Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa
File: 33312e362e31322e302f32322d3234203d3e20323030303139.roa (raw, json)
Hash identifier: ispiiTbQxYpOorbo51/3wGE797xgGLm6ex9k2z2Y6+A=
Subject key identifier: C3:6A:21:90:9E:CA:51:64:9F:2F:39:B3:75:3D:C9:4E:81:23:E7:4E
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 4D00803A00F61FC94A4B0F44FC05B006D022CBE3
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa
Signing time: Wed 22 Mar 2023 15:29:43 +0000
ROA not before: Wed 22 Mar 2023 15:24:43 +0000
ROA not after: Wed 20 Mar 2024 15:29:43 +0000
asID: 200019
IP address blocks: 31.6.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:00:80:3a:00:f6:1f:c9:4a:4b:0f:44:fc:05:b0:06:d0:22:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:43 2023 GMT
Not After : Mar 20 15:29:43 2024 GMT
Subject: CN=C36A21909ECA51649F2F39B3753DC94E8123E74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:83:34:74:35:dd:d2:96:f4:41:f4:e5:5f:
76:7e:12:24:58:dd:f2:25:03:79:9a:d5:80:29:ce:
a9:ae:71:72:0e:ab:1d:8b:d5:e8:d5:54:d5:9b:a8:
48:a0:af:2d:11:f8:dd:44:a4:61:e4:23:02:11:78:
a5:82:61:52:c3:f8:ea:a0:d9:89:bc:e4:d1:e6:da:
8b:a8:55:0c:ed:53:91:54:8a:7a:26:6d:0d:b2:cb:
70:81:c5:c5:35:8b:9a:29:d9:44:de:2f:d3:aa:f9:
61:d4:25:11:8b:6c:88:19:67:69:83:e4:9f:98:ea:
64:fe:50:2a:5b:72:01:0c:75:8b:9f:82:2f:5e:45:
fb:49:1e:98:0e:b5:53:79:77:5f:28:23:c3:a0:48:
c4:7c:36:a6:58:38:35:cb:11:f4:3b:1a:35:d3:05:
bd:fd:ae:a1:b1:37:6c:16:78:44:6d:05:15:5d:50:
52:02:c1:0f:e7:d0:3a:ea:e8:32:e7:91:a7:7c:75:
35:6c:a9:ee:12:b1:10:71:2b:43:16:d6:dd:d4:fa:
8f:14:1c:86:e0:4b:3f:05:89:59:5f:26:5b:9d:16:
96:f8:66:46:7a:2b:ee:89:d9:04:fc:d7:23:89:aa:
84:dd:3a:06:7c:5e:6f:fe:0e:0d:ec:9d:5c:ea:30:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:21:90:9E:CA:51:64:9F:2F:39:B3:75:3D:C9:4E:81:23:E7:4E
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:7d:f8:a7:52:80:1b:9b:70:3f:09:af:ad:6f:0b:c6:43:a1:
2e:62:9d:c7:6e:c8:6e:df:90:84:ff:59:10:3e:21:bc:c4:82:
76:1f:ef:2b:f6:11:47:27:93:6c:dc:e0:1c:54:17:8c:33:40:
07:aa:0d:c0:5e:92:47:db:b9:a4:de:94:a0:35:86:32:95:f7:
ea:40:5d:92:7a:32:97:75:45:5b:b6:30:9f:c1:c1:4f:1a:36:
8f:eb:a8:52:13:3e:30:b1:4e:d4:1b:ee:02:4a:f6:2e:ac:cc:
89:91:d1:4f:e4:7c:de:93:39:54:38:78:21:94:7c:f2:71:4b:
8c:bd:19:a3:af:e2:c7:a2:76:6b:86:3e:7b:5b:18:75:c7:de:
a6:70:60:c8:1d:4f:ce:e3:76:8a:1d:6c:ed:57:2d:01:6a:dd:
5e:b6:0a:6f:60:68:69:d2:83:9d:5b:a9:4d:01:ef:77:7f:32:
19:22:a8:39:b2:79:f1:d1:39:5d:5a:84:30:50:a2:33:d5:41:
ff:96:b0:dd:22:e7:72:de:20:ca:ae:85:5f:99:2c:e0:0b:f7:
26:8e:c6:51:78:0b:20:29:6a:a4:57:a0:e9:e7:98:52:2d:af:
3a:01:5a:45:2a:9c:9e:99:7b:d7:0c:6c:e2:ab:0f:5f:9a:e5:
e9:f7:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org