Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
File: 33312e362e35372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: peGBBSgtucZdqB5yk7zG5Dfaga6LcvYc9j15w0SAbWQ=
Subject key identifier: 54:AF:46:55:1E:8F:01:07:4E:DF:BE:7D:D7:26:BF:29:D1:C8:AB:2A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 40D07021E2AD70EF9EF7FFAAA82633A2D5DE8916
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
Signing time: Tue 19 Mar 2024 10:03:51 +0000
ROA not before: Tue 19 Mar 2024 09:58:51 +0000
ROA not after: Tue 18 Mar 2025 10:03:51 +0000
asID: 834
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 17:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d0:70:21:e2:ad:70:ef:9e:f7:ff:aa:a8:26:33:a2:d5:de:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 19 09:58:51 2024 GMT
Not After : Mar 18 10:03:51 2025 GMT
Subject: CN=54AF46551E8F01074EDFBE7DD726BF29D1C8AB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:6c:e7:29:d8:8b:b7:e9:0d:6e:6c:4e:1a:
ce:2d:cb:b8:cc:b4:f9:65:0b:9b:b2:15:a8:d5:8a:
b1:6f:bb:bd:c4:8a:85:9b:2e:a8:b4:e3:1b:02:02:
d7:26:d3:50:92:92:a6:d2:91:a0:9b:17:21:23:77:
f5:8b:69:1f:bf:f5:ed:8b:74:d9:00:f0:2f:f9:c6:
4b:0b:51:4b:02:21:5f:5f:5e:c0:81:b3:09:00:2f:
73:9d:d8:82:66:bb:ec:e0:5c:c5:1d:01:74:50:21:
fa:b1:a5:c4:2a:b3:e9:f7:1b:d1:d9:14:bd:6c:1e:
be:08:6e:cf:f6:43:34:e7:54:a3:e4:09:4f:4e:2f:
dd:38:a9:2b:41:40:fc:85:fd:5e:64:c1:08:7e:b0:
51:1e:e9:0d:36:94:b6:7f:6f:a1:ee:42:d9:9b:24:
0d:7f:ae:08:7a:84:73:fd:05:ee:c6:c6:bb:c4:e0:
bf:01:96:2c:eb:53:5a:44:7e:c3:10:3b:2c:3b:0c:
34:2f:de:99:84:4c:e3:3d:93:85:75:6b:ad:23:b4:
73:5b:90:7c:ed:c1:25:99:52:9e:ca:35:42:88:47:
a0:c8:bd:d3:18:4e:4a:7d:ea:64:42:c2:10:5d:ad:
3e:cb:b2:4e:65:53:53:da:5f:5e:0f:f7:d5:9e:76:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:46:55:1E:8F:01:07:4E:DF:BE:7D:D7:26:BF:29:D1:C8:AB:2A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4c:36:6a:8a:eb:11:43:ed:cb:a3:c7:64:ad:23:47:31:f3:
82:54:f3:ac:be:49:7d:35:4d:15:e3:6b:65:d0:cb:b8:3c:82:
62:c2:b0:fa:07:ba:fd:f9:d9:d2:6a:09:25:ae:8c:47:d4:d5:
81:3e:f3:a4:8b:88:4d:d7:ac:cd:87:f4:0b:42:ba:1b:9f:f7:
ae:42:1d:2c:c8:d7:9c:42:42:a2:16:c7:b9:f1:4e:a3:bc:e7:
dc:c7:56:a7:c1:23:a6:1c:23:e9:d1:ed:bd:20:1b:af:f8:65:
15:78:9f:f3:6f:2c:dd:5c:51:39:d1:61:9c:79:95:31:1a:67:
52:a4:fd:58:ea:6c:ad:b5:8b:6e:72:69:e5:c4:25:d3:6d:97:
32:58:a1:b0:0a:c4:59:4a:ce:7d:77:76:7c:e1:11:a6:30:6b:
d6:ae:60:cd:2d:18:4e:ef:a5:be:a3:e2:65:31:cc:77:92:b3:
a9:1d:47:c4:f6:00:23:42:a3:ef:f8:99:10:b0:21:97:7c:9f:
36:28:44:76:f0:19:68:69:e4:0d:00:c6:4a:61:cc:5a:b6:8b:
dc:6d:78:44:f0:8f:02:10:3c:e1:e1:38:87:40:f7:f1:b8:f1:
14:e4:ca:98:89:89:75:92:12:52:49:7f:75:5b:c5:ec:36:7d:
d5:5d:b6:3c
-----BEGIN CERTIFICATE-----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Generated at Wed Mar 20 21:55:31 2024 by rpki-client on console-fra.rpki-client.org