Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20323037333236.roa
File: 33312e362e34362e302f32332d3234203d3e20323037333236.roa (raw, json)
Hash identifier: Qm2E0NbYMxsYTBMkG25sx/uAy2D6MsF4KRPzVYF0D1k=
Subject key identifier: 16:77:60:AA:08:91:A2:84:04:82:EE:5E:3B:98:29:8F:5B:42:E2:0D
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 05428451E0E8079AACF2D1CFFFEA4AE0D65E1929
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20323037333236.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 207326
IP address blocks: 31.6.46.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:42:84:51:e0:e8:07:9a:ac:f2:d1:cf:ff:ea:4a:e0:d6:5e:19:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=167760AA0891A2840482EE5E3B98298F5B42E20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:a3:cf:de:61:57:87:1a:77:b1:82:46:b0:
ee:a0:53:54:cb:95:c0:79:8f:ee:a2:10:32:ac:8b:
a0:a8:d6:9d:a4:a4:b2:b6:ad:67:b6:42:56:c3:bf:
5c:af:07:d9:f5:12:10:31:08:e1:6f:d9:b1:c8:e1:
c1:1e:42:3e:9c:09:29:ba:e4:fc:81:bd:38:1d:fe:
16:41:b6:fb:8b:56:af:6d:a8:27:73:63:6c:23:45:
84:1d:ef:3d:b7:2c:be:87:99:71:aa:08:aa:2c:32:
cc:3d:21:35:5e:08:a3:0a:16:40:ba:b5:c3:eb:68:
69:a0:56:e6:30:a2:e0:b1:e4:7a:95:54:1e:3e:56:
97:66:d3:e8:0a:0e:ed:c9:e2:12:0c:b9:89:df:82:
33:ed:3d:ce:d1:0e:34:fb:f8:90:c8:96:d3:58:14:
c1:54:e9:96:8e:38:31:0f:e2:83:cc:b4:b2:d6:99:
98:2a:bd:5f:53:df:b0:36:3b:4d:b4:c1:51:34:f2:
01:c5:48:d4:27:d1:73:4f:ca:35:23:d7:19:6d:6f:
f4:54:bd:af:8d:2c:29:0c:c6:9a:ca:18:6b:cc:d4:
21:0e:1d:b0:aa:b2:ff:0e:c0:22:de:1e:e5:c9:15:
e8:87:9a:d6:a3:77:ec:9a:89:c9:ec:40:7c:37:68:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:60:AA:08:91:A2:84:04:82:EE:5E:3B:98:29:8F:5B:42:E2:0D
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20323037333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:55:b7:b5:69:11:8b:bf:e5:d3:aa:b9:c1:85:b7:ed:87:83:
9b:46:1f:39:fc:0c:42:9c:68:4b:31:1d:51:2e:5d:74:33:7e:
0a:4d:30:cb:7e:bb:8a:8f:7a:c3:c6:ae:e9:bb:6d:ec:44:58:
3d:92:6a:65:fe:ff:c0:7b:ea:a1:64:f6:bc:fb:85:3f:3e:4c:
41:a2:c5:d4:99:7a:30:8f:33:1c:9b:2c:03:db:4f:28:88:da:
ef:39:76:57:bc:bf:38:0d:aa:56:69:ad:4f:f0:c4:89:c6:57:
26:44:67:45:82:d4:81:5d:1e:c4:45:73:6a:6e:ec:a1:a7:2d:
12:df:63:67:39:15:4c:7d:84:59:43:8c:f0:e6:1f:0f:7d:25:
61:ba:8e:94:1e:ff:30:48:bd:6e:a4:c3:0c:11:95:ea:f5:16:
76:d9:f0:57:ce:e5:a3:73:3b:f4:cc:53:00:18:2c:40:b4:4b:
90:8b:ca:5e:e6:bc:d8:a3:b7:7b:47:f7:09:3b:c0:e0:7e:fc:
95:f1:b5:cb:40:16:87:ea:b7:ce:a6:1e:e0:91:88:3c:49:ad:
98:0d:fc:7c:be:f7:ea:98:b2:8e:a3:a7:5f:6f:15:72:54:6f:
cc:ae:27:c7:86:65:c8:1a:4f:25:2e:42:4b:7f:d3:19:d6:1e:
9f:ac:7a:37
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUBUKEUeDoB5qs8tHP/+pK4NZeGSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDZaFw0yNDAzMjAxNTI5NDZaMDMxMTAvBgNV
BAMTKDE2Nzc2MEFBMDg5MUEyODQwNDgyRUU1RTNCOTgyOThGNUI0MkUyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWqPP3mFXhxp3sYJGsO6gU1TL
lcB5j+6iEDKsi6Co1p2kpLK2rWe2QlbDv1yvB9n1EhAxCOFv2bHI4cEeQj6cCSm6
5PyBvTgd/hZBtvuLVq9tqCdzY2wjRYQd7z23LL6HmXGqCKosMsw9ITVeCKMKFkC6
tcPraGmgVuYwouCx5HqVVB4+Vpdm0+gKDu3J4hIMuYnfgjPtPc7RDjT7+JDIltNY
FMFU6ZaOODEP4oPMtLLWmZgqvV9T37A2O020wVE08gHFSNQn0XNPyjUj1xltb/RU
va+NLCkMxprKGGvM1CEOHbCqsv8OwCLeHuXJFeiHmtajd+yaicnsQHw3aEtTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUFndgqgiRooQEgu5eO5gpj1tC4g0wHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTM0MzYyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMwMzczMzMyMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBi4w
DQYJKoZIhvcNAQELBQADggEBAB5Vt7VpEYu/5dOqucGFt+2Hg5tGHzn8DEKcaEsx
HVEuXXQzfgpNMMt+u4qPesPGrum7bexEWD2SamX+/8B76qFk9rz7hT8+TEGixdSZ
ejCPMxybLAPbTyiI2u85dle8vzgNqlZprU/wxInGVyZEZ0WC1IFdHsRFc2pu7KGn
LRLfY2c5FUx9hFlDjPDmHw99JWG6jpQe/zBIvW6kwwwRler1FnbZ8FfO5aNzO/TM
UwAYLEC0S5CLyl7mvNijt3tH9wk7wOB+/JXxtctAFofqt86mHuCRiDxJrZgN/Hy+
9+qYso6jp19vFXJUb8yuJ8eGZcgaTyUuQkt/0xnWHp+sejc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org