Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203530303538.roa
File: 33312e362e312e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier: qQEqAgXJE+DQgGr1EV+toDc2b/MyWkD48D2imA1tSXU=
Subject key identifier: 04:0D:8C:0A:FF:48:9C:5E:D9:84:C7:2C:BF:1D:DF:9D:B7:F7:84:99
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 6E266312AC94F64DDBDF8F4A3C7FE9503E7AA5E1
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203530303538.roa
Signing time: Wed 22 Mar 2023 15:29:42 +0000
ROA not before: Wed 22 Mar 2023 15:24:42 +0000
ROA not after: Wed 20 Mar 2024 15:29:42 +0000
asID: 50058
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:26:63:12:ac:94:f6:4d:db:df:8f:4a:3c:7f:e9:50:3e:7a:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:42 2023 GMT
Not After : Mar 20 15:29:42 2024 GMT
Subject: CN=040D8C0AFF489C5ED984C72CBF1DDF9DB7F78499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:83:d2:e2:cd:79:b9:03:ef:8d:e3:ef:d4:
da:23:f5:2c:c9:b6:ca:d0:62:31:41:f4:f6:92:4f:
3a:db:02:1e:6a:b3:50:9f:3c:92:54:58:e7:57:2b:
48:fa:c7:7c:46:09:b9:9c:17:29:a2:7d:d4:85:c2:
f3:9f:50:ae:8b:64:cb:34:a7:c1:37:0c:1b:1c:2d:
90:25:93:8b:c7:cd:aa:c6:28:92:23:28:9e:c9:34:
7c:21:91:22:67:ca:78:72:58:e5:51:d5:3d:a5:38:
ec:db:a2:94:2f:1f:28:bc:c2:53:d7:ca:05:58:f7:
be:59:d8:95:2d:65:a4:9a:0d:ac:e9:1c:5c:8f:db:
c7:e2:13:76:ab:98:90:34:a3:a2:bb:1a:d7:6b:36:
56:20:c5:64:91:5b:cd:74:06:dd:b8:1b:fd:71:c1:
89:ed:da:8d:04:a4:8b:10:6e:3e:48:32:8f:e2:ca:
a0:60:74:d2:e1:95:f3:11:08:4a:cf:e4:29:3b:33:
9d:b7:e3:0a:f1:2d:c4:d3:2f:ce:10:60:30:30:3a:
b0:52:3a:a8:e3:ce:e2:cf:77:a2:7f:35:18:aa:ba:
8a:7a:4b:c2:02:16:ea:0e:5a:47:f2:e1:31:36:b6:
1d:e2:9c:9a:c7:33:16:9e:fb:8b:d2:00:36:61:a7:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:8C:0A:FF:48:9C:5E:D9:84:C7:2C:BF:1D:DF:9D:B7:F7:84:99
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203530303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8e:71:78:63:f2:99:f6:93:b6:7e:64:58:f6:93:5d:d9:1b:
38:b9:f4:ef:ad:d9:fd:2a:a8:ea:6b:6a:46:68:f1:7f:7b:cf:
48:14:41:ad:aa:8c:2a:e6:bb:fe:61:7a:61:bd:ae:e3:4e:ab:
b6:32:0a:5f:ad:5b:f9:02:d0:37:38:8c:80:65:c4:4f:8e:d4:
af:e6:f4:d3:66:36:cf:d6:f0:ec:f3:ce:61:99:1d:25:16:a2:
e7:3f:77:13:e6:af:0d:31:c4:05:92:99:9d:c6:21:3a:60:69:
93:4e:0d:e8:c6:76:59:79:74:5b:07:6d:7c:a2:86:41:d9:25:
11:73:71:72:48:3b:30:f4:10:6c:ab:28:27:9e:ca:27:23:2a:
bc:83:a0:1f:c5:70:1e:1e:a0:05:2b:1c:38:d0:a4:35:ca:a5:
2b:1e:d0:6c:2a:62:d0:ad:64:81:ab:df:65:81:9e:78:04:4c:
8c:e1:3e:0f:a4:9b:3c:95:ad:cb:0e:b3:5a:c1:0e:88:0b:c5:
8e:49:43:93:ed:9a:5b:8b:b4:51:89:de:bf:4e:dc:88:89:86:
04:63:ac:bf:c6:96:78:a5:36:08:f7:c6:02:03:a0:5c:11:52:
1e:34:30:1e:6d:53:eb:07:ae:84:20:21:ae:6e:42:e3:a7:b8:
9b:c9:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org