Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32312d3332203d3e203531313637.roa
File: 3231322e33322e38382e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: SWlVwdS4s5OnkNfCAjRuOd1Xno/TUcMfz7JZR8pv1iU=
Subject key identifier: 00:20:99:F7:75:CA:27:74:38:82:2B:19:27:3A:F8:EF:19:A4:E0:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BD8DDD45B39DCF5DD814F9BA1CD75FA5407D6E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32312d3332203d3e203531313637.roa
Signing time: Mon 23 Sep 2024 20:09:42 +0000
ROA not before: Mon 23 Sep 2024 20:04:42 +0000
ROA not after: Mon 22 Sep 2025 20:09:42 +0000
asID: 51167
IP address blocks: 212.32.88.0/21 maxlen: 32
Validation: Failed, certificate revoked on Tue 24 Sep 2024 08:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d8:dd:d4:5b:39:dc:f5:dd:81:4f:9b:a1:cd:75:fa:54:07:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 23 20:04:42 2024 GMT
Not After : Sep 22 20:09:42 2025 GMT
Subject: CN=002099F775CA277438822B19273AF8EF19A4E016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:db:e0:18:b2:56:72:7c:1f:1b:97:4f:f6:
69:c0:3e:eb:90:15:b0:78:a4:71:0d:2e:59:3b:a8:
d2:6b:06:bc:b6:7c:cf:ae:31:b3:47:7a:b2:64:99:
9b:bd:de:62:4b:b4:a1:6b:74:38:94:04:10:b6:1b:
14:b2:08:06:49:bb:58:23:55:c2:40:8f:73:98:f0:
92:10:51:6f:78:6e:10:10:8e:46:4d:d6:8c:dc:a9:
9f:b3:37:3f:91:a4:9c:37:22:69:85:9a:d3:41:9f:
93:f2:e5:b1:58:3c:a3:a1:f2:11:c8:8f:8a:75:5a:
7f:a1:65:c2:80:e8:53:db:e5:2f:4a:13:60:ed:91:
f9:55:d5:c4:a6:1d:02:06:e2:f9:bc:da:d9:33:c3:
b1:78:cd:d2:de:8c:69:e0:a7:bc:ab:d8:59:2f:e3:
11:a4:41:92:51:86:37:cd:18:c9:0f:c8:65:ed:d2:
1c:22:71:e1:ea:a0:b0:2d:ca:cb:65:a0:df:53:85:
59:2f:a9:77:8f:86:a7:0d:9e:c7:71:d4:c6:86:74:
64:b4:f5:28:30:14:1b:66:aa:a2:8e:69:12:db:f9:
53:af:54:8f:9b:d2:4c:f4:9d:c5:8d:d3:a7:86:ca:
19:14:24:e3:dc:54:66:aa:8d:22:aa:6a:c4:60:a2:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:99:F7:75:CA:27:74:38:82:2B:19:27:3A:F8:EF:19:A4:E0:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:56:b0:bc:95:84:4e:b2:1b:ff:1a:90:88:81:57:7d:e4:92:
c9:57:23:3d:f2:d1:ca:21:b0:89:99:7b:b2:ac:5e:f1:62:f2:
59:bf:e6:50:23:10:a9:7b:1d:4b:4f:f9:d1:a7:cd:d9:e0:26:
e2:86:15:e3:87:47:e8:f5:60:db:6a:cb:a9:b6:12:a5:a5:4f:
5e:51:1e:f6:9e:9b:2b:f6:f6:c9:0f:c5:01:6f:94:2b:bc:2b:
bc:f9:e5:d4:d8:ae:cc:70:47:60:53:ad:44:a7:69:49:af:93:
1c:ee:41:71:df:cc:72:f3:6a:45:37:db:d1:07:b8:ae:75:5c:
07:4a:60:52:58:12:70:e4:1f:4b:f5:5d:27:9e:01:5f:d9:9d:
ad:e3:11:bc:8f:e9:83:ef:e4:cc:cc:7e:f3:26:70:26:8b:14:
ab:c9:7c:ca:90:85:84:07:b4:0f:27:94:09:ff:b1:a6:f1:9b:
e7:aa:84:e5:c3:f5:67:4f:44:f6:09:3f:c9:8d:21:3f:8b:02:
54:55:d2:8a:01:62:86:b2:ca:b8:43:34:f2:ea:60:af:85:8a:
3c:40:92:a1:09:ae:8e:2d:3f:b5:77:41:ed:d0:9b:89:9c:cf:
b3:7b:94:a1:56:8c:3f:4f:0a:3c:7d:d0:2c:ec:df:b0:0c:3e:
a8:38:78:1d
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 24 12:04:18 2024 by rpki-client on console-ams.rpki-client.org