Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32342e302f32322d3234203d3e20323035323230.roa
File: 33312e362e32342e302f32322d3234203d3e20323035323230.roa (raw, json)
Hash identifier: a/kYX2WnuO45kCN59VxPp677ld5yrCGqiVvR3y8Di84=
Subject key identifier: 82:2E:FB:AA:3D:7F:DD:5F:EC:A7:7F:FC:7B:C8:2E:6C:86:46:05:A7
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 1D59FDB8BE190EFC6119FA3943E82CF2D4CE9BFF
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32342e302f32322d3234203d3e20323035323230.roa
Signing time: Wed 22 Mar 2023 15:29:43 +0000
ROA not before: Wed 22 Mar 2023 15:24:43 +0000
ROA not after: Wed 20 Mar 2024 15:29:43 +0000
asID: 205220
IP address blocks: 31.6.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:59:fd:b8:be:19:0e:fc:61:19:fa:39:43:e8:2c:f2:d4:ce:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:43 2023 GMT
Not After : Mar 20 15:29:43 2024 GMT
Subject: CN=822EFBAA3D7FDD5FECA77FFC7BC82E6C864605A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:d5:e3:0e:e7:f3:cd:f6:7c:f0:8f:ea:10:
9f:87:c5:1c:33:ef:d6:14:4b:c7:6e:a9:d3:17:0c:
60:d4:53:c8:b2:d3:d9:f0:51:de:24:d7:31:c0:8c:
f3:8b:b2:7c:a6:b0:bf:a9:84:3e:39:7a:16:3a:ea:
a3:df:fe:02:1f:a5:fa:ce:36:77:3a:40:cd:f8:cc:
2f:54:e9:3a:9c:5c:32:ad:5f:eb:ec:04:21:18:10:
ef:87:b2:6e:2d:3a:32:9f:b6:c7:c5:af:89:b1:a3:
0d:2b:46:9d:fc:70:fe:16:a2:6f:0c:83:56:7a:27:
e7:45:9e:cf:6c:a4:15:3b:11:ae:9e:f9:88:d9:ce:
ea:ba:74:08:dd:1e:d8:5a:63:d8:24:d1:5c:a0:89:
52:4d:ac:b4:5f:16:94:2a:be:96:b9:21:71:21:5e:
d1:d9:6c:fa:d7:fe:72:de:42:68:4a:0c:1f:a1:74:
c4:2f:ad:6b:b1:f7:38:d8:c6:4f:57:92:97:12:58:
f8:24:88:2c:7d:7d:74:2d:26:2f:8b:40:f9:68:d4:
e2:36:2c:e0:0c:83:71:88:a0:4e:34:ab:d8:a4:78:
9c:3f:15:82:fb:b8:b5:2a:b9:2e:31:fa:eb:6c:f8:
db:98:8c:97:ea:ec:ec:ad:03:fd:51:82:73:e2:3d:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:FB:AA:3D:7F:DD:5F:EC:A7:7F:FC:7B:C8:2E:6C:86:46:05:A7
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e32342e302f32322d3234203d3e20323035323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
57:7f:f9:80:17:54:20:95:78:bc:47:50:1c:f8:15:5f:8a:e6:
41:54:c1:a3:7f:89:0f:48:74:f8:3e:8c:d2:81:99:77:0e:77:
3d:ab:b8:c7:18:f1:47:c0:e3:c7:29:8b:1a:c5:c1:2e:98:c2:
5d:4c:61:ef:68:bc:3e:1e:7c:66:65:0f:03:b2:e6:93:4c:4c:
a1:f1:7d:a9:0e:31:cf:bf:c8:0f:d3:dc:4d:46:28:1e:78:aa:
01:29:c9:c7:ec:ef:66:73:f2:ab:ce:f5:f5:56:02:65:6a:55:
a7:23:e5:59:23:11:84:4e:8a:d4:d0:e7:68:8a:e8:cd:75:fd:
c6:3e:38:63:e3:48:80:e0:15:17:59:50:ce:ae:d4:48:1b:81:
14:36:55:77:8e:2f:81:92:52:70:f5:68:10:82:5c:fa:60:d1:
df:0a:ce:cf:b1:a7:67:26:38:90:79:e9:0d:49:1c:36:72:97:
fd:ac:ad:95:14:dd:af:1d:00:7b:98:8d:34:b7:a1:69:84:cd:
56:d0:b6:c3:2c:a9:47:b0:cf:51:d6:28:dd:02:33:8d:fc:03:
38:ed:c3:60:12:a0:cf:98:3a:9a:ee:c9:00:cf:ac:ce:60:17:
18:52:e6:71:b6:a9:f7:1f:b9:ed:27:1a:46:00:9d:be:81:cb:
80:f9:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org