Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3230203d3e203331313033.roa
File: 36322e3134312e34382e302f32302d3230203d3e203331313033.roa (raw, json)
Hash identifier: z/8kZNuiJVa6i3+EWRKXZZDjjmU4aTlcSNlt0kNdZxQ=
Subject key identifier: DF:44:21:7B:83:FB:FC:B9:D5:AE:F8:B6:2C:D9:84:4B:FB:3B:6C:3A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 31B4A2D65141ADF062103D29F26ABA9E977DE55C
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3230203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 62.141.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 31 May 2024 13:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:a2:d6:51:41:ad:f0:62:10:3d:29:f2:6a:ba:9e:97:7d:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=DF44217B83FBFCB9D5AEF8B62CD9844BFB3B6C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:11:d5:da:1f:41:f2:bf:8a:92:58:ef:a3:
49:8b:56:18:20:08:81:2e:5c:a5:c7:f9:13:c3:83:
10:64:f0:9f:20:ae:f6:d0:39:46:5a:1d:7f:15:82:
5f:51:6a:d6:f2:7f:4e:d6:5d:06:99:a9:f6:74:4c:
c0:24:10:b0:15:ca:d2:e7:82:29:82:58:51:d9:eb:
5a:e7:97:fa:ad:9d:52:be:66:5e:49:24:42:39:51:
a3:d0:75:15:90:ff:cc:81:ca:30:b4:56:d0:e6:af:
76:3c:7c:aa:88:81:c2:11:33:40:19:a3:8d:7e:fc:
60:ab:f6:be:84:73:1b:1d:32:f6:1f:bc:82:a9:db:
2f:cf:d6:b4:77:4f:38:9c:90:ef:1e:2b:83:80:fe:
c9:76:0a:b2:6a:6a:fe:bd:93:1f:1f:4f:1c:0b:5a:
dc:78:5a:95:16:3a:4c:c5:71:da:26:82:1f:98:03:
67:e5:cf:d4:a6:1c:20:64:f7:b4:09:67:fe:7f:24:
f1:0d:25:b6:b6:64:49:a6:99:b4:07:c4:61:64:c9:
3b:9e:99:e2:8b:14:30:8b:24:1b:86:b0:64:9c:24:
8e:72:6f:a5:83:29:7f:89:c9:36:ff:a2:03:dc:e2:
94:03:13:1d:14:33:44:41:74:18:2a:e5:4e:d8:c6:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:21:7B:83:FB:FC:B9:D5:AE:F8:B6:2C:D9:84:4B:FB:3B:6C:3A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e34382e302f32302d3230203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.48.0/20
Signature Algorithm: sha256WithRSAEncryption
14:c6:63:ac:6a:06:c9:e4:0e:31:5a:62:d4:42:70:10:e1:4a:
9b:c5:d2:d2:25:fa:d1:1f:ae:74:64:f8:e3:ae:5a:ce:a0:37:
18:22:99:fa:69:65:10:49:63:38:04:09:d3:42:7f:5f:4e:41:
8a:19:96:64:93:64:1b:9e:4f:e3:9e:ff:e1:9f:51:39:ed:e7:
85:34:98:88:c5:c4:dc:27:73:bf:f2:2a:43:a4:fd:27:9e:53:
8c:e4:58:35:c8:70:fe:e3:2b:14:8e:e4:ac:f5:62:dc:4c:20:
66:2b:fb:05:b1:b7:6b:d2:aa:56:22:35:0a:75:16:f5:a6:80:
24:07:f2:44:75:f3:e8:e6:d0:dd:ea:e7:18:4c:12:48:88:81:
bc:6e:a2:41:55:cc:b4:06:e0:1f:67:82:65:5c:79:5a:c5:89:
b9:4a:c3:85:04:2c:6a:28:b3:bd:5f:01:d7:c5:b9:86:6a:8f:
dd:3d:6a:e4:b6:64:9c:9a:e6:cd:d1:80:e8:77:57:66:5c:98:
46:0d:3d:2c:97:46:cb:e8:38:67:db:a4:5a:2c:5b:0f:79:c9:
38:e7:a3:3b:20:4b:07:37:e9:fd:49:c9:34:bf:34:21:9c:3d:
f7:f7:56:07:84:bd:30:ed:f1:5e:09:ad:e3:ec:73:8c:20:0b:
33:02:42:78
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMbSi1lFBrfBiED0p8mq6npd95VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA1MzEwOTMwMzBaFw0yNTA1MzAwOTM1MzBaMDMxMTAvBgNV
BAMTKERGNDQyMTdCODNGQkZDQjlENUFFRjhCNjJDRDk4NDRCRkIzQjZDM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCRHV2h9B8r+Kkljvo0mLVhgg
CIEuXKXH+RPDgxBk8J8grvbQOUZaHX8Vgl9Ratbyf07WXQaZqfZ0TMAkELAVytLn
gimCWFHZ61rnl/qtnVK+Zl5JJEI5UaPQdRWQ/8yByjC0VtDmr3Y8fKqIgcIRM0AZ
o41+/GCr9r6EcxsdMvYfvIKp2y/P1rR3TzickO8eK4OA/sl2CrJqav69kx8fTxwL
Wtx4WpUWOkzFcdomgh+YA2flz9SmHCBk97QJZ/5/JPENJba2ZEmmmbQHxGFkyTue
meKLFDCLJBuGsGScJI5yb6WDKX+JyTb/ogPc4pQDEx0UM0RBdBgq5U7YxufzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU30Qhe4P7/LnVrvi2LNmES/s7bDowHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzYzMjJlMzEzNDMxMmUzNDM4
MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzMzMTMxMzAzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD6N
MDANBgkqhkiG9w0BAQsFAAOCAQEAFMZjrGoGyeQOMVpi1EJwEOFKm8XS0iX60R+u
dGT4465azqA3GCKZ+mllEEljOAQJ00J/X05BihmWZJNkG55P457/4Z9ROe3nhTSY
iMXE3Cdzv/IqQ6T9J55TjORYNchw/uMrFI7krPVi3EwgZiv7BbG3a9KqViI1CnUW
9aaAJAfyRHXz6ObQ3ernGEwSSIiBvG6iQVXMtAbgH2eCZVx5WsWJuUrDhQQsaiiz
vV8B18W5hmqP3T1q5LZknJrmzdGA6HdXZlyYRg09LJdGy+g4Z9ukWixbD3nJOOej
OyBLBzfp/UnJNL80IZw99/dWB4S9MO3xXgmt4+xzjCALMwJCeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org