Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
File: 33312e362e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HXzOUnxs5XJZaDM/r2PmgXVcwaROEpavR2o0pu4MHdQ=
Subject key identifier: 73:74:77:95:B4:0C:61:79:71:03:87:AC:40:F5:5F:64:AB:D3:B4:EE
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 286CCAC10B921A442D68F348374AB1100E872127
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 11:55:43 +0000
ROA not before: Thu 04 Apr 2024 11:50:43 +0000
ROA not after: Thu 03 Apr 2025 11:55:43 +0000
asID: 834
IP address blocks: 31.6.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 13:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6c:ca:c1:0b:92:1a:44:2d:68:f3:48:37:4a:b1:10:0e:87:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 4 11:50:43 2024 GMT
Not After : Apr 3 11:55:43 2025 GMT
Subject: CN=73747795B40C6179710387AC40F55F64ABD3B4EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:73:02:56:4b:63:db:18:e9:e8:63:d8:50:
04:07:58:95:64:cf:93:83:a3:a9:af:00:ec:b3:07:
e4:e1:0d:5f:e1:b4:01:39:32:eb:f0:35:64:d6:c7:
43:75:80:91:2d:59:ae:37:46:6a:d3:9e:49:60:dc:
7f:05:8f:76:29:81:e0:a8:e9:bb:42:a3:fd:46:84:
13:35:c3:e9:74:21:24:f9:05:80:f2:d2:d4:0f:87:
e8:d3:6e:42:57:40:62:d8:f9:31:fa:47:01:78:f4:
d1:1a:12:d2:63:2e:cb:1c:e7:0b:4c:5f:aa:1f:ed:
22:8e:ee:3d:ae:39:6d:c4:5c:a5:25:a2:a4:a5:74:
31:a6:1c:f2:ce:26:2c:07:76:28:e9:3f:86:f3:0c:
88:f7:a3:fe:d2:fe:c4:e5:3d:35:98:2e:a5:98:58:
f0:fc:19:30:a4:1a:bf:90:66:cd:24:12:a5:29:dd:
19:bf:f3:47:83:b3:06:66:ba:07:c5:23:bf:0f:5c:
65:f0:92:06:8c:65:20:35:47:b0:8f:cc:f1:fb:3a:
8a:94:9a:a1:0c:33:98:23:48:68:78:9f:d7:dd:a1:
64:a8:88:b9:c4:62:70:c3:36:ac:04:d8:bb:3d:15:
49:aa:bd:16:26:71:5a:e6:0b:a3:60:e1:0a:76:12:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:74:77:95:B4:0C:61:79:71:03:87:AC:40:F5:5F:64:AB:D3:B4:EE
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.15.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ea:85:9c:4d:2b:4a:e7:0e:31:09:58:da:1c:3e:1a:96:5f:
99:b7:68:6b:d7:14:13:48:5a:32:e7:d6:32:4f:db:52:1b:c9:
d3:0a:7e:ed:ff:46:00:0c:78:03:7c:34:cf:a4:7b:d5:0e:c1:
d6:6f:83:4f:95:a6:b1:16:28:75:88:cf:57:99:f2:db:f5:71:
37:3d:ec:80:b1:d7:bf:39:aa:f7:45:48:56:87:47:d2:13:07:
76:ab:d9:a0:bc:6b:4f:cb:5f:e0:77:49:ca:d2:b3:a6:02:fa:
60:ea:8b:ef:7d:8d:7f:c5:51:29:e4:e0:82:0f:25:96:f6:c4:
5c:ee:d2:4e:5d:bd:9e:3c:f6:0e:6e:e9:77:72:f3:01:b4:46:
de:a9:72:08:40:f6:46:23:bb:58:1a:73:d2:f1:6a:f5:83:fc:
c9:20:18:36:93:21:0a:01:59:40:f9:15:62:80:c0:05:86:15:
63:e4:50:f8:20:a7:c0:94:ef:f9:53:0e:aa:2d:f0:8e:35:3e:
d6:9b:ce:bc:7c:44:1c:59:40:6c:1f:0e:e0:cd:19:a0:b9:ad:
20:0c:9e:b5:ab:7e:20:b4:44:c4:99:43:cf:47:c1:61:f6:b7:
26:34:94:12:d3:93:95:b0:49:86:43:3f:db:0b:27:ec:ee:bc:
7e:46:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 16:34:37 2024 by rpki-client on console.sobornost.net