Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
File: 322e35362e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zBjxtdyBMtEq8/SQmHJniu3PUa0jYM48qw+XDKqkrt8=
Subject key identifier: 07:21:E4:4D:F1:A2:B5:A6:EF:71:F3:1F:F0:00:26:E7:C0:2B:EF:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75CE00D9BEE016E0372C6454243D8C1F82BCD376
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
Signing time: Sat 26 Oct 2024 21:30:27 +0000
ROA not before: Sat 26 Oct 2024 21:25:27 +0000
ROA not after: Sat 25 Oct 2025 21:30:27 +0000
asID: 834
IP address blocks: 2.56.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 19:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ce:00:d9:be:e0:16:e0:37:2c:64:54:24:3d:8c:1f:82:bc:d3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 26 21:25:27 2024 GMT
Not After : Oct 25 21:30:27 2025 GMT
Subject: CN=0721E44DF1A2B5A6EF71F31FF00026E7C02BEF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:d9:45:49:58:42:0e:26:21:4a:38:10:49:
6d:18:11:9a:19:7f:6c:be:f1:1c:c7:ae:73:80:d8:
e8:f9:c3:34:42:2d:10:52:49:74:79:3b:62:7b:44:
8f:05:4d:ed:67:83:b0:96:44:65:09:76:e1:94:d6:
a0:f3:3b:d5:39:4f:58:e1:d4:c5:2d:5f:e1:1b:0e:
2a:0d:71:19:0d:3e:08:c5:c7:e2:70:95:b8:27:17:
3d:76:f2:ab:c1:a8:49:4d:5e:45:67:5e:b7:52:42:
fd:1b:73:8f:79:90:f9:10:10:3d:ea:6e:94:92:60:
c7:33:04:b4:2b:43:83:50:22:83:0b:d1:aa:55:58:
77:69:a5:f1:01:0f:88:f5:7d:27:b8:1a:99:72:2e:
6b:0a:63:b7:54:e3:2f:cd:9d:4a:0a:53:b1:eb:12:
fb:4c:4b:ae:ab:5c:f5:e0:1b:e6:82:ee:73:b1:00:
aa:ca:b4:53:9b:a3:f6:42:aa:33:79:73:10:8c:0e:
80:0a:75:dc:1d:2c:7e:0e:76:5c:a3:70:93:15:3f:
2f:d6:9d:0f:36:07:fc:95:fe:41:ac:68:3d:4c:50:
2b:d8:08:67:16:e2:d4:42:4b:cb:3a:64:1b:c7:c7:
e3:e2:14:21:48:e3:aa:a5:ef:b4:d8:89:0c:3b:bc:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:E4:4D:F1:A2:B5:A6:EF:71:F3:1F:F0:00:26:E7:C0:2B:EF:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
Signature Algorithm: sha256WithRSAEncryption
18:61:f7:ee:d2:54:e2:93:67:aa:ab:2c:4b:8a:81:8d:62:bd:
ad:3f:b0:59:93:3e:1f:1f:57:08:36:fd:18:e1:cd:8d:cd:2f:
bd:87:22:1e:72:33:a1:b9:c9:01:e8:cb:83:3e:a7:c0:05:92:
cd:85:87:27:54:aa:ce:24:dc:d7:58:a8:83:28:56:e4:c4:b6:
91:07:94:76:e8:9d:b0:69:e5:cc:de:2c:06:ef:48:f1:95:b9:
e7:0d:2e:4a:23:21:82:85:b3:c9:92:48:96:b4:e7:c2:15:41:
93:26:b2:eb:97:5c:11:6f:f6:79:41:c5:12:25:16:c3:75:23:
bb:64:d5:73:63:07:68:e0:6f:11:f4:2f:dc:03:f3:72:9d:06:
a7:bf:65:9e:08:94:1e:9c:d8:b2:b6:bb:56:ba:f0:5b:63:2f:
1b:f9:9b:e9:1c:8a:7b:86:b1:71:ef:43:c4:63:23:ce:4f:45:
12:19:71:2d:80:bd:f3:9e:71:dd:c4:36:42:1e:1d:2a:69:cf:
a3:0c:39:c9:f0:ce:b8:71:e9:c4:df:1e:10:62:da:6d:76:68:
df:cd:c0:a6:3f:1d:b0:07:14:9b:04:fa:f9:49:20:05:2d:21:
d8:45:83:f7:2c:34:6f:1c:25:05:30:d4:71:ac:9f:1b:1f:f3:
b1:1f:39:9d
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 28 21:48:54 2024 by rpki-client on console-fra.rpki-client.org