Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32322d3332203d3e203430303231.roa
File: 3231322e33322e39322e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: 7QxKJtVWeKPTx3CH+1boezzJhukXdO1FwfmSJ20fmnI=
Subject key identifier: 5E:D2:69:F2:2A:93:FE:FB:7A:81:D2:A5:BC:60:15:8E:2A:AB:FF:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 09F6E5F6EC105A658E9C315B1A0EFC157AEF9908
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32322d3332203d3e203430303231.roa
Signing time: Wed 13 Nov 2024 19:44:03 +0000
ROA not before: Wed 13 Nov 2024 19:39:03 +0000
ROA not after: Wed 12 Nov 2025 19:44:03 +0000
asID: 40021
IP address blocks: 212.32.92.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Nov 2024 15:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f6:e5:f6:ec:10:5a:65:8e:9c:31:5b:1a:0e:fc:15:7a:ef:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 13 19:39:03 2024 GMT
Not After : Nov 12 19:44:03 2025 GMT
Subject: CN=5ED269F22A93FEFB7A81D2A5BC60158E2AABFF36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:93:24:ff:67:ac:17:8b:62:8a:e6:03:17:
29:ae:d1:d3:a7:de:3f:6e:f6:52:38:2d:da:b0:6d:
29:b0:1d:da:81:bd:6f:22:35:dc:e9:b0:46:99:28:
86:b7:08:06:2a:24:06:0b:48:a3:82:5e:46:8a:a4:
d4:0e:9e:bd:1d:bd:aa:a0:94:dd:4f:11:2c:0d:69:
2f:c7:29:5d:f2:81:31:66:5c:23:a8:9b:d6:6e:e5:
b9:73:34:00:81:76:f4:c0:51:b2:ee:47:23:59:c6:
a5:de:88:27:7f:ff:1c:e3:b4:f6:ec:03:53:3e:17:
68:e4:83:c8:96:ee:d2:35:9d:e4:e7:07:be:2b:18:
72:44:9a:6c:75:99:a3:9c:9e:5f:f2:c4:11:a3:b3:
be:50:55:e7:9c:89:4a:dd:56:f4:43:de:2f:7a:c0:
d0:2b:c1:fa:94:f3:ac:91:1c:00:84:39:29:ea:ec:
34:ac:af:13:f0:20:4f:04:b3:65:da:ba:95:0d:50:
19:1e:ce:18:59:aa:52:cf:f9:87:52:80:53:da:ea:
cc:12:01:71:20:f0:b3:81:63:1b:21:cc:d6:82:dc:
71:51:64:72:19:1d:a9:e5:5b:a7:d2:c3:c3:28:b5:
89:e0:63:0c:3c:3a:9b:f1:ec:b0:44:87:58:0d:cb:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:69:F2:2A:93:FE:FB:7A:81:D2:A5:BC:60:15:8E:2A:AB:FF:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:09:9d:ac:31:13:43:b3:2f:d1:14:19:97:74:83:0b:4b:5a:
ab:de:df:e0:b6:f0:9e:ee:2a:85:eb:a1:64:31:0b:d1:ab:1a:
33:23:ab:af:b5:36:24:16:2a:be:d4:f1:8e:2a:ec:49:eb:5e:
5b:31:f1:f6:76:8d:f2:eb:3d:9e:f8:a1:ab:fb:04:e1:5c:cf:
c4:89:b1:3e:18:35:96:be:45:e3:81:d3:5a:37:88:85:65:2b:
d0:b0:b7:85:e4:0c:20:f9:bc:84:b5:6b:41:22:98:c8:a4:43:
9e:26:1c:8c:b4:18:80:75:33:0f:82:c0:05:56:f2:6c:14:9a:
b9:86:58:c0:74:bd:dd:37:19:81:b9:fd:a2:a0:d0:f3:98:bb:
1f:d9:86:01:67:8c:3d:de:d9:ce:e3:30:50:99:38:f6:b9:55:
fc:75:28:0d:66:bb:6c:c0:29:47:ee:85:91:61:3e:47:69:ff:
d3:5c:b9:aa:b0:b4:d4:50:28:ce:0b:34:23:36:c4:12:d3:0b:
68:59:cb:2d:6f:16:21:0f:35:06:26:5e:b6:1c:4c:19:26:05:
cb:03:54:30:b9:38:50:d0:ad:50:58:20:b6:10:70:16:f3:f9:
62:0e:95:37:7b:c7:0a:e6:53:d8:27:12:e3:28:cf:34:8b:9e:
e1:c7:20:54
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 14 18:30:09 2024 by rpki-client on console-fra.rpki-client.org