Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203233343730.roa
File: 33312e362e36332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: FodKypRtLlyusGk58FAK881NZq4wauRChXmi5mJRMrs=
Subject key identifier: 3B:EE:6C:F2:C4:7E:80:E9:4F:E7:55:44:A8:90:92:D7:60:68:18:09
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6E78289E80EA8077A29AFF7CDC5D6DEBA01133A0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203233343730.roa
Signing time: Sat 18 Nov 2023 13:49:53 +0000
ROA not before: Sat 18 Nov 2023 13:44:53 +0000
ROA not after: Sat 16 Nov 2024 13:49:53 +0000
asID: 23470
IP address blocks: 31.6.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:78:28:9e:80:ea:80:77:a2:9a:ff:7c:dc:5d:6d:eb:a0:11:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 18 13:44:53 2023 GMT
Not After : Nov 16 13:49:53 2024 GMT
Subject: CN=3BEE6CF2C47E80E94FE75544A89092D760681809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:4e:a1:bc:a7:bb:2e:ab:34:9f:6c:ab:d1:
dd:53:85:0f:08:11:0f:e6:8e:43:a8:61:7b:10:43:
53:e2:ce:b5:e4:32:b4:87:40:a8:55:7e:db:e3:ef:
5e:8a:fd:e4:9c:7e:fb:62:ef:d3:17:5a:46:82:43:
d8:c5:b2:9b:ef:6a:1a:0a:5f:6d:38:b8:c4:42:58:
78:1a:fd:fa:1a:36:b0:0e:69:95:4a:6a:7d:47:4b:
d1:96:0a:39:9e:5d:c8:d2:90:71:ae:c1:fb:ac:7b:
87:e5:16:50:09:49:d9:43:15:fd:62:b7:6a:5f:ee:
6d:7e:72:14:c5:37:9a:6e:0c:a7:bc:3c:1b:68:ec:
d0:1d:36:c0:bc:4e:9c:45:36:9b:ce:d1:da:b9:ad:
6c:ec:7c:61:a5:9f:4a:4d:1d:43:5a:10:7b:c6:6c:
ec:30:e4:35:3c:16:c2:8f:b0:c9:72:a0:26:61:65:
f3:84:19:ee:c6:38:59:ba:9b:dc:99:11:f5:c4:66:
49:81:2f:c7:d0:00:c8:67:7e:ed:ba:72:25:9d:a9:
25:7f:93:6f:7b:40:8c:6f:f7:55:70:1c:09:2b:8f:
d2:4a:cb:3c:c4:99:15:d3:30:e6:46:71:83:53:5b:
39:66:6d:67:75:d8:e7:aa:c3:01:90:e5:93:b1:ef:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:6C:F2:C4:7E:80:E9:4F:E7:55:44:A8:90:92:D7:60:68:18:09
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0c:9f:f4:96:b6:ee:48:58:79:28:c3:bf:f8:61:4c:4a:53:
b7:4a:c1:e4:1b:d0:23:49:16:3c:c2:6d:ea:ca:9b:cf:80:69:
f6:49:c0:66:ca:8d:76:2f:87:fe:0b:f8:31:91:d4:df:4c:36:
3d:9e:ab:34:5d:2c:6e:ef:2b:d2:99:d0:49:9e:c0:5d:d5:cb:
79:6c:89:29:d0:b2:80:2a:a5:a8:c6:ae:09:fb:a6:61:78:3c:
d3:34:b9:f8:60:4e:5b:df:00:5a:31:08:7e:e6:26:28:d1:7a:
be:d5:8c:82:5d:dc:10:1f:67:68:ac:5c:7a:9a:fb:a5:49:86:
e8:b3:4c:21:5f:df:06:e7:b0:a5:b0:c8:45:28:d2:a8:25:5c:
81:87:8c:2e:b1:13:8f:7e:83:67:29:8b:dc:66:27:47:41:10:
11:9d:0e:1d:3e:b5:c0:2a:7a:91:a9:97:fb:30:f8:8c:76:b7:
fd:30:2b:18:49:b5:ba:aa:7f:76:40:a4:2f:f4:be:24:5c:e8:
71:f5:5b:3f:81:2a:5c:48:ba:28:d0:93:4c:2b:71:c3:65:7a:
c5:14:33:1e:fb:5d:30:ac:79:61:6a:7b:d9:3a:fb:13:fd:88:
b4:8a:bc:82:2f:0e:f5:c2:e7:cf:b6:a1:3a:a3:63:47:f1:96:
a5:67:51:7d
-----BEGIN CERTIFICATE-----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Generated at Thu Jan 18 01:58:48 2024 by rpki-client on console-fra.rpki-client.org