Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
File: 3134392e36322e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: a0gqOXR/dfX0Cm0jRJwUpcBm/v1VK2svhPVnmsWK1Ok=
Subject key identifier: 70:89:70:D9:54:18:8D:E6:90:CC:AC:B6:DD:88:CC:97:11:28:1B:B6
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 261AB6CDC9DE53842C1BD3C5F6A35CABD7D5F187
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 06:45:26 +0000
ROA not before: Sun 02 Jul 2023 06:40:26 +0000
ROA not after: Sun 30 Jun 2024 06:45:26 +0000
asID: 834
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 17:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1a:b6:cd:c9:de:53:84:2c:1b:d3:c5:f6:a3:5c:ab:d7:d5:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jul 2 06:40:26 2023 GMT
Not After : Jun 30 06:45:26 2024 GMT
Subject: CN=708970D954188DE690CCACB6DD88CC9711281BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:fb:ce:6f:bc:96:d0:7e:44:29:63:8f:23:
6a:e0:4b:4f:f3:b4:a5:5c:40:e9:03:29:6e:f7:c3:
87:38:42:6b:93:4e:6d:17:d9:c2:8d:d1:a7:19:6a:
87:a6:65:2a:6a:82:1a:bb:09:3d:09:b1:51:db:26:
74:9f:41:4f:b5:ec:c2:2c:0d:92:82:1e:5e:8c:ff:
1b:8f:ea:17:22:db:a3:e9:72:55:36:27:e4:de:7f:
98:90:d8:83:45:98:03:99:fd:0d:fe:02:65:6e:4c:
5c:8b:c9:b9:bc:07:1c:f5:7c:4f:55:42:ef:a9:ca:
bd:29:cb:95:08:3b:d5:20:64:9d:74:83:c2:32:a2:
f9:2f:a2:79:e1:e0:e6:4d:d7:53:62:f3:e6:66:25:
65:a9:41:17:dd:c9:c7:41:b0:99:6f:7f:89:e3:c2:
4f:3c:c1:3d:82:ee:de:69:77:d9:1e:0a:17:c1:ed:
07:05:4d:5f:11:10:74:30:20:28:f0:64:b7:e4:94:
ea:3a:9c:d2:fb:61:6f:53:3e:b9:be:c8:bd:7b:ee:
bd:4a:be:d8:a4:0c:f8:34:a8:69:9e:b8:e0:67:c9:
37:5c:fa:c8:9d:58:f4:84:b0:4b:f9:78:23:77:0f:
82:17:82:c2:5c:c9:88:3f:36:38:e1:f1:58:18:b5:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:70:D9:54:18:8D:E6:90:CC:AC:B6:DD:88:CC:97:11:28:1B:B6
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
43:13:41:75:f9:ca:16:8e:32:bf:0f:f4:9d:70:d2:74:23:2f:
7a:75:74:b8:c9:0f:48:de:45:2a:b7:db:61:78:37:a6:9b:58:
a0:4e:e4:68:57:48:bf:eb:a9:0d:ee:67:a3:8a:33:87:db:7b:
78:e2:84:cf:50:f5:2c:2e:a8:4b:8f:a1:fc:c0:67:42:09:7e:
c2:c2:52:0b:84:ca:4e:94:f2:1b:4c:ad:47:23:32:46:57:1f:
f5:d9:53:0a:11:ec:1f:7b:e2:11:ae:4d:28:80:fc:4a:55:f6:
e8:9a:9f:f2:01:e7:e1:d0:44:92:38:cc:27:78:cd:7a:ee:37:
bd:d1:da:40:ac:bb:6a:a1:72:ab:b7:e7:cb:61:7b:0c:ea:2a:
29:7c:1b:a2:9c:60:13:e7:47:14:8c:f9:45:eb:c8:e1:20:95:
61:b3:00:4b:71:0d:fa:a7:87:97:99:5d:58:54:83:eb:8c:f3:
8a:d2:62:e4:cf:b2:01:af:79:4b:62:26:05:80:0e:cf:30:f0:
20:16:8f:ae:a6:64:48:54:10:79:25:5b:53:9c:0f:de:1d:4f:
4c:28:57:aa:78:68:2e:47:61:10:11:0e:82:93:d1:17:32:6a:
ff:d6:ff:b8:0f:15:d8:29:b9:57:b9:20:dd:04:20:e6:8d:d7:
75:bc:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org