Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa
File: 36322e3131322e3132382e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: RhMMHCqAuGB35ocQZ9NFyD2o+MwAoLmsNMkr+3VhN3I=
Subject key identifier: 31:89:8C:CD:26:21:C6:83:70:6D:07:6C:16:BB:5E:A0:3E:96:1B:8A
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 5F21DE8A67A7AE5AA7D39F0CD4E779777FE12749
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa
Signing time: Tue 16 Jul 2024 10:10:14 +0000
ROA not before: Tue 16 Jul 2024 10:05:14 +0000
ROA not after: Tue 15 Jul 2025 10:10:14 +0000
asID: 834
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:21:de:8a:67:a7:ae:5a:a7:d3:9f:0c:d4:e7:79:77:7f:e1:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jul 16 10:05:14 2024 GMT
Not After : Jul 15 10:10:14 2025 GMT
Subject: CN=31898CCD2621C683706D076C16BB5EA03E961B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:ab:13:87:e9:ab:5c:a7:7c:bb:6c:c9:e7:
a7:01:59:be:52:dd:98:ed:89:9f:f6:af:82:26:67:
93:ed:5c:78:f2:e7:cb:8f:6a:1f:aa:08:9e:39:48:
20:23:01:4a:d8:1f:6a:af:9a:85:04:0e:a6:43:af:
a9:64:84:40:9d:48:7a:34:9e:e9:12:82:39:9e:00:
13:b4:4f:42:94:f1:79:3a:35:bb:4a:c2:6d:4a:66:
f6:2d:72:f8:41:44:3f:e1:e7:1a:8e:d2:94:df:07:
a2:b5:38:43:de:18:f0:14:cb:15:b0:31:4d:28:fe:
6e:e9:0a:6d:73:b3:01:55:24:32:a7:f2:9c:ba:b5:
f1:ff:25:a4:2d:b0:2e:92:23:b3:43:fd:54:b8:c9:
35:2a:67:b6:68:8f:e7:94:9c:6a:46:9f:fd:65:f8:
28:af:0a:7e:ae:fe:14:30:03:d7:48:fc:ad:3b:18:
1f:76:0e:1d:9c:5f:17:24:c2:80:a7:63:d7:df:00:
f1:06:63:7b:b3:b4:bc:d7:e3:6f:3f:2a:98:37:5f:
b2:ca:a1:ab:8e:cf:bf:a1:30:0c:a3:50:6b:cf:9b:
ac:0f:e0:e6:cc:4d:de:ef:93:a9:76:95:f8:54:bd:
33:c9:2e:5d:10:6d:72:87:58:d9:88:bb:c9:95:e5:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:8C:CD:26:21:C6:83:70:6D:07:6C:16:BB:5E:A0:3E:96:1B:8A
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
19:11:63:00:91:ed:bf:c4:c9:ac:30:5b:37:1d:b2:6e:03:76:
11:40:4e:85:0c:15:e0:90:f9:48:e7:fa:06:67:66:37:0d:2b:
6c:2a:c1:67:6d:34:38:cc:e3:39:70:1b:31:51:3e:74:47:b0:
27:07:f7:da:32:31:8f:6f:2f:ea:af:4f:7d:fb:65:60:b7:39:
9d:99:4c:db:06:a1:05:73:56:b9:98:03:b0:15:e0:02:50:ed:
bd:58:46:a6:9d:a0:16:70:90:02:b3:5b:f9:05:28:2c:90:17:
8b:15:e9:2a:1a:ef:39:d6:24:d5:ac:d9:9f:73:62:f8:2b:28:
d3:ca:d8:c7:cd:05:38:f3:0b:f2:ec:b0:0b:2e:dc:50:29:31:
ab:92:6d:c4:9f:89:b9:b6:6b:3c:f7:ff:61:d5:79:90:db:16:
ae:a8:31:84:40:4f:26:51:43:38:c6:e5:eb:cc:51:56:4f:85:
1d:9a:9b:3d:a8:7b:5e:0c:99:7b:f4:83:72:22:f0:5c:7f:6b:
f8:0c:31:0c:bc:3b:83:8b:ef:2a:03:4b:5f:ca:d5:31:64:8f:
ab:65:4d:44:d2:54:70:7c:13:52:07:c3:57:5e:5f:73:27:53:
97:ad:8d:ce:93:90:3c:1a:72:6c:5e:e0:57:ca:fb:0b:43:3a:
5b:77:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:51:35 2025 by rpki-client