Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20323031333431.roa
File: 36322e332e34352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: zUk/HqV+htY4q4oY2P753hsjAiu28IJA0Z3t15b2Uwk=
Subject key identifier: 9F:6C:11:9A:49:09:EF:CE:4E:87:82:1B:92:1E:9D:26:33:81:23:01
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 5CA68B798F34B3AA26F5EB518EA5E986948A0CBE
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20323031333431.roa
Signing time: Wed 27 Dec 2023 16:40:10 +0000
ROA not before: Wed 27 Dec 2023 16:35:10 +0000
ROA not after: Wed 25 Dec 2024 16:40:10 +0000
asID: 201341
IP address blocks: 62.3.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 09:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a6:8b:79:8f:34:b3:aa:26:f5:eb:51:8e:a5:e9:86:94:8a:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Dec 27 16:35:10 2023 GMT
Not After : Dec 25 16:40:10 2024 GMT
Subject: CN=9F6C119A4909EFCE4E87821B921E9D2633812301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:eb:21:d2:f3:98:92:e0:32:ba:01:a0:b0:
2f:e3:5a:0b:59:9c:6c:a9:3d:91:5b:c7:08:ac:8b:
be:c5:56:0b:95:5d:d7:c4:0c:b4:ca:8c:f4:ad:76:
5a:c6:b0:ec:ef:fd:5e:a7:f0:db:d2:a3:14:72:88:
1f:8b:09:31:cf:50:1e:e7:6d:8a:02:ce:de:82:ee:
6d:be:7c:d4:12:a8:dc:44:d0:fe:7e:77:1d:49:7c:
21:2f:62:99:90:8e:8a:ef:60:f7:b7:84:a2:09:c5:
ed:eb:8c:81:c0:23:af:76:c5:5c:62:72:38:47:20:
f3:28:03:25:4e:d1:1a:98:d8:aa:53:8f:ce:d7:29:
26:49:a9:ab:b6:10:2b:19:00:f9:2b:cd:9d:a4:11:
70:37:17:85:7b:b1:e6:7a:ab:2c:f5:37:7d:53:26:
53:14:8f:6b:e6:86:98:b0:73:65:7b:8b:0a:4a:bc:
55:95:43:31:02:a4:70:03:f5:9d:74:9a:1d:cf:de:
66:33:98:c0:4b:a0:36:d4:4c:34:2f:48:28:be:75:
9e:c5:d2:c8:b3:ad:09:3e:1b:56:86:cd:23:82:45:
a0:b8:2a:3b:8f:1b:43:33:7c:45:7a:2d:e1:cc:e9:
8a:4b:7b:04:ad:8f:7b:87:7f:2c:e3:4f:90:06:07:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:11:9A:49:09:EF:CE:4E:87:82:1B:92:1E:9D:26:33:81:23:01
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c6:47:e9:cf:d0:91:11:0d:75:c0:d4:34:51:58:35:3d:ac:
9b:08:41:56:cc:eb:d8:60:40:61:d2:3e:83:68:60:70:f5:c4:
49:73:ed:18:b5:d1:41:64:af:a3:36:19:b6:72:2d:81:0d:04:
a1:d0:f0:7a:bb:13:dd:9b:d8:77:2b:6b:81:05:cb:0e:a2:cc:
a7:11:d6:47:0f:82:24:53:6d:3c:9c:57:b3:ce:9c:37:25:d9:
f7:36:46:e0:57:b9:d7:35:d9:ca:70:3f:fe:81:4e:72:a7:d1:
7e:59:c6:a7:76:e4:9a:2b:4c:86:2c:1a:9b:29:14:57:2a:a5:
2d:7b:bd:bc:e9:ca:af:c1:3c:62:37:61:93:0a:aa:28:a7:8e:
e7:88:4c:61:f7:05:30:c0:39:0a:92:8e:07:97:e8:c2:57:b0:
b9:ea:e5:df:62:6f:83:27:92:fd:a5:56:47:42:3b:5f:9f:f4:
97:d9:b1:32:fa:9f:3c:6f:be:36:7c:60:73:f6:13:0b:a9:a0:
85:93:97:32:68:80:34:8a:ba:02:1d:48:8d:3d:12:96:65:bf:
07:e4:a0:d8:de:cd:97:77:3f:2f:ec:a7:ca:34:2b:e2:60:85:
e1:6b:93:dd:11:1f:3f:be:3b:be:ae:9b:bf:63:e3:cb:db:38:
b6:08:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org