Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20383334.roa
File: 33312e32342e3235332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EgBhsxDAVKxaXrNwXTDWnkb4/ivixGRe4gdfqQAnWRc=
Subject key identifier: AA:56:C0:74:7B:02:23:CA:EB:C9:97:07:F2:4E:38:0D:D9:F0:26:05
Certificate issuer: /CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Certificate serial: 15F72B95A8ED9D9A8E45904065893C82EFA42893
Authority key identifier: 4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20383334.roa
Signing time: Wed 18 Jan 2023 06:19:03 +0000
ROA not before: Wed 18 Jan 2023 06:14:03 +0000
ROA not after: Wed 17 Jan 2024 06:19:03 +0000
asID: 834
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f7:2b:95:a8:ed:9d:9a:8e:45:90:40:65:89:3c:82:ef:a4:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Validity
Not Before: Jan 18 06:14:03 2023 GMT
Not After : Jan 17 06:19:03 2024 GMT
Subject: CN=AA56C0747B0223CAEBC99707F24E380DD9F02605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:ae:b5:a3:77:11:2a:9c:81:2f:9a:94:d5:
28:26:ae:52:9c:c8:15:3b:41:c0:93:b2:93:ee:95:
99:a8:1f:95:c1:87:74:44:7a:0d:e5:ae:0d:76:de:
8e:d7:29:2e:9f:54:9e:6a:8e:4e:60:7d:59:25:75:
f3:84:9e:05:54:78:de:00:a0:6b:fd:1b:da:89:8b:
7d:a7:ca:61:8b:27:86:cf:e6:8b:c1:b7:dd:70:af:
21:88:e3:ad:5a:c7:7e:da:96:cd:68:a2:89:98:6b:
4e:24:6f:ef:99:c8:10:28:d6:7d:68:b9:39:ea:a0:
96:e5:49:0d:22:be:9f:d7:ef:20:63:a2:73:79:e9:
84:d2:12:70:20:a2:7b:ba:5e:12:16:c1:e8:92:fc:
ac:76:c5:f4:d6:41:53:86:0f:1d:91:f4:e9:44:04:
87:6b:55:07:81:a8:e1:42:1f:70:e9:dc:f6:c4:a2:
9e:4a:c4:0f:ab:81:2a:2b:12:49:e3:10:4f:dd:f7:
62:97:08:a6:f7:32:12:bb:64:13:d0:a5:47:6c:2a:
f5:f1:14:4f:11:6b:cf:b4:b9:86:68:c5:8b:c8:97:
ed:82:04:0e:0d:31:7a:cf:9f:96:92:ac:16:a1:7f:
b0:7e:5c:7d:11:de:9c:67:43:20:82:af:d3:3f:d8:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:C0:74:7B:02:23:CA:EB:C9:97:07:F2:4E:38:0D:D9:F0:26:05
X509v3 Authority Key Identifier:
keyid:4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b3:d9:24:b8:a5:31:0b:f9:f3:d1:c0:d9:27:15:4b:d2:a4:
d8:50:ef:a2:20:9c:75:f0:f2:81:19:d0:73:8b:97:37:19:91:
ee:e9:9c:44:e6:44:cc:bf:e4:62:15:9c:99:38:27:1d:2d:4f:
ba:46:13:1b:f1:64:94:8c:06:9e:b4:e4:d3:f5:7a:85:6c:53:
41:91:67:77:8a:46:e5:e6:19:0d:cf:a6:77:94:7b:7d:2f:db:
10:77:25:5c:c7:02:a2:f9:2f:7e:05:a2:f2:7d:50:7b:0b:06:
39:ba:0d:d6:e2:79:ef:0c:8f:ba:e8:a3:92:0b:28:a0:70:fa:
f1:ea:f0:07:7a:1b:23:cb:9a:fc:00:ed:36:1e:29:4a:7e:c6:
46:94:2d:47:ae:60:34:6e:24:8f:15:13:9c:07:25:68:e2:68:
36:00:a1:1b:ac:a6:1b:11:4a:7b:b6:e5:42:23:0a:d4:77:c6:
ba:aa:0a:c2:ed:55:d0:74:2d:25:fd:77:a7:5f:70:a2:78:77:
52:48:dd:af:e0:08:a9:20:6a:61:be:45:75:7c:7e:f2:99:13:
8a:2b:ae:bd:96:a5:d9:b0:2c:35:4d:8e:cc:7b:ae:db:ec:7b:
ac:10:60:1d:20:80:9b:f2:b6:71:cd:f5:28:4a:79:f5:60:76:
f9:ab:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org