Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e2033333230.roa
File: 3134392e36322e33362e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: sUBOZ24rEg2R+g/rAScb+OrHU7bwqwHgdiOpAqoyOWw=
Subject key identifier: E2:F9:14:68:FE:FC:B8:4D:EA:F6:A8:8B:E4:A6:24:ED:BA:4F:CA:04
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 310B608119DBD84C940753DA82294094D05DFEB2
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e2033333230.roa
Signing time: Wed 03 May 2023 07:39:24 +0000
ROA not before: Wed 03 May 2023 07:34:24 +0000
ROA not after: Wed 01 May 2024 07:39:24 +0000
asID: 3320
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0b:60:81:19:db:d8:4c:94:07:53:da:82:29:40:94:d0:5d:fe:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: May 3 07:34:24 2023 GMT
Not After : May 1 07:39:24 2024 GMT
Subject: CN=E2F91468FEFCB84DEAF6A88BE4A624EDBA4FCA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:b9:ee:10:a1:25:64:a1:11:28:e2:ef:82:
86:05:62:ec:24:8d:62:17:95:a2:14:2c:ca:21:14:
02:10:ee:d7:ed:03:37:f7:01:e4:2a:a1:4c:00:59:
f2:d4:e0:03:46:dc:2e:a2:0e:6e:51:93:4e:8a:b4:
b6:da:f7:81:ed:b8:e0:df:d5:08:64:6e:79:e4:25:
0f:41:fd:08:fc:b5:32:ac:bf:61:42:10:50:3f:e0:
13:d5:7c:58:9d:33:4d:0b:41:06:b2:dd:e0:5e:7a:
0c:16:48:9b:ee:f8:c7:4f:10:cb:67:01:33:97:3a:
82:8e:68:b7:fa:c8:8d:4f:70:b2:10:02:79:a3:7f:
32:c0:c9:49:d9:ad:82:d3:f1:c2:7a:99:f8:98:4b:
67:96:b2:97:69:75:d2:b7:6c:1a:f7:3c:86:e3:20:
f8:17:4e:6c:71:ff:07:8a:3e:f7:9c:e9:77:d5:5c:
e3:0f:5c:74:c5:72:be:95:25:92:fb:ac:23:2a:04:
69:87:f0:70:f1:0f:53:8a:f8:32:e7:c8:e8:e4:61:
8b:9f:6d:b4:88:9d:30:f0:a7:e6:86:59:5d:a6:5e:
9b:1e:3f:78:9d:44:85:1c:88:0d:2f:16:a0:81:c7:
12:2b:7f:51:0d:13:7f:08:f7:34:d8:6b:3a:e5:f5:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:14:68:FE:FC:B8:4D:EA:F6:A8:8B:E4:A6:24:ED:BA:4F:CA:04
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
48:94:8d:52:2f:e9:f0:4b:b0:98:5a:54:f3:86:7c:e2:37:df:
46:1d:7a:14:8d:77:96:e7:ce:52:2d:c8:88:09:38:33:3d:77:
60:60:88:ee:41:23:e8:23:0f:84:b4:a0:5e:cf:6f:f8:25:12:
03:9a:b4:f7:39:04:6b:22:24:c6:5b:cb:d8:cd:ea:b0:d9:6c:
99:c9:62:fe:c9:f4:79:45:97:b5:eb:7b:7c:af:5f:36:70:f1:
9c:78:cb:c0:82:61:cd:e9:35:a9:fc:c2:bb:c7:5a:9c:2f:53:
88:54:3a:cf:c5:9a:c2:2f:86:9b:61:35:60:f0:cb:f3:81:55:
ee:a5:46:56:65:8d:8b:9b:09:6b:b4:08:85:72:34:61:40:f9:
65:30:ae:ba:93:d6:8f:b0:3c:cc:bd:47:20:cb:96:29:cf:f4:
3e:bc:34:72:66:5f:ea:1f:af:83:82:b7:58:df:49:31:9f:7b:
24:1d:8b:cc:69:cc:eb:67:98:e1:f5:be:b8:d0:42:7c:10:ed:
8c:fd:92:9d:c4:12:65:80:80:0e:eb:fa:eb:3d:43:d1:18:55:
06:f9:32:b6:ae:5b:55:d0:6a:67:48:86:38:ea:66:37:ac:26:
39:12:6d:5d:1a:d1:d0:e8:1f:28:6c:a8:fc:79:ea:58:42:87:
95:7e:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org