Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203231383539.roa
File: 33312e362e36332e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: TgIedrK+YN1Z+W6MzZye92Ixq5eWHPapvlPy7sI+hXI=
Subject key identifier: 0C:18:C8:AC:C8:7F:3B:CB:B2:FF:8E:35:E1:F3:B1:17:55:25:4A:6A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1EF2F93CBAF57326A22E368A9E16EF23F05492C7
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203231383539.roa
Signing time: Tue 03 Dec 2024 14:58:14 +0000
ROA not before: Tue 03 Dec 2024 14:53:14 +0000
ROA not after: Tue 02 Dec 2025 14:58:14 +0000
asID: 21859
IP address blocks: 31.6.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f2:f9:3c:ba:f5:73:26:a2:2e:36:8a:9e:16:ef:23:f0:54:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 3 14:53:14 2024 GMT
Not After : Dec 2 14:58:14 2025 GMT
Subject: CN=0C18C8ACC87F3BCBB2FF8E35E1F3B11755254A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:1d:1c:4d:53:c7:04:4a:94:31:59:6a:35:
f8:bf:d7:9c:77:62:30:e1:56:78:15:c7:42:b6:0a:
16:62:d3:22:f2:c3:8b:cf:1c:ae:92:e2:0c:2e:2b:
37:d8:a6:02:e3:84:7d:c3:3c:21:35:c7:60:9b:3a:
fe:ef:66:a4:bb:9d:28:8f:f3:8b:fb:71:14:85:8d:
de:1e:dc:95:fc:c2:ae:70:81:79:2d:08:ae:e7:fb:
a1:09:d5:05:a7:60:cd:62:cf:bf:50:cf:88:49:a0:
bb:66:50:4f:62:e5:d3:82:35:7e:b1:88:01:c7:6d:
42:ab:cf:e5:e1:d5:f0:30:35:0e:ef:be:94:d7:47:
f8:86:9d:37:74:b4:32:fe:93:46:1f:32:71:6d:7f:
71:40:ec:70:a3:25:8e:7d:f5:cf:78:65:da:49:ed:
6d:84:a2:0e:e3:11:c8:f2:96:00:ee:8a:c2:cc:85:
f0:f4:5f:95:2e:80:44:10:7c:01:4a:a7:e8:c0:75:
47:2a:c2:47:86:81:f2:fe:d1:fb:3d:1e:ba:d5:32:
dc:bc:f6:64:b5:08:7d:40:2c:e3:87:af:1c:eb:75:
73:54:00:9b:1b:85:c5:b0:a2:f1:57:fc:d3:78:82:
51:1e:11:80:76:79:e1:f7:6c:02:5d:ee:31:3b:33:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:C8:AC:C8:7F:3B:CB:B2:FF:8E:35:E1:F3:B1:17:55:25:4A:6A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e4:7d:47:07:fb:a3:de:8f:fc:c1:01:ea:33:3d:cc:7c:53:
86:a3:89:51:89:d0:f2:43:df:bd:6b:2d:45:b3:3c:b9:fa:ec:
8c:26:6e:69:dd:5d:f0:3c:f4:2c:f9:ba:14:aa:f1:9c:b9:df:
2a:b6:eb:7b:46:a5:e7:ed:71:63:0c:8a:6d:28:33:b2:b8:94:
31:a4:3b:27:c1:f3:03:c9:b4:ed:d6:44:43:28:b4:4b:91:f8:
36:c5:11:7b:8f:b8:80:40:8a:d1:d0:b6:72:7f:55:d6:93:71:
5d:2f:34:37:4d:f6:c1:64:bb:84:ff:44:ec:34:a0:5c:a5:90:
af:19:73:6d:9c:67:4a:f8:45:72:fb:10:22:c0:1d:e9:50:8d:
57:b6:62:f6:74:66:6b:34:cf:69:a6:44:55:91:b6:d1:c8:59:
dd:0d:ff:c2:6e:c3:8d:bb:5a:5f:60:4f:66:ba:8e:76:ad:2e:
37:0e:87:0d:e9:bf:50:05:00:be:ca:89:a0:d7:ff:f9:e4:d4:
29:fd:8b:32:48:a6:b1:c6:81:44:b2:ba:5a:22:54:db:ca:b8:
13:66:a8:69:ac:4d:f6:85:6c:0d:45:75:4f:36:13:03:5b:4f:
13:2d:02:a8:fe:7c:65:8a:af:9f:9a:68:d9:74:2e:b9:72:3f:
08:92:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:44 2025 by rpki-client