Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36362e302f32342d3234203d3e2030.roa
File: 33312e3138372e36362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: hFdeVHdbZgjEt8FXGjcjxl2EwqHvBpqEKJhgeIgkD7Q=
Subject key identifier: D4:EA:A7:15:8C:1B:F9:E5:5C:0D:2D:AC:A6:AE:53:DC:42:02:61:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06498DE4DB4505A8E8AA953CB39FE6DA612802
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36362e302f32342d3234203d3e2030.roa
Signing time: Sat 25 Nov 2023 08:04:38 +0000
ROA not before: Sat 25 Nov 2023 07:59:38 +0000
ROA not after: Sat 23 Nov 2024 08:04:38 +0000
asID: 0
IP address blocks: 31.187.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:49:8d:e4:db:45:05:a8:e8:aa:95:3c:b3:9f:e6:da:61:28:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 25 07:59:38 2023 GMT
Not After : Nov 23 08:04:38 2024 GMT
Subject: CN=D4EAA7158C1BF9E55C0D2DACA6AE53DC42026189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:a5:ea:0a:30:51:d6:e1:a2:8c:53:b0:f8:
93:b6:1f:69:6d:05:6c:ba:32:69:39:2f:e7:b2:bf:
4d:4e:e6:e4:53:fa:1d:e3:3b:44:6d:bf:8b:ad:78:
99:0b:2a:00:ab:33:0e:29:06:62:27:c3:9e:21:b0:
d6:db:1a:db:0f:3f:1d:35:9c:1e:ea:17:9b:69:59:
7b:1c:9d:8e:a8:88:d8:28:85:7e:9b:6f:ad:f1:0a:
b2:f4:a7:2b:13:f8:b3:cd:bf:25:8c:45:94:8d:85:
eb:ba:cb:7e:06:31:73:74:4e:76:d3:6b:12:6b:bf:
38:98:01:db:8e:4a:05:fd:17:62:d8:94:47:f7:6a:
fc:43:dd:b4:b2:50:18:3e:8c:86:46:ee:c9:49:64:
02:17:97:dd:3f:93:0d:e1:7e:cd:6f:46:af:9d:f9:
ce:d1:23:85:af:cc:37:93:38:21:7d:54:8f:58:fd:
9d:53:10:d6:5c:da:30:b8:90:00:ec:53:c7:ef:cb:
04:de:6f:8e:7c:4d:ed:e8:73:3b:21:61:cc:14:bf:
bc:2f:1b:7f:10:0b:6b:de:fa:b5:98:2c:07:57:b4:
cd:60:08:08:19:83:ca:1c:f8:28:eb:10:7c:7c:07:
b0:ef:69:67:78:d3:f4:53:c9:18:0b:8f:12:b7:1a:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:A7:15:8C:1B:F9:E5:5C:0D:2D:AC:A6:AE:53:DC:42:02:61:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.66.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:51:32:cb:6a:0a:2f:6b:e0:38:89:38:69:27:a8:94:8d:
d1:55:14:b8:83:d0:f2:57:fe:27:92:5b:8a:d7:a9:75:b2:4d:
cf:9d:42:af:5c:58:e7:9a:f0:0a:5c:36:ca:55:e5:ad:e5:4f:
b5:c4:5f:b5:fa:ef:b2:e2:3d:24:d0:c9:00:c5:89:2b:57:f2:
95:63:3a:ea:7a:ee:58:1c:ff:bb:05:1b:43:aa:65:e9:eb:5e:
98:6c:68:8d:af:c0:67:44:f6:06:93:aa:8e:ce:d0:90:91:54:
b8:51:9a:9d:86:21:39:85:bd:d7:8c:dc:cd:e7:36:2e:d3:f3:
a5:3c:7f:c3:27:1a:c6:17:de:fa:b7:09:16:4d:f6:b5:25:5c:
f2:d8:8f:a4:66:d3:17:dc:1b:3f:1f:d0:17:f8:58:e0:ba:83:
d4:37:1f:6e:b1:42:a0:ae:86:b7:9b:33:30:0e:4e:55:cc:c6:
fd:0f:7d:c3:44:87:36:46:92:f9:b3:4f:a4:1d:cf:d8:fe:65:
d1:9e:8b:a6:8e:97:ea:d0:e6:61:0e:37:0e:3f:c1:c7:3f:24:
23:13:92:1f:3a:6e:5e:b2:7b:64:6e:ef:0f:8a:c1:31:30:28:
ce:fc:6b:6c:8d:34:3a:30:b4:c5:05:86:5c:ef:75:dc:21:39:
4d:80:79:b4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgITBkmN5NtFBajoqpU8s5/m2mEoAjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhhYjJkY2MxNjljOTVmMmIxNGRmMzFkZDI0YTFmNjcwMzRl
YTc3NzljMB4XDTIzMTEyNTA3NTkzOFoXDTI0MTEyMzA4MDQzOFowMzExMC8GA1UE
AxMoRDRFQUE3MTU4QzFCRjlFNTVDMEQyREFDQTZBRTUzREM0MjAyNjE4OTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZrpeoKMFHW4aKMU7D4k7YfaW0F
bLoyaTkv57K/TU7m5FP6HeM7RG2/i614mQsqAKszDikGYifDniGw1tsa2w8/HTWc
HuoXm2lZexydjqiI2CiFfptvrfEKsvSnKxP4s82/JYxFlI2F67rLfgYxc3ROdtNr
Emu/OJgB245KBf0XYtiUR/dq/EPdtLJQGD6MhkbuyUlkAheX3T+TDeF+zW9Gr535
ztEjha/MN5M4IX1Uj1j9nVMQ1lzaMLiQAOxTx+/LBN5vjnxN7ehzOyFhzBS/vC8b
fxALa976tZgsB1e0zWAICBmDyhz4KOsQfHwHsO9pZ3jT9FPJGAuPErcan0ECAwEA
AaOCAjMwggIvMB0GA1UdDgQWBBTU6qcVjBv55VwNLaymrlPcQgJhiTAfBgNVHSME
GDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5
YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0QTFGNjcwMzRFQTc3NzlDLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZweVY4ckZOOHgzU1NoOW5BMDZu
ZDV3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02
N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvNC8zMzMxMmUzMTM4MzcyZTM2MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+7QjANBgkqhkiG
9w0BAQsFAAOCAQEAlaxRMstqCi9r4DiJOGknqJSN0VUUuIPQ8lf+J5JbitepdbJN
z51Cr1xY55rwClw2ylXlreVPtcRftfrvsuI9JNDJAMWJK1fylWM66nruWBz/uwUb
Q6pl6etemGxoja/AZ0T2BpOqjs7QkJFUuFGanYYhOYW914zczec2LtPzpTx/wyca
xhfe+rcJFk32tSVc8tiPpGbTF9wbPx/QF/hY4LqD1DcfbrFCoK6Gt5szMA5OVczG
/Q99w0SHNkaS+bNPpB3P2P5l0Z6Lpo6X6tDmYQ43Dj/Bxz8kIxOSHzpuXrJ7ZG7v
D4rBMTAozvxrbI00OjC0xQWGXO913CE5TYB5tA==
-----END CERTIFICATE-----
Generated at Sun Nov 26 21:22:28 2023 by rpki-client on console-ams.rpki-client.org