Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
File: 33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: wg6yQ2WoNBw3SPeHkZ4gzKh6t4PeS1vdsWjfwdOpDPc=
Subject key identifier: DF:6D:2B:54:F4:6B:C0:6A:09:8C:56:4D:92:C4:C4:7C:D6:E3:72:D0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7C9C519C45E16513B650A12E107ED345684735CF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
Signing time: Thu 21 Dec 2023 16:14:43 +0000
ROA not before: Thu 21 Dec 2023 16:09:43 +0000
ROA not after: Thu 19 Dec 2024 16:14:43 +0000
asID: 201341
IP address blocks: 31.222.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 09:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9c:51:9c:45:e1:65:13:b6:50:a1:2e:10:7e:d3:45:68:47:35:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 21 16:09:43 2023 GMT
Not After : Dec 19 16:14:43 2024 GMT
Subject: CN=DF6D2B54F46BC06A098C564D92C4C47CD6E372D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:84:f8:7a:db:2d:db:99:44:14:fd:fc:5c:
c1:8b:ee:69:cb:02:f8:c1:73:af:9f:9f:e6:7d:6f:
4c:62:ca:44:8d:3b:4c:e5:eb:84:3c:66:19:7c:34:
f1:b8:0f:a6:5c:fc:7f:73:5f:e0:8d:93:67:be:39:
20:e4:c2:eb:ca:b3:db:84:a3:18:8f:de:7d:73:87:
c1:3a:04:2f:41:5a:80:51:a8:14:20:a5:d2:a7:e6:
01:42:d3:21:e4:49:74:38:d9:b9:e6:af:d9:83:c7:
2a:f7:27:f8:e3:39:13:48:00:05:4a:e7:d1:2d:7b:
d4:6c:71:6f:a2:87:45:a1:d4:1d:2b:96:1a:07:e6:
77:d1:40:28:51:74:9f:8f:ed:16:3a:9f:cf:19:8f:
61:33:4d:60:eb:55:20:7b:8f:c8:39:13:53:7c:04:
f7:5a:8f:40:33:5a:65:91:3f:31:1b:53:df:54:76:
58:c8:93:07:6b:cf:1f:ef:d1:6a:97:a2:61:c9:85:
42:58:2e:33:c2:3d:37:46:45:39:04:a9:da:19:b7:
d3:93:34:66:14:63:8a:fa:32:18:78:92:b4:cd:47:
5c:ea:55:fc:9f:3f:46:6a:56:2e:bd:c2:0c:15:39:
78:19:5f:b9:02:73:4b:14:f5:8f:3b:ea:02:7f:45:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6D:2B:54:F4:6B:C0:6A:09:8C:56:4D:92:C4:C4:7C:D6:E3:72:D0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8a:20:d4:5a:bf:6b:a9:1a:e1:29:f5:7d:97:c1:43:16:e7:
c0:77:1d:27:e5:9a:96:7c:e8:1b:e4:b7:b4:4f:ec:21:77:d4:
6f:f7:19:e2:64:4b:06:c7:b6:1f:1d:19:2d:82:0b:e4:dc:a6:
37:4f:74:8e:b9:22:7b:37:27:4f:93:f7:7d:11:88:05:79:8f:
22:54:36:28:36:de:d3:62:b1:63:ad:48:06:fe:d1:45:99:f9:
15:e9:fa:6a:a2:f1:bb:90:e4:c5:dd:53:8e:64:dc:02:4b:73:
ae:71:5f:41:5e:1b:4b:91:43:3e:01:52:39:e7:bf:19:b8:de:
d1:62:5d:03:17:23:07:d0:00:b6:3e:e9:eb:09:c2:e9:cd:88:
fe:93:35:a4:e3:b7:8b:13:ed:72:c2:d4:fa:ef:d5:4c:04:96:
5d:28:e8:af:55:53:8c:49:e9:e0:2f:54:43:97:e2:4e:db:a6:
e2:65:3b:7f:40:6e:12:a4:b5:30:a0:5c:5f:74:31:78:24:04:
d4:7f:89:55:26:be:aa:08:5a:ad:26:3e:39:ce:62:d4:cd:3d:
d4:92:f2:3c:0d:e6:18:83:76:06:0a:e9:05:b0:42:1e:10:d3:
61:cd:83:9e:0f:33:6c:39:65:67:c9:05:35:5f:15:8b:72:ef:
a2:80:7c:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 21 13:06:05 2024 by rpki-client on console-ams.rpki-client.org