Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20323131393735.roa
File: 33312e32342e3235332e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier: 6c7KBZNI8LWHpLslJXG1G5VWZdxUkbTHjBqdCIDsV3s=
Subject key identifier: 28:19:68:0B:C8:A3:B8:41:0B:98:CD:44:EE:88:A5:89:AA:1F:33:02
Certificate issuer: /CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Certificate serial: 2875888CD30B8D305491019BA287A792A6F5764B
Authority key identifier: 4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20323131393735.roa
Signing time: Fri 27 Jan 2023 00:16:13 +0000
ROA not before: Fri 27 Jan 2023 00:11:13 +0000
ROA not after: Fri 26 Jan 2024 00:16:13 +0000
asID: 211975
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:75:88:8c:d3:0b:8d:30:54:91:01:9b:a2:87:a7:92:a6:f5:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Validity
Not Before: Jan 27 00:11:13 2023 GMT
Not After : Jan 26 00:16:13 2024 GMT
Subject: CN=2819680BC8A3B8410B98CD44EE88A589AA1F3302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:3b:80:0f:70:8e:b0:5e:d1:ee:c8:4b:16:
d2:62:4f:df:28:62:86:bd:7e:5b:09:94:11:12:bf:
9f:d1:20:34:7f:0d:e3:55:7e:38:03:04:c5:ef:39:
b7:58:2e:44:21:57:db:fc:dc:fd:75:f5:05:64:e7:
e8:f2:df:e5:6e:35:db:32:6a:07:9a:62:0c:87:2d:
5c:53:42:d6:75:5f:0b:b5:c7:ad:85:a3:b9:13:de:
d1:bc:30:a6:b6:ed:0c:64:47:0c:7e:6d:56:6d:07:
da:f3:ba:ed:42:92:76:81:2b:9d:09:32:9b:6f:53:
9b:5b:4c:d0:17:32:8c:aa:ca:f6:62:7a:cb:c3:53:
dd:73:cc:34:10:18:ad:c4:c3:42:49:8a:e4:63:d1:
ca:ef:d4:4b:a1:0f:d7:69:15:c0:3b:a7:a2:e7:a7:
42:a6:9a:47:c6:db:62:6b:ef:75:00:8f:0e:bc:8b:
2e:eb:6b:1f:81:1b:ba:06:cd:3c:fa:0f:31:93:0b:
c4:3a:b8:fe:b3:fe:88:ab:65:9f:9b:6d:d7:8d:2c:
17:7d:8a:69:f1:cb:3d:1a:0d:1e:91:e3:b7:a2:ce:
f5:0f:38:9c:40:b4:38:93:86:b1:6d:37:31:ed:e1:
f6:02:93:03:f7:04:5b:e3:2a:bb:30:f8:49:c9:4a:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:68:0B:C8:A3:B8:41:0B:98:CD:44:EE:88:A5:89:AA:1F:33:02
X509v3 Authority Key Identifier:
keyid:4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20323131393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:f1:da:63:8d:68:37:5d:59:b9:9b:c4:24:60:82:be:2f:
da:19:d5:2e:d1:6e:f2:4a:9b:85:06:6b:28:32:73:ad:cf:dc:
5d:17:3f:54:d4:f2:c6:6c:66:e7:41:f9:28:ba:04:2e:df:1a:
65:0f:a2:ce:ca:65:52:94:3a:c6:ed:05:de:b2:2e:49:51:27:
9a:da:3a:40:74:7d:e2:52:df:23:35:b4:85:21:17:03:2a:b5:
44:29:92:c5:5a:85:b8:b2:e5:d2:47:8c:df:b1:7a:90:f7:98:
2b:e9:e3:8d:04:93:9c:34:e2:07:99:1e:20:84:8f:da:82:f4:
62:57:7d:7c:55:81:01:c8:d6:22:d2:d7:98:d5:05:78:46:cf:
49:9d:f7:69:a5:c7:bb:a5:db:a3:54:78:ea:a6:bd:1d:82:a8:
d2:52:4d:ce:3d:4e:87:46:96:e9:47:df:c0:e7:7e:83:eb:48:
19:f6:a5:f0:2b:62:4a:df:e8:be:62:eb:87:6e:f9:77:ae:dc:
d9:ee:93:75:36:e5:7f:0b:a0:0d:a3:4f:30:84:f5:d6:2f:a6:
48:86:7a:4c:bf:96:1d:b1:93:31:bc:67:7e:c1:54:59:16:1f:
1f:37:0f:a0:50:7a:6c:af:a9:e8:d9:1c:a8:3c:a8:11:43:54:
59:d7:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org