Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e203631313338.roa
File: 33312e362e34382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: w9pmtXFaTFoRruj6ivSzukHdQuxoJXblwNZjU9Ir14o=
Subject key identifier: 0D:30:80:F7:59:B3:66:1E:52:BF:EF:8B:2A:4E:51:EE:21:75:9A:69
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 70FA4D63BC1D06DDCE8DA373563A62FB4874C63A
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e203631313338.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 61138
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fa:4d:63:bc:1d:06:dd:ce:8d:a3:73:56:3a:62:fb:48:74:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=0D3080F759B3661E52BFEF8B2A4E51EE21759A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:01:f8:ee:03:45:9e:c2:32:de:b4:4a:c7:
d4:a6:ce:aa:23:78:78:da:2c:a5:e0:3c:dd:6c:1d:
23:07:dd:78:38:75:2a:05:78:86:86:8d:50:12:19:
a4:32:d9:ca:cc:1b:93:7d:e6:53:62:78:9c:66:90:
90:db:04:e5:fc:e4:e9:03:97:23:30:84:fe:fb:0a:
65:a3:4f:a3:5c:34:7f:17:88:07:7e:fe:b1:93:59:
e1:17:d5:1e:a3:cf:fc:ec:b2:2f:eb:f1:46:02:40:
f4:56:ea:1b:97:e7:3c:02:ee:11:a6:be:b9:77:1f:
d0:8a:eb:2f:c2:b4:08:94:41:b4:22:7f:19:ce:2e:
37:9e:f9:bb:67:b6:16:a3:21:5b:77:84:14:a4:63:
24:e3:e2:a6:24:82:0e:37:eb:10:6f:8a:92:ba:6e:
25:5e:ee:65:f9:56:e9:11:2a:54:04:38:c6:53:23:
67:64:42:84:cb:ab:24:29:62:58:52:61:36:b7:a8:
db:2d:aa:ec:22:76:bf:95:41:49:1e:7b:31:fa:00:
55:54:58:7a:f8:fb:32:bc:88:87:a9:1c:9c:f3:ba:
13:3a:03:f5:fd:97:01:6c:86:65:f0:2d:89:88:e1:
45:98:71:6a:69:3b:0c:8f:84:09:07:09:30:f3:83:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:80:F7:59:B3:66:1E:52:BF:EF:8B:2A:4E:51:EE:21:75:9A:69
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
07:16:8a:11:ac:59:59:77:b3:f0:83:e6:fc:cb:bb:b8:eb:42:
08:72:fa:f0:ef:d4:06:33:64:7c:8f:81:55:1c:53:f3:78:7c:
94:02:6b:5b:84:c4:09:3e:37:de:ef:24:e6:94:67:fc:39:af:
3b:6d:8e:c1:42:04:c9:c4:e0:23:21:50:bd:ca:94:d5:3e:fe:
85:5c:e7:c7:47:da:cd:7f:99:26:5b:1f:74:1f:19:6e:15:5b:
78:67:b4:d4:06:0f:16:ec:fb:38:ac:0a:72:80:4f:d6:3c:ad:
7b:97:7f:18:24:74:79:3e:5a:5d:83:3f:90:68:1d:f0:e7:76:
48:a2:c4:8a:8b:b9:a5:ca:03:ff:af:41:78:19:58:8a:cc:9d:
32:a9:8d:f6:0b:51:6f:92:c4:9d:3b:95:16:0e:40:5b:90:27:
28:64:30:a1:89:c0:a5:4d:c8:7c:83:38:72:c3:2b:f9:3c:0c:
27:a2:8f:8e:bd:32:33:61:42:f7:08:dd:cc:29:38:8d:b5:1e:
19:dc:c9:5a:b8:a2:f7:17:a4:c8:15:75:45:27:51:25:01:ad:
0a:d6:f8:c3:c1:21:f7:b6:a6:7a:2e:ac:0c:65:89:f4:da:2a:
72:cb:da:0f:73:6a:16:fc:d9:f3:9f:31:41:0a:e4:76:50:b7:
51:07:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org