Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203630373231.roa
File: 33312e362e312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: H1zH6Nxt+6pT0J5HQmVoRSolYj5hnoQy1GLNbtAkbO0=
Subject key identifier: A2:C3:53:FE:65:E6:5E:6F:B1:C9:85:E5:EE:F1:59:DA:FA:4C:22:5C
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 64270D722EF1401712A10B62D4664B532B5015B5
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203630373231.roa
Signing time: Wed 22 Mar 2023 15:29:42 +0000
ROA not before: Wed 22 Mar 2023 15:24:42 +0000
ROA not after: Wed 20 Mar 2024 15:29:42 +0000
asID: 60721
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:27:0d:72:2e:f1:40:17:12:a1:0b:62:d4:66:4b:53:2b:50:15:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:42 2023 GMT
Not After : Mar 20 15:29:42 2024 GMT
Subject: CN=A2C353FE65E65E6FB1C985E5EEF159DAFA4C225C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:6a:54:77:e4:c3:4e:ea:4b:c1:7f:df:67:
7a:96:df:16:66:d8:b4:c6:5b:28:a1:ac:4e:9c:00:
52:58:fd:30:8e:b8:30:4f:a1:57:58:6b:28:5a:19:
45:81:4d:be:cf:65:15:e9:b7:e4:74:b9:18:af:d9:
0f:b0:69:b1:4a:f0:62:4f:c9:60:c1:09:59:e6:e1:
08:f2:34:6d:d2:4b:7e:27:b0:81:0c:83:d4:d9:59:
e8:02:3b:6d:81:4a:71:5e:b1:dc:d3:42:06:ba:e7:
b3:17:40:85:ed:6c:6d:20:b9:c0:f6:ae:ec:94:70:
6c:4b:62:3c:d8:3e:63:42:fe:76:92:f6:cb:c7:1e:
6d:0e:1e:d1:f6:0d:95:84:f4:8c:74:14:ae:48:5c:
43:19:31:9b:b9:52:c7:92:55:5d:a8:1c:48:c9:d7:
d7:41:7a:ae:04:ca:08:f6:33:d5:61:73:05:bb:fc:
f9:88:46:36:3b:92:9d:a3:b9:05:b6:34:a7:ae:ed:
26:56:cd:35:8c:ee:ed:59:4e:7c:61:1a:81:64:c4:
71:99:60:67:91:02:0d:db:9e:c2:62:3d:37:5f:b8:
14:93:7d:26:c1:1b:d0:09:b9:de:e5:c8:f5:c8:0f:
6d:c1:00:f5:1e:76:d2:7f:79:c9:82:b9:c3:9a:c2:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:53:FE:65:E6:5E:6F:B1:C9:85:E5:EE:F1:59:DA:FA:4C:22:5C
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:18:72:09:94:ef:2d:0f:dd:fa:64:eb:3d:e3:d2:42:a3:61:
49:33:14:f0:45:ff:ce:87:65:ba:ef:10:be:03:70:82:8c:de:
df:61:2d:3a:f4:44:1a:7f:75:2b:40:29:41:07:13:6b:55:77:
bb:70:21:60:a4:a0:69:80:7b:bf:bb:f3:b2:ca:40:73:43:5d:
6b:23:e5:ef:da:5b:cb:f3:de:85:52:ea:87:0a:3a:f9:9f:5d:
9f:a5:a4:e5:82:3a:55:6e:d8:fc:b7:eb:00:9b:65:33:1c:82:
01:4b:99:f7:81:da:d0:11:06:c8:18:10:30:17:63:7f:8b:5f:
86:fa:8d:68:21:63:98:96:41:1b:ba:37:83:a0:79:0a:5e:90:
3f:5d:e8:9b:c4:08:ed:4b:5e:28:a2:82:08:69:8d:eb:6e:e6:
fa:6b:17:56:f0:bd:fb:ae:15:4b:04:ad:df:67:86:f0:8f:d3:
13:9d:dc:e9:5d:f9:1f:a7:e3:47:2f:65:8f:62:5f:50:29:85:
2f:b4:8e:6a:26:a8:bb:ce:ba:84:ab:bd:76:96:ac:c4:88:fb:
d8:6f:bc:f1:a4:db:b1:08:21:8a:4b:74:8b:67:bc:52:a9:b4:
ba:08:60:0c:6d:b6:c2:cf:62:6c:4b:81:3f:61:f5:e7:ac:5d:
dc:b3:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org