Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203433323630.roa
File: 33312e362e36332e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: oDAVuJMTyRIDwB1Ya7Z/dq5cP/M6XtkTQh3pj0dYGGk=
Subject key identifier: 45:92:38:1B:88:A0:E3:05:05:6B:79:DC:BB:8F:4B:3B:4A:33:30:FA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5D8A13036B18FEAE90C14F9E1BF88E167BCB5B37
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203433323630.roa
Signing time: Fri 19 Jan 2024 21:36:18 +0000
ROA not before: Fri 19 Jan 2024 21:31:18 +0000
ROA not after: Fri 17 Jan 2025 21:36:18 +0000
asID: 43260
IP address blocks: 31.6.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8a:13:03:6b:18:fe:ae:90:c1:4f:9e:1b:f8:8e:16:7b:cb:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 19 21:31:18 2024 GMT
Not After : Jan 17 21:36:18 2025 GMT
Subject: CN=4592381B88A0E305056B79DCBB8F4B3B4A3330FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:53:36:1d:96:da:85:d6:a2:b3:ad:e8:41:
8f:8b:a7:0c:5e:0a:31:e0:9e:1d:60:4b:73:74:bc:
e6:20:47:af:94:d0:f2:f6:a7:a1:8a:5e:4f:78:93:
ff:e3:ea:49:e7:5d:7e:5d:65:7e:74:d2:e0:b4:5b:
33:98:b0:1f:0a:d0:ad:2e:fd:0c:45:6d:b5:c7:b2:
fe:f5:9b:f4:71:a2:21:66:2c:72:40:e5:94:ac:61:
2e:3e:37:4e:d1:17:a2:fe:4c:33:e4:24:a1:45:bd:
01:fc:fd:9d:0f:e4:9d:03:60:de:9c:c3:61:ef:f8:
2b:7e:67:6b:cf:89:ee:35:b7:76:8c:b5:fc:e9:3a:
cd:ce:d2:cf:e7:33:0d:22:ee:7c:25:43:d0:f0:f7:
7e:89:6e:0f:6c:6a:78:21:9e:2a:72:9c:f0:17:58:
12:ce:71:34:01:49:62:66:01:7c:2f:7d:7a:64:81:
f7:ce:91:1f:5c:f5:3e:3d:41:7b:b6:68:fc:ba:60:
b2:a8:1d:a5:76:6d:3a:24:5b:95:a7:cd:b1:81:0d:
7c:17:5b:b5:5b:54:55:47:99:e7:96:aa:a0:2f:2c:
86:1b:24:6c:34:ca:a0:4e:b8:01:a1:9f:db:ca:a8:
3c:88:e3:83:43:08:59:5e:4e:92:08:c5:65:56:c5:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:38:1B:88:A0:E3:05:05:6B:79:DC:BB:8F:4B:3B:4A:33:30:FA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6d:74:f6:a2:c2:23:b2:97:ad:12:3f:58:14:43:93:bf:57:
e7:2e:24:28:7e:e9:bc:17:01:02:f7:5f:99:90:2c:58:38:db:
dd:8a:78:1a:49:4a:63:b9:8d:26:a6:0b:34:f2:d6:8a:29:7a:
d5:a1:96:fe:a1:57:a0:17:1b:24:ac:5b:8b:47:b9:b1:3a:f1:
de:de:63:5c:fc:4f:4b:4b:1a:8a:09:f1:bf:de:ec:d3:9c:50:
ba:80:ca:2f:84:fd:cb:30:5c:a9:5b:7a:fe:cb:b3:20:fc:bd:
44:9c:c8:e2:97:bc:1d:db:f6:33:7d:c1:b7:17:2a:e5:83:1f:
ad:ea:e4:8f:42:e5:d8:ec:ce:63:10:8d:3a:27:3e:53:a7:27:
a1:43:ae:b1:1d:e0:a7:54:3c:2e:aa:b2:1f:db:db:38:34:a4:
87:26:78:9c:7b:ca:e1:51:2c:5f:28:92:c3:32:9b:33:e7:ca:
cf:96:50:66:15:e2:ca:19:de:f5:cf:0b:18:57:e8:80:9a:d1:
cc:d8:85:02:af:96:7b:b9:e4:fb:54:a5:6b:45:4c:a1:f4:c3:
07:98:14:53:06:c5:b2:a7:41:db:5c:7d:8d:99:07:fc:41:0a:
33:36:ab:f7:53:6e:98:be:5e:28:10:f9:34:c0:f0:aa:29:7c:
a6:1e:11:2d
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 1 01:12:02 2024 by rpki-client on console-fra.rpki-client.org