Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e20383334.roa
File: 36322e3131322e3134342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: S7iHHJHyJElKMEwWwHT1DGXMGXU8xr7QuzhNClFeTPM=
Subject key identifier: 3A:61:6A:50:6C:E7:08:DA:74:92:DA:9D:51:B3:FD:79:49:B5:74:54
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 6DE16226FDDC27CBF285971825E661E97C564E72
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e20383334.roa
Signing time: Sat 18 May 2024 00:02:52 +0000
ROA not before: Fri 17 May 2024 23:57:52 +0000
ROA not after: Sat 17 May 2025 00:02:52 +0000
asID: 834
IP address blocks: 62.112.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 11:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e1:62:26:fd:dc:27:cb:f2:85:97:18:25:e6:61:e9:7c:56:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: May 17 23:57:52 2024 GMT
Not After : May 17 00:02:52 2025 GMT
Subject: CN=3A616A506CE708DA7492DA9D51B3FD7949B57454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:c2:85:d3:df:0f:0d:c6:5c:86:45:28:f5:
0e:21:07:72:cf:27:fe:e9:c9:7b:ec:b8:a2:94:da:
5b:09:9e:62:17:a4:76:2c:6d:e5:1b:ac:6c:ce:b5:
1a:53:6e:06:1d:36:64:3d:a1:0f:50:de:26:99:dd:
a0:10:f8:21:af:a7:66:5f:64:b1:51:ef:8c:8c:0c:
78:da:47:27:b4:74:58:9c:e4:1f:22:dd:8d:2e:ac:
76:c6:1f:80:f2:b4:4a:82:0c:49:c9:01:ea:c0:ab:
36:4c:9c:3f:9e:a6:1e:53:f6:87:a5:49:8e:ec:6f:
f9:d9:17:25:68:88:f4:84:ae:2e:2e:0e:96:72:61:
0b:48:4e:4c:d7:bf:a7:b3:72:e6:c2:ea:25:f3:81:
ba:52:ec:1a:5c:d6:4e:4d:e7:b2:bb:c3:5f:71:95:
24:5d:0d:3b:9b:9c:cf:90:6b:d3:07:3f:de:a2:8e:
d7:54:1f:06:91:0a:d7:9f:46:13:f9:c3:e8:b2:31:
b0:8e:69:2c:ae:46:e9:25:b6:fd:63:0d:7e:e0:ef:
7c:fc:25:a5:b1:85:87:47:d4:d1:e6:09:c4:5c:6b:
b1:52:ca:6f:80:85:0c:2c:87:50:9a:f4:05:6f:c0:
a4:c1:31:75:b2:d9:7b:9c:34:d0:14:53:84:97:89:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:6A:50:6C:E7:08:DA:74:92:DA:9D:51:B3:FD:79:49:B5:74:54
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:71:24:ed:c1:68:4e:99:51:4c:32:40:2a:0d:4b:72:4f:1d:
09:4e:fd:30:dd:77:d1:e3:c4:75:11:e9:dc:0a:04:33:63:e5:
51:86:d7:46:2b:be:05:0f:3e:57:98:21:57:a0:74:c4:69:11:
00:6f:4e:aa:b9:d1:7e:e4:21:9c:bc:2f:c2:51:3c:27:86:d4:
85:0c:54:da:51:85:fe:ce:f1:41:25:0e:36:8c:6c:f9:7e:97:
81:ab:6a:f8:56:eb:fb:d3:8e:39:48:92:18:a5:fb:7c:d2:29:
10:a6:90:b0:fd:e0:89:a6:4f:2d:36:9d:17:30:10:5f:10:b3:
fd:0b:d1:d9:48:d8:8f:0a:3f:a5:d2:3e:4e:7b:38:51:e6:6d:
5c:59:cc:29:31:4f:ab:12:ce:be:db:da:2a:27:d3:b0:7a:7b:
91:a5:98:89:5b:fb:71:59:ae:c3:e0:84:5d:35:4e:c2:ab:23:
a8:12:1f:b9:06:e7:5c:cc:24:6d:55:af:f0:f1:9a:33:96:14:
ba:dc:6a:c7:2e:18:d4:d2:30:b1:b9:81:da:25:b4:b6:b2:0d:
81:2c:95:54:7b:3a:32:8f:92:ff:1d:9e:b2:1f:5f:d6:63:d2:
2d:29:90:24:44:fa:cc:6e:f0:8a:0c:80:84:3d:14:da:d0:c8:
97:78:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:30 2024 by rpki-client on console-ams.rpki-client.org