Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32332d3234203d3e20383334.roa
File: 33312e362e35362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 6YS5VPZLcgjnrHUcBu5cn7LIMtjbkIl0xhEnwVLAons=
Subject key identifier: 7D:8B:72:5E:EB:34:98:50:B5:5C:74:BB:7C:AD:B2:BD:97:08:C7:39
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 15A747FF0D99CD6D8B9D3946B915E1FF1609D5C7
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:21 +0000
ROA not before: Mon 02 Oct 2023 05:15:21 +0000
ROA not after: Mon 30 Sep 2024 05:20:21 +0000
asID: 834
IP address blocks: 31.6.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a7:47:ff:0d:99:cd:6d:8b:9d:39:46:b9:15:e1:ff:16:09:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:21 2023 GMT
Not After : Sep 30 05:20:21 2024 GMT
Subject: CN=7D8B725EEB349850B55C74BB7CADB2BD9708C739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:11:45:cc:b2:e8:22:64:ea:fe:1f:49:81:
c9:67:9c:bc:1b:96:05:1a:6c:a1:6d:63:c2:cc:cd:
46:f6:a7:ab:f4:df:6d:75:80:25:2d:a0:4f:4e:9e:
cc:bd:43:f8:96:3c:2e:f3:25:83:92:a7:11:cb:d5:
c1:4a:2f:dd:83:b6:04:e7:0e:92:fb:25:45:a7:37:
4e:24:85:d1:c1:33:0d:94:fb:2d:12:e0:c8:7e:44:
ba:d5:33:8e:2c:b7:5a:21:10:53:04:79:19:47:e0:
29:35:cc:0f:64:ec:e2:53:cd:f3:7c:c5:9d:e3:52:
4b:15:c7:d4:09:c6:48:24:7c:56:7c:ed:5f:b8:64:
96:71:4f:f2:3e:fc:1f:4b:cf:53:41:5b:7c:d7:ad:
fa:23:da:3f:87:4d:f8:91:ea:dc:f2:a3:62:d5:0d:
e2:12:a5:21:ac:16:c4:4b:de:19:72:0b:51:0f:76:
71:ea:4b:b0:dc:f4:64:3d:9d:a1:15:1f:d6:91:d0:
9b:02:3e:1c:94:bc:b3:66:8b:ae:d1:4c:36:81:3f:
cf:97:41:4e:60:1a:89:f2:40:71:8e:fe:5a:65:7c:
9d:d9:9e:59:8f:f5:9c:d7:30:db:e4:9a:71:3b:70:
17:4f:0f:6b:4f:88:45:33:af:b0:2f:ec:61:5e:c0:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:72:5E:EB:34:98:50:B5:5C:74:BB:7C:AD:B2:BD:97:08:C7:39
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/23
Signature Algorithm: sha256WithRSAEncryption
51:75:30:95:bb:34:42:74:11:45:ee:de:19:05:85:aa:b2:dc:
b5:7a:9d:c5:84:af:a8:da:6b:7b:5c:31:1e:aa:fc:08:24:04:
e0:9a:36:25:f9:5d:90:9f:c8:4a:1d:ad:0d:34:ca:f2:31:70:
9e:54:bb:77:65:dd:35:88:e2:8f:f6:77:e7:c3:77:9d:f7:bd:
a1:7c:df:c7:5b:d2:a6:cf:81:d7:5d:70:44:9d:a0:8b:1d:a3:
2c:6c:e0:7d:88:22:d6:da:be:9d:69:78:60:16:5c:3c:7c:59:
85:ca:3e:de:05:47:e8:88:fc:cd:58:2a:2a:bc:89:d4:50:9d:
c8:3f:cd:ae:b1:ae:49:ff:7f:79:69:2c:af:86:2d:d3:54:74:
51:94:83:09:5a:12:3e:84:e5:09:ff:c5:25:45:d5:69:76:61:
e6:3a:5d:42:39:22:28:85:61:bc:e8:c0:be:37:10:2b:84:84:
10:65:f8:ae:96:b1:5e:c4:b7:cc:0c:74:76:3a:26:b2:9f:9d:
6e:fd:7e:a6:b5:7f:75:26:b4:c9:20:73:92:b1:89:c6:5e:7f:
98:ba:b3:93:64:60:88:b6:f4:9b:1b:f0:53:d0:85:74:91:58:
64:ac:71:15:63:6c:d1:41:75:58:6f:1a:f8:eb:94:cb:ce:6a:
cb:6c:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net