Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20383334.roa
File: 33312e362e35392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /5AagCAmxDib+TUDhR8DWsMu53zgg9gWcyPd/R/DEbk=
Subject key identifier: C2:69:6F:2F:31:FA:41:CB:8C:D8:96:04:E1:09:FD:F3:1A:56:97:F1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5009F4DDB80BCFC2870A9E198799A1120E4B7192
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 May 2024 00:01:10 +0000
ROA not before: Tue 21 May 2024 23:56:10 +0000
ROA not after: Wed 21 May 2025 00:01:10 +0000
asID: 834
IP address blocks: 31.6.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 04:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:09:f4:dd:b8:0b:cf:c2:87:0a:9e:19:87:99:a1:12:0e:4b:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 21 23:56:10 2024 GMT
Not After : May 21 00:01:10 2025 GMT
Subject: CN=C2696F2F31FA41CB8CD89604E109FDF31A5697F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:08:f7:cf:87:36:24:ce:9c:bb:8f:eb:12:
33:85:c8:7f:92:34:9e:d0:cc:b1:42:05:fc:ff:5b:
87:c7:c6:19:36:21:6c:b6:d0:d8:71:64:8a:ad:78:
b0:e0:a1:e6:a2:42:a1:42:6d:07:eb:7a:42:e5:a3:
c2:26:ab:79:2b:ee:45:77:fd:99:67:a7:11:e8:a2:
66:ae:74:f5:85:b3:5e:f2:ca:5f:0e:0c:32:f8:22:
32:19:be:a8:b2:d7:ec:73:6a:18:44:94:5b:33:eb:
b1:1b:9c:8a:f1:46:39:33:12:0d:e6:e3:74:f5:25:
e9:8b:f2:94:54:d3:a2:ee:e2:81:45:3d:a3:61:8a:
91:f3:39:cd:d1:4a:0f:76:70:4c:2a:d1:63:dc:a1:
a3:97:ad:b1:b7:dd:58:c6:9f:56:67:1c:ec:d0:f3:
18:1d:7c:41:a9:cf:c1:4f:c0:39:da:f3:9c:9b:75:
1f:c3:c5:27:35:c7:64:04:50:bf:8e:4e:74:16:90:
71:54:cd:78:7b:65:34:8c:b8:19:36:15:7a:39:cc:
8d:7d:9c:95:7e:29:2e:b7:a0:8c:02:3a:cc:d5:16:
d6:5d:c1:dd:2a:ef:6b:3d:83:aa:52:42:91:49:50:
d3:7a:c5:e5:bf:e0:9f:58:b5:a6:f0:53:0d:2b:66:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:6F:2F:31:FA:41:CB:8C:D8:96:04:E1:09:FD:F3:1A:56:97:F1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
60:00:6f:cb:56:58:11:de:0a:55:ff:4d:86:b9:84:3f:a4:cb:
63:62:67:42:1e:c8:cb:23:be:19:96:63:dc:1d:e1:6e:f5:83:
a8:40:f7:85:66:1f:66:8c:aa:0f:7f:ed:94:8a:f3:f7:76:8d:
7f:9b:6b:94:f0:97:4d:b0:90:14:95:03:3b:8e:73:d2:ba:e3:
af:b7:ae:aa:08:21:53:6b:a0:af:14:f7:ab:c6:cf:77:96:7a:
52:ac:2a:c9:2c:52:e9:19:97:c5:28:53:1e:ae:34:4f:21:92:
6d:6b:8c:6d:72:93:8a:87:1a:db:56:f4:95:79:3e:43:d8:8d:
d2:3f:d3:3c:0a:93:5a:93:48:e0:4a:cb:a9:82:6b:75:90:98:
c0:f5:fa:c2:9e:c6:1b:de:5a:c8:4b:c0:19:8b:83:73:b6:8a:
f1:56:b5:72:22:2b:a5:a6:1c:8a:7a:e4:d8:05:e3:be:67:b1:
9e:f8:f1:3b:97:43:68:6e:a1:eb:41:60:ee:13:5c:c4:bc:3c:
5f:50:d2:4b:fb:43:6a:4a:bf:52:fc:b0:8a:80:f7:4d:2e:fd:
4b:97:5d:73:16:65:3e:c7:be:f9:44:41:51:9f:91:1f:3b:f0:
52:c9:44:55:bf:1d:e3:c6:73:90:5c:5d:07:60:e1:74:16:28:
7a:6e:eb:89
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUAn03bgLz8KHCp4Zh5mhEg5LcZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA1MjEyMzU2MTBaFw0yNTA1MjEwMDAxMTBaMDMxMTAvBgNV
BAMTKEMyNjk2RjJGMzFGQTQxQ0I4Q0Q4OTYwNEUxMDlGREYzMUE1Njk3RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33Qj3z4c2JM6cu4/rEjOFyH+S
NJ7QzLFCBfz/W4fHxhk2IWy20NhxZIqteLDgoeaiQqFCbQfrekLlo8Imq3kr7kV3
/ZlnpxHoomaudPWFs17yyl8ODDL4IjIZvqiy1+xzahhElFsz67EbnIrxRjkzEg3m
43T1JemL8pRU06Lu4oFFPaNhipHzOc3RSg92cEwq0WPcoaOXrbG33VjGn1ZnHOzQ
8xgdfEGpz8FPwDna85ybdR/DxSc1x2QEUL+OTnQWkHFUzXh7ZTSMuBk2FXo5zI19
nJV+KS63oIwCOszVFtZdwd0q72s9g6pSQpFJUNN6xeW/4J9YtabwUw0rZrRVAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUwmlvLzH6QcuM2JYE4Qn98xpWl/EwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjswDQYJKoZI
hvcNAQELBQADggEBAGAAb8tWWBHeClX/TYa5hD+ky2NiZ0IeyMsjvhmWY9wd4W71
g6hA94VmH2aMqg9/7ZSK8/d2jX+ba5Twl02wkBSVAzuOc9K646+3rqoIIVNroK8U
96vGz3eWelKsKsksUukZl8UoUx6uNE8hkm1rjG1yk4qHGttW9JV5PkPYjdI/0zwK
k1qTSOBKy6mCa3WQmMD1+sKexhveWshLwBmLg3O2ivFWtXIiK6WmHIp65NgF475n
sZ748TuXQ2huoetBYO4TXMS8PF9Q0kv7Q2pKv1L8sIqA900u/UuXXXMWZT7HvvlE
QVGfkR878FLJRFW/HePGc5BcXQdg4XQWKHpu64k=
Generated at Wed May 22 06:29:16 2024 by rpki-client on console-ams.rpki-client.org