Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/33312e32342e38342e302f32342d3234203d3e20323033303631.roa
File: 33312e32342e38342e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: dKutH/o7q5drCDrlRsKKb1KrsuCauvqKAsVJTdrso4k=
Subject key identifier: 3A:99:25:61:F7:11:F5:83:C9:A5:D1:50:07:A4:53:17:85:CA:2F:5F
Certificate issuer: /CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Certificate serial: 610EA039CFFB2D4EF7228F4C1AA5B5BCCC803F02
Authority key identifier: 5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/33312e32342e38342e302f32342d3234203d3e20323033303631.roa
Signing time: Mon 26 Feb 2024 08:53:34 +0000
ROA not before: Mon 26 Feb 2024 08:48:34 +0000
ROA not after: Mon 24 Feb 2025 08:53:34 +0000
asID: 203061
IP address blocks: 31.24.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 09:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0e:a0:39:cf:fb:2d:4e:f7:22:8f:4c:1a:a5:b5:bc:cc:80:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Validity
Not Before: Feb 26 08:48:34 2024 GMT
Not After : Feb 24 08:53:34 2025 GMT
Subject: CN=3A992561F711F583C9A5D15007A4531785CA2F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:22:f6:a1:17:99:15:67:13:a2:7c:a5:28:
2a:53:ef:93:4f:2b:b0:ae:30:5e:5b:79:fa:27:b4:
cf:78:2c:48:4b:01:4d:d0:78:35:89:6a:2c:95:9d:
0e:6d:70:d0:91:16:3e:0e:28:d9:63:08:15:fe:1c:
96:35:c6:27:7a:fb:a2:01:eb:a2:69:be:1e:00:72:
83:35:0a:62:d3:4f:ca:7b:df:af:79:49:6c:54:97:
6d:28:a6:cf:1e:bc:dd:f0:5e:05:6a:42:eb:12:d1:
bc:75:2e:53:ce:cf:f5:0b:39:53:c5:92:14:a6:f2:
33:4a:00:22:6b:9d:e6:75:30:e6:50:85:dd:b3:db:
a6:02:b4:31:f5:65:08:cc:c4:f1:ba:04:7e:81:60:
3c:85:f7:3c:2f:39:6a:89:a2:6e:0e:88:6d:6c:9e:
02:7e:05:bd:d4:e3:52:94:f4:03:84:20:f0:11:b4:
94:5e:80:6e:ce:5d:b4:5c:fc:fb:ee:18:de:f1:40:
75:41:32:72:fd:2b:9b:a2:51:3a:0e:71:8e:cc:a0:
8e:f2:8a:86:75:ed:50:de:39:05:1e:dd:99:8e:f7:
b1:56:49:14:05:52:84:4a:39:4e:cf:fc:0f:46:cf:
bd:63:88:71:76:4a:4b:d9:7d:a6:76:db:74:6f:3a:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:25:61:F7:11:F5:83:C9:A5:D1:50:07:A4:53:17:85:CA:2F:5F
X509v3 Authority Key Identifier:
keyid:5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/33312e32342e38342e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b0:9c:b0:ab:da:09:82:95:f2:dd:8c:9e:e9:5a:d0:ef:75:
ce:76:ec:a3:b7:34:37:ac:c9:73:cb:f5:c4:99:e5:73:a5:8b:
fb:77:4f:ac:a5:70:2c:ec:43:87:2d:e9:17:b9:32:f3:c6:38:
ad:83:e1:a7:2d:df:58:bd:ef:6a:49:03:49:b5:ed:17:a1:fb:
c9:88:09:f6:ad:3e:6f:4b:a1:18:25:63:54:68:6a:f9:87:f3:
e6:53:fb:54:cc:a2:b3:07:45:7f:81:1f:a4:a5:cb:bd:ba:21:
3c:c2:25:44:dd:61:ea:23:a2:4d:3d:5d:7b:aa:81:eb:bf:ad:
bf:62:b2:8a:80:0c:f9:03:0e:c2:5a:76:7f:5a:c4:45:b1:b2:
5f:fa:98:1a:5d:a6:d6:73:b3:7a:47:29:06:3e:65:65:cc:e5:
b5:f5:9d:6d:82:b4:fe:1a:aa:c9:a4:49:3b:9e:30:24:ed:82:
dd:de:b6:2b:d1:fd:98:bd:6b:65:ff:40:dd:4e:c2:8d:39:24:
7d:37:39:41:45:54:fd:9f:37:3d:51:c7:29:fd:c2:60:3d:cc:
62:81:58:67:88:13:d4:39:33:03:80:b5:b1:b1:3e:99:95:5f:
a9:58:a7:4d:b6:f0:09:31:3c:28:1a:b7:c8:b3:cd:44:40:20:
f7:ef:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org