Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323131333138.roa
File: 33312e362e36332e302f32342d3234203d3e20323131333138.roa (raw, json)
Hash identifier: +eZbIzETeAn+PXnPLZ82FUDd0m+Tb0pyRU6/pu/kbNA=
Subject key identifier: EE:68:2A:2A:E6:45:14:86:93:9A:F6:08:F9:ED:6F:2D:5D:DB:25:DC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 52F274D134551A4A7AB9E917DD80292FFC47C208
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323131333138.roa
Signing time: Fri 19 Jan 2024 21:34:57 +0000
ROA not before: Fri 19 Jan 2024 21:29:57 +0000
ROA not after: Fri 17 Jan 2025 21:34:57 +0000
asID: 211318
IP address blocks: 31.6.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f2:74:d1:34:55:1a:4a:7a:b9:e9:17:dd:80:29:2f:fc:47:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 19 21:29:57 2024 GMT
Not After : Jan 17 21:34:57 2025 GMT
Subject: CN=EE682A2AE6451486939AF608F9ED6F2D5DDB25DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:ff:be:5b:6d:17:cb:16:54:f7:72:96:7b:
51:aa:3f:0b:9e:c3:12:f1:bf:fc:7f:ac:84:07:ec:
10:1b:8b:05:bc:87:0e:b6:8b:19:ae:23:00:72:11:
89:70:cc:13:95:85:7f:1b:ce:ac:b5:f1:0c:89:51:
18:67:ba:e4:c7:84:0e:eb:61:11:7c:9e:1d:4c:3d:
f5:6f:cc:cf:7d:5a:ae:8f:6b:33:30:ba:88:f8:31:
08:27:13:aa:18:4d:6d:4a:0f:05:2c:73:3c:3a:d0:
7d:61:62:25:cd:46:d6:d3:1a:c3:35:b1:f1:b4:e5:
85:d0:80:e6:05:17:ff:c7:4f:b8:21:01:7e:25:ba:
1e:5f:35:ec:7f:86:29:da:8c:9b:07:dc:dc:51:b0:
fd:b0:40:83:bf:c7:1a:7c:b7:de:55:03:43:8e:aa:
4a:49:c2:b7:35:18:09:d2:07:3a:d1:1d:2a:49:7b:
8f:21:5b:9b:3f:43:05:80:6b:20:64:94:b3:19:82:
f8:1b:19:cc:b8:10:dd:22:ac:fa:30:29:22:99:24:
5c:8c:c5:91:54:1f:bd:9f:9b:3e:a2:33:25:2e:7e:
39:d9:bb:e1:65:8e:b5:81:3e:45:47:cc:7e:a9:4a:
d0:eb:7e:06:6c:08:50:a3:17:29:d6:94:2a:d2:b9:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:2A:2A:E6:45:14:86:93:9A:F6:08:F9:ED:6F:2D:5D:DB:25:DC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323131333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:47:9e:03:47:f7:99:8e:8b:71:21:e1:5f:dc:cf:77:0c:0d:
5e:2e:d2:e0:ce:39:c4:32:5d:db:ad:61:39:01:21:45:d9:da:
8b:24:53:08:a1:46:7f:7b:20:21:e0:90:5f:04:9a:a1:60:08:
50:4f:1a:84:44:ed:8c:3f:03:a6:6a:89:6b:7d:a5:5d:f9:03:
4e:d9:08:34:f4:9a:99:03:ef:08:3f:dc:93:22:16:fe:7f:8f:
d0:d9:99:44:2c:e1:cc:fd:89:5d:9d:58:96:77:77:97:5e:6a:
d1:c8:5d:ff:43:c0:21:49:28:1c:99:e2:1f:d6:66:3a:0d:5e:
da:2e:9f:21:41:9c:80:6c:91:c3:4d:e7:e6:c7:17:3d:5d:67:
3a:b1:78:10:71:02:d4:69:0a:f5:b0:da:bb:aa:02:f1:00:dd:
e3:10:af:2a:97:39:c9:35:41:b7:79:4e:a8:51:df:65:da:37:
5a:27:7b:3b:50:6d:12:be:cf:7d:59:b1:9c:a2:d3:29:91:5c:
88:94:30:ce:f9:1b:b9:cf:f2:e3:47:86:9f:21:1c:3b:f4:0b:
cc:d4:b0:b0:fa:41:98:f4:c1:df:2b:73:9d:94:52:42:89:d1:
7a:18:5a:b4:0a:de:85:41:22:ed:c6:1e:4c:4d:9f:22:aa:f8:
63:51:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 01:12:02 2024 by rpki-client on console-fra.rpki-client.org