Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e203439393939.roa
File: 33312e362e34352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 2wdvATb4qGQoS73yRQMc1HG6seWleSiVU3erW9Emv0U=
Subject key identifier: 8F:B7:24:A0:FC:A1:32:A7:8B:68:F7:D6:7A:5A:BF:F1:E7:75:96:3F
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 2E943331FE7CEF8C8C9B091E059744AD107497A3
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e203439393939.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 49999
IP address blocks: 31.6.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:94:33:31:fe:7c:ef:8c:8c:9b:09:1e:05:97:44:ad:10:74:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=8FB724A0FCA132A78B68F7D67A5ABFF1E775963F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:d0:1b:2a:8d:d6:2b:0c:46:7a:7c:6f:35:
d2:2f:c3:75:fe:63:e9:9e:42:ab:a7:af:08:d0:27:
d5:99:80:74:e0:5d:08:5d:75:d1:87:58:e2:8c:17:
33:39:61:38:16:e2:35:84:39:8a:bb:53:85:38:e3:
c4:37:85:5f:aa:92:12:b4:44:ee:e6:d9:55:4c:ef:
bd:ef:17:6c:1c:56:de:52:6c:b5:a0:16:68:d9:08:
43:29:1d:e2:27:af:43:91:5d:ec:65:f9:38:bb:d1:
fc:c3:c9:79:8e:fa:78:29:85:03:c9:4c:ce:05:3b:
44:fa:43:f9:61:76:cb:eb:2a:e7:aa:53:f6:23:9d:
0d:9b:72:f3:37:f1:ea:49:4d:16:76:45:60:bf:eb:
99:a2:ec:fc:ed:a0:86:2a:22:45:91:ca:bd:4a:2f:
63:c3:2a:0f:b1:1e:99:75:d1:ae:f8:72:6f:c8:c2:
8a:4c:5a:a3:56:15:dc:01:f2:6e:3c:89:49:1e:cd:
f1:a6:3a:83:cd:30:ad:c4:a6:a5:5b:62:de:b9:df:
43:d8:41:b8:e1:fb:a3:d1:88:18:f9:6b:ad:dc:c3:
80:aa:bb:23:66:6c:81:ea:2f:8b:0e:66:5e:47:14:
e9:f5:60:82:42:5d:d8:fb:bc:6f:b0:2d:eb:7d:92:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B7:24:A0:FC:A1:32:A7:8B:68:F7:D6:7A:5A:BF:F1:E7:75:96:3F
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
07:12:72:a3:fd:a9:25:66:0a:7f:91:8b:7c:c3:fa:0a:7c:85:
32:c5:9a:da:8e:a8:7c:cc:ec:c8:8f:22:be:8e:e7:63:50:e7:
26:2a:3d:93:1f:c9:b0:7c:5f:89:3c:08:78:17:d7:e1:7b:8d:
04:80:9e:31:13:01:1e:5b:96:f0:c3:4b:73:1c:77:99:2b:57:
6d:01:70:5b:7b:08:5a:eb:fb:9c:e7:8c:c0:ad:ef:84:ea:2b:
9a:99:1a:58:2e:40:7e:b8:52:7d:42:d7:e9:a2:2f:97:94:62:
4e:ec:4a:90:ad:26:99:77:a8:e8:35:20:0d:b2:13:1b:b2:ae:
ea:9d:ab:44:66:11:36:94:86:ae:29:7d:3b:1c:28:22:d8:56:
83:e4:37:68:92:04:92:09:41:d8:aa:b0:d2:96:75:43:6c:89:
ba:09:21:60:61:38:d9:75:70:34:6d:75:7b:6f:d5:bd:77:4a:
47:7c:cf:5b:2f:d9:4d:2f:be:e9:51:3e:ac:f2:e4:5b:88:2a:
3c:50:94:b9:d3:8a:dc:60:dc:af:8b:4a:3c:94:c8:35:7c:a4:
90:75:2c:62:51:10:a8:f8:6b:f0:7e:39:e7:20:d6:8a:82:b2:
98:4f:22:32:5e:57:9a:ba:90:be:45:fa:ec:11:ff:71:a6:73:
4d:1c:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org