91:98:e2:0e:79:0f:7b:8c:f7:01:9b:40:ca:99:28:
ea:63:66:f3:73:03:fd:af:b1:98:e7:bd:c9:96:a2:f3:83:c2:
56:e8:ff:a1:06:5e:74:f7:f0:61:72:e2:00:7c:74:b7:79:cb:
76:24:c8:70:c7:d5:f3:15:f8:e1:07:51:8b:c3:3d:60:cb:6d:
c3:29:ec:cb:f6:a6:8b:40:97:a9:4f:9d:72:06:05:74:f8:d7:
1d:e1:14:97:44:1e:64:e0:40:d8:61:3d:e3:fa:8f:5b:71:31:
63:1a:85:ec:a8:ad:a3:a1:79:3a:5a:8a:dd:36:4a:89:2b:ce:
86:70:4c:45:6d:82:00:56:d6:7b:cb:39:fb:ce:f8:d3:1a:9b:
01:06:ee:55:74:95:4d:58:4c:82:54:6e:a7:24:44:eb:c7:8b:
46:15:c6:96:da:8c:54:2a:b4:db:38:a3:a7:a8:a8:e3:c8:67:
1f:ba:1a:59:57:93:d4:fe:27:21:df:95:6f:cb:6a:06:ab:62:
1d:5d:c4:81
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 19 12:34:50 2024 by rpki-client on console-fra.rpki-client.org