Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203631333137.roa
File: 36322e332e32302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Q3CMR8LVHCfEjDWMKmxieu/KnM2GcbrFRZFxXOaiogg=
Subject key identifier: 01:7E:45:3A:51:E1:05:71:92:51:BB:EA:3F:A8:F7:DC:28:BF:12:09
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 5023012F63E44F22CC01C4BDB3C40D02CD63865D
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203631333137.roa
Signing time: Tue 12 Dec 2023 11:38:12 +0000
ROA not before: Tue 12 Dec 2023 11:33:12 +0000
ROA not after: Tue 10 Dec 2024 11:38:12 +0000
asID: 61317
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:23:01:2f:63:e4:4f:22:cc:01:c4:bd:b3:c4:0d:02:cd:63:86:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 12 11:33:12 2023 GMT
Not After : Dec 10 11:38:12 2024 GMT
Subject: CN=017E453A51E105719251BBEA3FA8F7DC28BF1209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:bf:6e:d0:da:b7:a4:f7:c8:0f:36:2d:e0:
6c:eb:db:ea:f2:3e:17:c4:b8:6f:3b:59:9b:c1:b9:
b2:cf:5e:44:9b:07:25:dc:e7:03:55:af:e3:b3:f9:
92:a0:0f:57:c6:dd:f1:d7:f5:09:d9:f3:d0:25:6b:
d2:36:0d:50:c2:b5:09:66:4a:34:08:50:c5:f5:90:
ca:f5:28:2f:17:20:2d:86:1d:93:ff:c9:d1:dd:19:
9f:da:e5:b2:a7:14:6c:d6:4e:3a:45:d1:63:4a:35:
26:18:38:50:43:b0:15:13:9f:b9:52:5e:00:d6:96:
b6:89:85:c6:b9:61:de:3f:e1:e1:93:d5:e9:d9:75:
4d:49:50:9a:82:c1:c1:78:ee:00:37:d9:20:2e:be:
76:3e:df:82:19:86:3e:d4:24:88:bf:f9:b3:52:8e:
81:2e:60:16:89:26:cd:85:14:58:bf:59:6d:52:39:
4f:36:ad:d9:c2:dc:55:89:a9:02:44:fe:25:0a:0e:
f4:24:ec:81:fb:f5:0f:60:1a:a1:79:72:97:12:99:
02:9d:e2:2c:b5:78:b6:06:2d:1c:97:ec:5c:ea:e0:
d8:cf:38:14:8b:5f:43:a9:b4:5c:22:08:5b:6f:c7:
92:29:ed:7e:cc:81:0a:f9:95:ac:6b:84:87:8d:bb:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:45:3A:51:E1:05:71:92:51:BB:EA:3F:A8:F7:DC:28:BF:12:09
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a8:0c:22:ca:a1:0f:0d:f6:30:73:8e:ae:8c:1a:33:3f:40:
bb:65:9a:66:a2:46:15:6e:23:67:e8:a4:06:0e:4a:2e:8d:c7:
fa:8a:12:d4:f3:08:16:a8:45:79:3e:a5:d7:58:c1:31:cb:f1:
0d:31:d6:c7:52:23:59:dc:a7:10:82:16:7d:3c:79:cf:7f:a9:
1b:74:7a:29:7d:ad:77:a6:93:e0:24:df:d3:fb:60:5a:7c:bd:
0a:e4:45:a7:61:e3:2e:00:f7:a4:d8:57:cd:d4:f6:52:3b:2a:
38:d0:7c:ea:36:f4:2e:27:fc:2c:a3:23:f7:1e:26:51:e3:51:
47:01:9d:49:be:ef:13:45:1a:4e:26:94:43:90:6c:0d:42:3d:
5f:44:da:3f:18:e9:da:f3:48:65:41:6c:3d:cd:ee:ea:32:d9:
60:c8:4c:68:48:43:59:dd:6c:3e:76:c5:ef:de:ae:33:98:10:
34:1d:e3:4b:2c:23:5e:fa:ae:fe:22:a8:75:52:43:9f:6e:eb:
34:b8:88:d4:e0:0c:48:ea:cc:3e:a5:3d:a5:54:26:b9:2d:0c:
57:34:28:31:7c:1c:28:85:9d:34:0c:19:ae:8f:af:4e:0e:d2:
45:bc:c3:ff:05:26:ef:0a:53:92:39:fe:9f:7d:8d:69:44:e8:
32:66:d5:e7
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 9 18:34:36 2024 by rpki-client on console-fra.rpki-client.org