Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36312e302f32342d3234203d3e20323131323337.roa
File: 33312e362e36312e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier: RExrxAxb7x2TjmzrDG2u9vJKP414YOi8e9n1R8cXcZc=
Subject key identifier: 64:9A:C7:0C:E5:8A:2F:3A:CA:C0:83:32:D7:EF:F9:B5:26:66:9E:5B
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 485A8BA31F35554893F4E4FF35A45E5D75C923A6
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36312e302f32342d3234203d3e20323131323337.roa
Signing time: Wed 22 Mar 2023 15:29:48 +0000
ROA not before: Wed 22 Mar 2023 15:24:48 +0000
ROA not after: Wed 20 Mar 2024 15:29:48 +0000
asID: 211237
IP address blocks: 31.6.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5a:8b:a3:1f:35:55:48:93:f4:e4:ff:35:a4:5e:5d:75:c9:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:48 2023 GMT
Not After : Mar 20 15:29:48 2024 GMT
Subject: CN=649AC70CE58A2F3ACAC08332D7EFF9B526669E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:ec:03:28:0f:65:ab:40:10:51:83:75:18:
ac:7c:cd:64:3c:60:38:17:3c:d2:c1:75:08:d8:ee:
8d:85:fb:2a:84:3c:ca:98:21:49:cb:02:f7:d3:c6:
3e:fc:55:40:35:cf:8d:37:35:2d:99:c1:ec:e4:8e:
48:d0:f3:30:7c:47:2c:0f:23:bb:8f:45:b0:0d:01:
49:8b:53:7f:99:5e:86:0c:53:6f:4e:a7:77:47:e3:
19:b9:a6:79:8c:b2:81:b0:22:1a:b1:2a:a1:03:c5:
24:2a:aa:12:f0:b3:ab:1e:7d:95:09:6b:bd:96:94:
07:a6:42:70:38:20:62:2a:79:41:c3:99:df:26:69:
75:d6:e6:b0:ad:c5:54:2f:32:a2:22:b1:bc:81:a2:
56:c1:e7:3b:42:65:13:28:2c:23:76:cb:84:ec:60:
1a:14:70:43:ad:7b:02:4d:df:88:1e:3a:69:ee:50:
11:3b:46:49:6e:16:5a:1c:f8:56:ea:e9:81:e8:a5:
72:30:1c:b4:de:9c:b1:15:92:d5:74:05:f5:c1:bb:
3a:ad:e8:5f:68:d4:16:7c:05:30:ab:c6:39:dd:26:
93:ad:51:27:06:97:0a:b2:49:12:95:7a:6a:63:d5:
74:21:4b:fd:ae:9e:02:6a:93:fa:8d:34:4c:22:57:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:C7:0C:E5:8A:2F:3A:CA:C0:83:32:D7:EF:F9:B5:26:66:9E:5B
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36312e302f32342d3234203d3e20323131323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9e:16:0b:48:3e:40:6c:40:8e:03:f4:7f:8e:1d:47:31:37:
86:57:d3:b2:dc:16:fc:d8:a6:14:e0:37:c3:e6:13:31:51:0e:
a3:a5:c8:3a:ef:44:bf:04:2f:e9:33:84:4d:e3:1a:9a:d8:1a:
22:11:07:a8:04:2e:f4:1e:2d:3f:a2:e4:53:9c:c3:7a:b6:78:
a1:08:30:8d:41:11:b7:ba:cd:b6:43:9c:e0:1d:82:2d:8b:08:
69:ec:99:5b:e5:0e:37:e5:f7:4b:c9:8b:40:e2:dd:43:df:49:
00:9b:a8:34:92:49:ba:59:5c:07:79:7d:fb:6c:07:23:42:77:
d4:8d:1f:67:a5:9a:ef:5f:86:91:c3:65:bd:19:ea:e2:0b:37:
0d:56:ab:5b:e8:c6:3a:c4:e5:0c:2b:81:c8:35:43:c8:08:2c:
b6:3b:ff:98:3c:39:30:41:bd:89:53:17:78:ec:28:7c:0d:e3:
16:f9:80:7f:5c:a4:9e:4d:45:91:ff:9f:35:19:19:41:82:37:
99:8a:d2:fb:0e:3d:71:7b:5c:62:db:17:13:93:ec:05:71:08:
88:ca:f8:4e:52:bb:87:a9:cb:c0:50:5d:0c:4e:1e:18:6e:b2:
da:6f:32:74:69:e1:18:f0:c1:1a:44:71:b7:76:7a:81:39:21:
c0:6f:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org