Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa
File: 33312e362e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 4zpQUlj1Mbra1/WkB3/o5y9VoAGZp1nRfc88tTuMByM=
Subject key identifier: D8:28:DB:FA:65:32:D2:91:37:E6:84:11:CE:F4:D3:29:92:2D:8B:BD
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 29C768C7BE2D9DB8E5FE6BDD6A55FF0D451E3833
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa
Signing time: Sat 18 May 2024 00:02:50 +0000
ROA not before: Fri 17 May 2024 23:57:50 +0000
ROA not after: Sat 17 May 2025 00:02:50 +0000
asID: 834
IP address blocks: 31.6.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 02:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c7:68:c7:be:2d:9d:b8:e5:fe:6b:dd:6a:55:ff:0d:45:1e:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 17 23:57:50 2024 GMT
Not After : May 17 00:02:50 2025 GMT
Subject: CN=D828DBFA6532D29137E68411CEF4D329922D8BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:14:8d:59:d6:c2:bf:fb:26:23:e0:ed:c2:
4e:89:97:9e:8c:70:0f:1c:d1:4e:a6:17:26:03:53:
75:f4:24:9d:85:0b:79:8d:79:b5:03:5d:f5:07:36:
33:4d:7a:ca:92:0e:77:bf:4c:af:48:f1:85:fe:4e:
bd:6d:db:23:71:7c:1f:f9:08:49:d1:0c:7e:df:77:
b5:7b:44:44:67:df:57:9b:6a:25:1e:a8:8d:b0:33:
4d:74:b0:cf:05:24:7b:7f:31:c8:ee:85:0e:07:9d:
bf:b2:8a:d3:ef:68:78:a5:7f:b0:2d:63:ee:4e:2b:
33:19:bc:cf:de:67:11:a4:70:8a:81:d9:cd:94:c1:
2f:96:9d:4e:d7:b0:5d:a2:0d:6b:fd:0a:fa:55:d8:
c7:bf:06:97:ef:f8:17:4b:b8:9e:fc:49:10:61:30:
1f:01:a9:74:32:2c:f8:73:24:4a:cd:09:6c:04:4b:
0c:39:69:9f:db:c8:21:11:a5:ee:58:49:3b:ce:57:
f4:ec:70:ac:c0:7e:dc:b7:22:b5:1c:6b:6f:f4:f3:
85:7a:b5:dd:5e:77:d9:20:db:ba:93:ee:b5:de:5f:
fa:d5:e3:04:7a:20:9d:2c:e2:d5:fa:05:25:05:dc:
ce:30:a3:69:fa:bb:42:ba:b9:ef:90:48:d8:95:d8:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:DB:FA:65:32:D2:91:37:E6:84:11:CE:F4:D3:29:92:2D:8B:BD
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/23
Signature Algorithm: sha256WithRSAEncryption
33:69:5f:58:9e:5b:9a:a3:3f:89:d1:54:ff:be:56:ff:c1:d2:
b9:4b:7c:01:5d:59:a5:3b:0b:8e:d2:15:a7:b1:81:86:87:69:
40:79:31:d6:2d:c1:cd:cc:3d:c8:cf:9c:77:29:6f:fc:e1:03:
86:6f:bd:e0:59:a5:23:59:cb:f5:da:79:f7:e3:6f:e1:f2:ff:
64:90:ce:78:db:6d:18:dc:de:91:ae:a5:62:c1:3a:03:ea:3c:
6d:83:1e:50:91:60:45:96:d8:b5:07:85:42:a6:d1:e2:5f:77:
ae:fe:7b:33:0d:80:86:73:68:21:66:8b:9d:1a:b7:fa:74:14:
99:15:16:85:f6:9d:be:21:d3:ce:4e:7d:b9:7b:f4:92:e0:7f:
a0:93:a1:51:48:69:26:1a:a3:8b:45:e0:77:32:17:db:cc:50:
21:31:87:35:c2:9a:b5:6c:ef:9a:8e:af:85:e0:80:7b:98:03:
ba:f8:5b:74:d0:28:6c:0f:e6:ab:55:f9:cc:0c:ee:91:23:e1:
e0:b8:a5:ee:8b:08:e3:3b:b4:92:f9:30:79:cf:7b:a8:69:1f:
a7:8c:22:fd:81:79:22:7b:82:98:a7:02:02:15:52:9d:75:e2:
86:bc:93:ce:bf:4a:9a:8b:7a:03:80:2c:7a:12:ac:01:a6:f6:
83:0c:f0:dc
-----BEGIN CERTIFICATE-----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Generated at Mon May 20 04:05:18 2024 by rpki-client on console-ams.rpki-client.org