Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32312d3332203d3e203531313637.roa
File: 3231322e33322e38302e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: NH4UecTc/wHd435+sqzzHr2Nh/hM3cja+mZPIel3j2E=
Subject key identifier: 6E:20:4E:86:FC:5E:1C:B7:3F:5E:DA:72:83:64:CC:C8:EB:92:B9:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 07ACD1E38ED29D2C6F2E9E9E6EB173DC6DA1461C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32312d3332203d3e203531313637.roa
Signing time: Mon 23 Sep 2024 20:09:30 +0000
ROA not before: Mon 23 Sep 2024 20:04:30 +0000
ROA not after: Mon 22 Sep 2025 20:09:30 +0000
asID: 51167
IP address blocks: 212.32.80.0/21 maxlen: 32
Validation: Failed, certificate revoked on Tue 24 Sep 2024 08:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ac:d1:e3:8e:d2:9d:2c:6f:2e:9e:9e:6e:b1:73:dc:6d:a1:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 23 20:04:30 2024 GMT
Not After : Sep 22 20:09:30 2025 GMT
Subject: CN=6E204E86FC5E1CB73F5EDA728364CCC8EB92B9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:1d:09:43:8c:d0:d4:04:c6:33:ab:fb:c6:
0c:a5:60:bc:46:91:c6:e3:e8:97:d1:1b:39:3a:ef:
51:70:66:aa:9d:a8:74:9b:76:f5:c7:42:17:1d:f9:
12:99:f5:1d:91:1f:7a:23:e3:54:39:8c:9d:d1:a1:
2e:6d:e5:b8:ac:5f:a5:50:b4:71:4e:b9:ac:fb:2a:
ea:5b:ee:80:9a:41:f8:6e:1c:f2:a7:5a:0b:b4:d7:
e8:4e:cb:c8:27:c1:9c:6a:24:63:17:0d:5c:8a:83:
ca:69:f7:1a:fe:d5:71:da:af:0a:c5:60:f4:b1:86:
09:3c:48:73:29:60:f5:83:42:52:ab:ff:c8:15:bc:
b2:06:87:62:a8:4c:b3:d5:4a:6c:88:6a:14:21:fc:
11:e5:6e:b4:0d:c1:5a:c6:05:63:23:37:fd:d8:44:
3c:8a:53:70:8a:c9:0f:a0:f9:7f:b1:c9:db:51:88:
1a:36:ab:cf:4a:97:96:14:ce:d0:33:4a:e2:f8:63:
60:13:24:ea:8a:ff:48:3e:ba:9f:60:4e:82:ce:d1:
3d:70:d3:65:8d:29:20:82:b1:07:ae:70:4f:20:26:
a0:37:76:e3:5e:0d:1e:be:2f:2f:64:c0:72:c5:dc:
36:18:fb:09:48:36:83:ec:46:48:0f:47:67:74:86:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:4E:86:FC:5E:1C:B7:3F:5E:DA:72:83:64:CC:C8:EB:92:B9:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:28:40:fa:b7:02:85:cd:a4:31:6c:b9:93:38:4d:60:36:77:
85:18:a7:a6:ff:41:76:18:e2:db:78:1c:cc:ad:69:5d:a4:c2:
57:fe:91:fd:18:4c:5d:df:b3:bf:be:f8:76:6a:03:7a:06:71:
f2:c3:90:0d:a9:05:68:4f:62:ae:f6:37:eb:2d:a5:61:0c:9b:
cb:32:d8:c0:22:2d:1d:b1:e1:aa:06:99:4c:c0:6c:8d:72:a9:
05:ba:03:7e:b0:ab:17:2b:ed:5e:fc:46:fe:c7:5d:5c:de:8f:
6c:f8:54:98:6a:e2:eb:9d:62:1e:7e:c3:87:4f:68:9b:e4:a5:
d4:8e:dc:08:a7:d4:6c:0a:f8:41:28:03:0e:83:3a:1a:94:2d:
2c:f3:9e:d2:bd:d2:16:ab:3e:27:8e:b8:22:bc:a9:de:06:1b:
a0:33:92:fc:2d:4f:55:07:75:70:63:a1:ed:85:5c:6c:9f:77:
e4:84:49:c1:59:b5:4a:9d:15:f4:cf:37:4e:d2:b2:33:be:08:
0a:ef:8b:28:37:78:06:85:fc:8f:b8:a4:45:99:95:e4:d3:05:
16:9d:5d:fd:13:21:9f:9a:40:b8:f7:8d:ec:07:6b:16:2d:fd:
bb:d2:dc:9f:e2:97:c0:52:8c:25:2f:ac:c9:c9:7c:f3:79:8e:
62:da:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 10:41:53 2024 by rpki-client on console-fra.rpki-client.org