Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20323131323337.roa
File: 33312e362e322e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier: NhiU7nwrMztC5bVpqv63bTnDE5cpABw7hi53m2Egr0g=
Subject key identifier: 9B:99:C2:56:D9:D7:75:09:7D:6F:FA:FF:64:3F:D3:22:A1:21:14:68
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 05E84AF0A9F8E35DF723ABF4EDD676424CE951B5
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20323131323337.roa
Signing time: Wed 22 Mar 2023 15:29:42 +0000
ROA not before: Wed 22 Mar 2023 15:24:42 +0000
ROA not after: Wed 20 Mar 2024 15:29:42 +0000
asID: 211237
IP address blocks: 31.6.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e8:4a:f0:a9:f8:e3:5d:f7:23:ab:f4:ed:d6:76:42:4c:e9:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:42 2023 GMT
Not After : Mar 20 15:29:42 2024 GMT
Subject: CN=9B99C256D9D775097D6FFAFF643FD322A1211468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:dc:1a:47:d9:c2:2a:1a:c7:20:96:7a:44:
39:18:91:83:93:62:49:39:19:d0:fd:bb:e6:91:be:
76:05:fd:89:e7:0f:86:6b:be:58:8f:50:05:b0:17:
34:80:d5:14:f3:bb:36:a1:a5:b6:29:58:0f:29:c0:
b9:ea:b3:07:83:ac:ae:61:d4:d8:f3:3e:a4:8f:81:
6b:7e:e0:ce:c3:63:6f:ad:c9:b3:49:b5:8a:7c:c8:
02:bc:5e:46:5e:aa:52:1a:60:47:53:b4:6c:09:1a:
7a:52:4f:bb:cf:85:5f:84:40:9a:2e:27:9a:4b:31:
16:d9:5f:d4:64:55:36:0a:37:02:1c:51:cd:32:31:
fe:c7:06:6f:1d:2d:d5:ea:b5:14:7a:55:02:f1:09:
e7:4f:fd:90:13:31:00:fc:ff:0b:b1:3c:23:a6:e1:
2c:53:f0:ce:2d:14:05:aa:31:69:f2:c3:6a:3c:4d:
be:60:81:28:7d:42:47:81:2d:81:58:ee:fb:8e:57:
2e:a8:1a:51:c9:da:1b:90:65:e7:6d:af:53:fb:af:
d9:cc:56:f3:49:fb:3c:95:09:6c:16:46:a5:55:8f:
19:21:31:0d:57:47:ab:b4:b0:2e:ac:0c:b2:e3:4b:
bb:39:81:32:6e:15:75:12:90:3e:ff:06:5e:1d:df:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:C2:56:D9:D7:75:09:7D:6F:FA:FF:64:3F:D3:22:A1:21:14:68
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20323131323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fe:2e:9a:18:a9:2b:25:54:4b:57:f7:fc:d1:ce:0f:d5:1f:
83:ed:d1:a0:d3:e1:2e:43:e5:c9:fb:d9:84:9c:4e:30:4f:57:
c3:43:78:0d:81:16:1d:f5:f3:b1:e8:82:6d:90:e4:8e:44:0a:
93:35:39:06:f2:70:3a:f8:d6:d3:17:d5:9f:47:db:d3:5e:1b:
5b:e5:18:89:ef:1f:2d:30:09:53:1c:b3:be:26:55:da:69:0f:
1d:aa:e2:74:ec:fb:4f:18:a9:76:ec:36:2e:4c:2d:3c:83:f6:
99:67:ad:57:eb:00:e2:d6:a9:ec:d8:a7:3d:99:46:8e:0c:4b:
32:47:f4:e2:ef:99:a1:da:1a:7f:55:66:ea:0f:09:ff:03:de:
f2:10:65:8c:e9:d5:e6:f6:da:da:7e:98:f8:30:cf:84:d4:b2:
46:9b:9a:46:8e:35:f7:61:78:0e:70:49:de:5a:7f:3b:b0:ba:
0e:ec:6f:81:a2:2f:d1:83:27:54:fe:4a:81:0a:9a:b2:d6:52:
b6:d8:7a:62:06:63:29:fb:af:ee:51:0c:4d:81:92:3e:2c:c7:
61:12:48:25:a2:da:5f:5a:e4:d5:2c:31:d7:79:d5:08:35:7e:
0c:47:1c:e3:1c:be:50:cb:ed:ac:d9:1f:35:8d:67:0e:c9:d9:
18:aa:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org