Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
File: 33312e362e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: S9Pa9KKFSijqJp1sHxafKJ3Wn8q8v4MhNDu77S5yUPc=
Subject key identifier: D5:13:3B:ED:6A:26:E7:35:74:D1:16:FD:D7:4B:64:B1:B7:9D:5C:8D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4C07CE24FAD8C7CC7695105D2E773A9E0A116C6D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:40 +0000
ROA not before: Mon 02 Oct 2023 05:15:40 +0000
ROA not after: Mon 30 Sep 2024 05:20:40 +0000
asID: 834
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:07:ce:24:fa:d8:c7:cc:76:95:10:5d:2e:77:3a:9e:0a:11:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:40 2023 GMT
Not After : Sep 30 05:20:40 2024 GMT
Subject: CN=D5133BED6A26E73574D116FDD74B64B1B79D5C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:81:5d:7c:51:e1:89:5f:11:5b:4e:76:0f:
44:f1:c2:2d:1e:43:16:1a:c4:af:0e:88:22:60:9a:
70:c1:e6:86:70:ce:3d:66:1b:f9:39:bc:d7:50:8a:
f7:6e:42:22:4a:bc:17:2f:1c:ca:ef:8d:35:08:7d:
23:4b:39:29:79:06:88:5c:6d:62:83:71:60:e8:8f:
b2:0b:e8:8f:77:7d:f6:9f:3a:be:97:13:60:60:14:
d1:31:bc:ea:96:b0:62:5a:65:5b:76:e0:00:97:ea:
29:41:64:1a:5e:2d:af:b5:58:ea:41:9f:1f:45:88:
0f:1d:19:f4:fe:40:bb:a0:3f:d9:a1:a6:d5:07:66:
50:bd:e0:a0:e3:23:b4:9f:69:0f:df:a9:a7:94:a2:
33:0f:18:67:03:f9:1a:05:c4:61:80:32:11:97:bf:
2c:29:e2:b2:e7:d1:14:48:9b:72:6f:33:2b:a1:cf:
4e:4b:32:a5:ab:03:76:eb:fa:e7:ac:08:18:c6:6b:
36:64:03:0b:36:3a:9a:0e:09:18:bc:2e:2c:50:3f:
11:c7:d4:e5:c8:eb:a5:8e:1b:ad:9f:6e:3d:5d:ef:
0d:ea:ef:ad:b9:a9:0c:9f:2a:51:38:33:1a:72:da:
e6:45:51:08:8b:56:a4:11:b4:a5:fc:26:06:e8:b3:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:3B:ED:6A:26:E7:35:74:D1:16:FD:D7:4B:64:B1:B7:9D:5C:8D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:32:e5:08:17:bd:8c:63:97:84:c0:27:7d:57:28:fb:e8:4f:
40:ed:d0:a5:ef:2b:6a:12:26:f3:33:eb:1e:d9:4b:fe:a5:73:
fb:52:3b:34:1d:d7:1b:a5:03:d0:7e:05:ba:54:b1:6f:70:84:
b4:ae:6c:82:0d:96:d2:07:16:b9:aa:2d:d5:bc:d1:f6:9a:11:
18:f7:14:ac:f5:74:e2:86:75:86:df:4a:c0:6f:cc:76:31:7f:
4f:61:79:6c:bf:e4:63:ef:b9:dc:c9:4a:28:1e:66:22:ff:95:
cf:64:2d:7c:ca:66:8c:5f:71:6a:fd:02:9b:16:13:68:2f:11:
fb:71:db:92:0c:3c:0e:1b:a9:08:e1:89:f8:b3:eb:9b:33:c0:
bc:8a:6a:52:51:3f:48:80:d7:db:39:5e:e3:08:11:ff:45:96:
6c:fe:2f:ad:94:bc:c6:f9:05:d2:8a:67:e7:96:32:98:91:4e:
bb:f8:8e:27:72:87:1f:06:7a:31:15:eb:7b:34:c5:9c:a0:82:
a9:c7:13:5e:a1:31:6f:bb:b4:76:a1:3c:7d:19:8c:d7:4e:e7:
53:ba:dd:ad:82:a1:a4:8e:14:6c:be:c6:36:fb:ac:b1:8a:49:
c3:cf:48:ba:d0:11:e2:47:bc:20:ba:0c:32:46:c8:f8:cb:8c:
36:cb:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net