Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36312e302f32342d3234203d3e20383334.roa
File: 33312e362e36312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sxxM/04ERx5Hb/RDlZdWx6bsRLKD5ke1REykQbU1cCY=
Subject key identifier: 44:5A:92:71:12:19:C5:95:81:F2:93:0B:EA:5F:B1:D0:F5:45:E4:A6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2548459FDB1F3EE4C90DD9FA1270FC789700B984
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36312e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:15 +0000
ROA not before: Mon 02 Oct 2023 05:15:15 +0000
ROA not after: Mon 30 Sep 2024 05:20:15 +0000
asID: 834
IP address blocks: 31.6.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:48:45:9f:db:1f:3e:e4:c9:0d:d9:fa:12:70:fc:78:97:00:b9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:15 2023 GMT
Not After : Sep 30 05:20:15 2024 GMT
Subject: CN=445A92711219C59581F2930BEA5FB1D0F545E4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:1e:ac:3a:2c:f1:7a:fa:73:02:7f:98:c4:
43:60:c0:fa:fd:c3:2c:14:69:1c:6f:55:aa:bb:23:
df:ff:28:4a:22:5b:24:4d:85:b1:d8:07:d9:99:6d:
20:4b:78:68:97:49:2f:57:00:85:47:b1:e6:40:bd:
a3:5d:7a:0e:6d:c1:fb:73:31:81:d8:5a:b1:5c:49:
db:3a:67:0a:53:2d:33:9c:11:b5:aa:45:62:50:8e:
82:16:c2:05:9e:fe:52:21:37:8f:48:c5:e7:84:24:
5f:eb:7d:e2:01:65:3f:5a:3e:fb:51:27:fe:e2:88:
1b:ca:9a:42:41:66:25:0f:77:2c:bc:d5:95:54:30:
6b:e5:e4:eb:9e:47:7c:c9:30:03:d4:be:0d:d6:0a:
71:32:3a:88:c0:a1:bb:54:76:22:60:bf:61:66:06:
bd:01:8c:1f:70:c4:17:dd:c4:39:92:7c:ab:e1:80:
ed:14:28:bf:39:dd:f6:0c:71:ad:58:b3:4f:8f:09:
be:c6:92:8f:44:61:92:12:7c:27:4f:a7:f5:45:05:
dc:87:68:0e:88:81:12:41:74:f7:3f:ed:7f:e9:c1:
71:1c:62:cf:7a:ea:a9:5c:8c:f9:9b:47:87:1b:9e:
91:f9:04:2f:bd:11:99:7f:0b:7c:eb:c4:62:63:c5:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5A:92:71:12:19:C5:95:81:F2:93:0B:EA:5F:B1:D0:F5:45:E4:A6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1a:2c:62:48:e3:54:bb:cf:d8:9a:92:69:c4:c0:65:32:47:
8c:17:66:ec:d3:60:36:54:60:c6:d9:27:ba:7f:65:2b:be:4a:
43:d8:57:d6:79:5d:7e:4c:49:63:3b:2f:88:41:84:7d:c7:69:
1b:71:fb:51:0c:3e:c1:08:73:a8:77:72:9a:ba:c1:cc:f0:c9:
e4:f1:9e:58:0c:6e:5c:5e:85:24:97:73:52:00:d1:7d:34:e9:
c6:c5:03:98:32:ef:8a:3b:dd:a9:df:1e:9f:d6:67:3f:01:16:
ae:9a:21:12:05:f0:cf:1a:a4:f5:af:04:31:19:44:c9:a9:c3:
64:ed:a1:ca:3f:29:88:2c:16:f1:b8:45:09:73:23:dd:02:a2:
59:9a:8b:e1:ac:22:89:ee:db:e3:ed:13:62:1c:6c:7a:54:8c:
4e:a5:3e:8b:3e:4f:61:73:3c:6d:04:ae:aa:11:ed:5c:eb:4e:
20:63:33:83:66:b6:32:28:36:a9:75:12:65:e8:2e:88:0e:cc:
34:dd:ae:d0:39:0e:5a:77:bc:1b:87:df:d5:9e:62:e7:3a:e8:
9e:bb:57:8f:a2:e4:cc:05:53:d8:86:4a:f5:be:20:d7:60:c3:
1c:ae:c8:41:20:1d:cf:d5:e6:d3:a4:90:8b:77:cb:67:9c:6a:
76:25:19:a8
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 30 09:25:55 2023 by rpki-client on console-fra.rpki-client.org