Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35322e302f32322d3234203d3e20323131393336.roa
File: 33312e362e35322e302f32322d3234203d3e20323131393336.roa (raw, json)
Hash identifier: 5HWFlZ9VLLdxCRr/iQ2Z3wJ3ULduBuL7TpT7aiCYm/A=
Subject key identifier: 07:30:75:46:F5:6D:8C:62:A8:C8:10:84:2B:9B:A4:9B:FE:8A:04:3E
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 3FFB0C8B22ED765026AE817BD84962755800DEA0
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35322e302f32322d3234203d3e20323131393336.roa
Signing time: Wed 22 Mar 2023 15:29:47 +0000
ROA not before: Wed 22 Mar 2023 15:24:47 +0000
ROA not after: Wed 20 Mar 2024 15:29:47 +0000
asID: 211936
IP address blocks: 31.6.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fb:0c:8b:22:ed:76:50:26:ae:81:7b:d8:49:62:75:58:00:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:47 2023 GMT
Not After : Mar 20 15:29:47 2024 GMT
Subject: CN=07307546F56D8C62A8C810842B9BA49BFE8A043E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c6:85:a7:71:f9:fd:d9:f7:f0:10:6b:de:c7:
34:aa:01:3b:24:09:0d:ba:84:dd:6e:2a:ff:38:0f:
c8:5a:8f:ec:d1:a1:40:10:d7:fb:41:b3:b9:75:0c:
30:ee:7c:70:98:b1:b6:69:34:ef:22:39:4a:b2:cc:
d8:a7:61:5f:26:51:71:c6:d0:f2:4c:8a:08:df:57:
0d:92:2b:2b:18:65:6a:de:df:e1:e5:9f:e2:e9:32:
b6:f5:e5:7d:f9:8f:0e:72:c1:c5:1b:15:e7:7f:9e:
31:24:18:8d:05:e7:fb:de:b1:44:b7:65:73:b2:83:
b1:b2:f3:2d:28:2f:a5:e3:77:f8:c3:26:d9:9f:29:
86:77:72:a6:eb:57:d8:2f:73:12:0d:57:9a:4d:c6:
c2:38:e1:d4:ee:b7:8e:34:2b:6a:92:02:c6:4a:f9:
f6:63:8c:17:db:f0:07:c1:79:7c:16:ab:a7:c3:2d:
90:a1:ce:a9:18:be:af:d6:c8:83:f6:89:94:fb:15:
07:e2:aa:e7:20:5c:b4:97:f4:40:62:46:00:d4:21:
41:de:c0:b2:fc:75:35:48:f7:96:df:a6:dd:33:1a:
bb:ad:d4:a6:56:9c:bb:90:ca:3c:d6:b8:47:01:c1:
41:b0:66:2d:80:40:e1:a8:4a:c5:df:6a:ab:19:8e:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:75:46:F5:6D:8C:62:A8:C8:10:84:2B:9B:A4:9B:FE:8A:04:3E
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35322e302f32322d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f1:52:cf:11:a0:fd:7d:9d:7a:ea:26:24:e5:37:0d:d6:77:
26:a7:9b:dd:1c:ca:d2:54:d1:ca:93:73:1f:4b:eb:d7:1e:5a:
39:d1:61:4e:a0:61:ac:f3:ec:8c:dd:61:b7:5a:08:49:23:6f:
6c:6e:8e:18:5e:d1:14:c2:8e:f9:71:3f:91:ab:8f:cd:e2:47:
c3:a2:83:84:69:00:b3:1a:f0:1c:ab:44:b2:79:15:9a:54:ef:
50:40:97:93:63:6a:95:d3:f3:08:8b:00:b8:df:3f:50:f7:99:
c7:61:d6:f5:bb:b6:ac:82:c1:47:71:6f:e8:85:21:53:54:f4:
e9:12:80:e9:7b:b2:ea:00:58:bb:96:fb:88:2d:90:8c:67:73:
52:f6:55:c9:b5:43:f1:b1:b8:4e:8f:2b:ed:24:14:a2:d2:91:
27:4e:65:63:44:c3:00:19:df:b3:cf:d4:9b:da:a1:73:35:53:
98:ec:44:90:fc:6c:43:15:b9:58:48:85:f0:4f:85:b3:f5:a6:
8e:cd:c3:ed:8f:bf:d6:89:c2:d2:e8:ff:82:70:a6:07:dd:91:
9e:9e:9e:e0:b7:e7:dd:6c:6f:3b:fd:80:20:16:df:e2:77:d8:
86:2f:93:ea:34:15:11:2a:99:36:32:f2:fb:f7:70:3a:79:ff:
d3:66:55:8c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUP/sMiyLtdlAmroF72ElidVgA3qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDdaFw0yNDAzMjAxNTI5NDdaMDMxMTAvBgNV
BAMTKDA3MzA3NTQ2RjU2RDhDNjJBOEM4MTA4NDJCOUJBNDlCRkU4QTA0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvxoWncfn92ffwEGvexzSqATsk
CQ26hN1uKv84D8haj+zRoUAQ1/tBs7l1DDDufHCYsbZpNO8iOUqyzNinYV8mUXHG
0PJMigjfVw2SKysYZWre3+Hln+LpMrb15X35jw5ywcUbFed/njEkGI0F5/vesUS3
ZXOyg7Gy8y0oL6Xjd/jDJtmfKYZ3cqbrV9gvcxINV5pNxsI44dTut440K2qSAsZK
+fZjjBfb8AfBeXwWq6fDLZChzqkYvq/WyIP2iZT7FQfiqucgXLSX9EBiRgDUIUHe
wLL8dTVI95bfpt0zGrut1KZWnLuQyjzWuEcBwUGwZi2AQOGoSsXfaqsZju0fAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUBzB1RvVtjGKoyBCEK5ukm/6KBD4wHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTM1MzIyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMxMzEzOTMzMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIfBjQw
DQYJKoZIhvcNAQELBQADggEBAKfxUs8RoP19nXrqJiTlNw3Wdyanm90cytJU0cqT
cx9L69ceWjnRYU6gYazz7IzdYbdaCEkjb2xujhhe0RTCjvlxP5Grj83iR8Oig4Rp
ALMa8ByrRLJ5FZpU71BAl5NjapXT8wiLALjfP1D3mcdh1vW7tqyCwUdxb+iFIVNU
9OkSgOl7suoAWLuW+4gtkIxnc1L2Vcm1Q/GxuE6PK+0kFKLSkSdOZWNEwwAZ37PP
1JvaoXM1U5jsRJD8bEMVuVhIhfBPhbP1po7Nw+2Pv9aJwtLo/4JwpgfdkZ6enuC3
591sbzv9gCAW3+J32IYvk+o0FREqmTYy8vv3cDp5/9NmVYw=
-----END CERTIFICATE-----
Generated at Tue Aug 8 00:29:06 2023 by rpki-client on console-ams.rpki-client.org