Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32302e302f32342d3234203d3e203631333137.roa
File: 33312e362e32302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: hp57UgWteS+dp+X84WA99Hm1i6ewkOLj3O85VYjLkIE=
Subject key identifier: 56:B3:28:A6:E3:96:34:EC:47:A6:1D:39:37:DC:F3:91:A1:21:EB:EA
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 5EC6BB6933D290234022B7A3350A999B4B4EA05A
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32302e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:43 +0000
ROA not before: Wed 22 Mar 2023 15:24:43 +0000
ROA not after: Wed 20 Mar 2024 15:29:43 +0000
asID: 61317
IP address blocks: 31.6.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c6:bb:69:33:d2:90:23:40:22:b7:a3:35:0a:99:9b:4b:4e:a0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:43 2023 GMT
Not After : Mar 20 15:29:43 2024 GMT
Subject: CN=56B328A6E39634EC47A61D3937DCF391A121EBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:81:21:7c:ad:b3:d9:bd:45:ed:da:ac:60:
70:80:e5:fc:04:c3:87:9d:17:91:33:e9:b8:e8:34:
d5:cf:51:12:eb:37:d5:61:3e:8e:d0:cb:fc:22:e6:
de:70:17:03:d1:95:92:52:fd:be:17:eb:81:6d:f5:
90:4e:b5:b0:08:08:4a:20:d7:9d:6f:57:63:7e:5f:
86:b4:12:4d:db:1f:55:78:5f:85:2e:2f:01:fc:6b:
2a:37:e1:b2:60:50:c3:a6:63:a8:34:9e:f0:72:bf:
25:0f:b0:64:de:dc:3a:82:cd:68:d9:1b:26:88:be:
82:cb:be:85:c5:7b:40:16:5d:c1:dc:8c:3e:6e:3b:
0e:14:82:87:65:9f:40:1d:b0:58:5f:b8:29:99:44:
70:3d:f5:b0:db:58:3c:de:d9:38:b8:a7:e5:d4:65:
fe:19:31:65:13:6c:42:71:97:b7:1e:44:ba:73:f5:
13:58:0e:61:d8:a6:0d:4d:d1:1a:52:d7:34:4d:fc:
dd:df:a5:60:1d:50:fa:1a:94:6d:7d:5c:b0:f4:33:
c6:4b:e6:7e:ed:ff:71:7f:5e:c2:ce:91:35:df:d6:
24:cb:40:43:6e:63:c7:22:eb:3e:cd:43:29:e8:10:
b7:e2:54:2d:2b:df:b9:76:7a:e5:fc:23:dd:96:59:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:28:A6:E3:96:34:EC:47:A6:1D:39:37:DC:F3:91:A1:21:EB:EA
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9d:5f:6e:86:26:78:75:40:2e:cf:6c:16:a0:16:ff:af:44:
cc:28:80:de:c3:47:ea:c5:0c:ad:d9:d5:d8:7b:55:7c:60:08:
29:18:2d:2e:7d:e8:af:f1:33:bb:36:fe:e0:0c:55:83:36:4b:
69:86:5d:e4:ba:78:bc:01:1a:d1:ca:d5:5d:eb:92:59:47:27:
56:d4:9a:02:44:98:87:5f:b1:47:b3:b4:30:25:09:10:e5:3c:
a7:56:c1:f9:c1:d0:cb:b6:b2:04:c9:a0:fc:32:75:06:87:39:
30:5f:8c:c5:3b:95:46:b6:20:6d:2a:5f:e7:41:11:62:f6:9a:
b1:52:36:3a:5b:1f:a0:e3:df:9b:6c:a7:34:1e:8c:ae:97:fd:
06:d2:98:ae:1c:f3:14:6a:62:4d:d8:f8:c6:0c:27:15:8d:7a:
13:ed:44:8f:57:ca:e0:a8:65:33:5a:3c:b0:0e:4e:51:fe:53:
34:44:15:eb:bc:ef:56:62:a5:64:2e:ab:53:77:84:80:e0:7e:
5e:42:08:2a:49:0f:9a:b4:80:03:bb:bf:2a:23:ef:e7:ba:b2:
3a:77:26:9c:9c:82:be:d8:48:9f:9e:38:75:d7:ad:82:c7:bd:
8d:81:8b:50:64:68:77:46:ec:72:93:1f:26:80:69:47:ba:75:
51:47:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org