Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
File: 36322e37322e302e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: 2EJCwWwdNw11k7iiCJecqj5gEaFIsHDSo+LVfwqfbwc=
Subject key identifier: B9:1E:D6:CB:08:60:3D:06:A3:9D:AE:4B:49:02:5E:C9:B5:D2:19:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72F59ABD089AF7BC42EE8611B8B85F479C7F8A15
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
Signing time: Wed 12 Jun 2024 19:03:53 +0000
ROA not before: Wed 12 Jun 2024 18:58:53 +0000
ROA not after: Wed 11 Jun 2025 19:03:53 +0000
asID: 47583
IP address blocks: 62.72.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f5:9a:bd:08:9a:f7:bc:42:ee:86:11:b8:b8:5f:47:9c:7f:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 18:58:53 2024 GMT
Not After : Jun 11 19:03:53 2025 GMT
Subject: CN=B91ED6CB08603D06A39DAE4B49025EC9B5D21928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:80:79:13:45:74:4e:aa:2a:1e:aa:26:6a:
2b:18:cf:19:59:e6:99:02:e0:cb:ca:c1:6f:21:c3:
ae:85:82:0c:27:7f:1c:13:db:15:1a:e0:a6:2f:d8:
22:3a:fc:49:58:87:37:ce:60:de:2d:9d:db:a3:b9:
45:1c:e3:c9:ed:90:4e:54:8d:c7:9b:f1:01:0e:01:
62:89:e4:08:a5:0d:72:fe:24:3b:e0:4f:70:ea:6a:
94:a5:4e:f3:60:fc:b3:97:6b:77:a5:0e:9d:88:44:
8d:c3:ea:0c:67:a2:3a:67:f5:6e:4e:f7:6b:ec:2a:
2d:57:7d:8f:27:7a:d5:c6:9d:da:39:4d:9d:65:57:
d4:0d:e7:9c:f5:ea:9a:b8:b3:fa:a3:d9:89:07:7f:
04:6d:b9:f3:07:89:2c:91:af:1d:7e:da:df:e1:6a:
ab:66:f3:46:c8:02:4b:4e:20:7e:ee:28:53:9c:91:
af:6b:2a:19:ca:92:a0:39:2e:27:bb:c9:51:c0:17:
e6:9f:0b:86:b6:90:6e:a8:42:a4:87:6c:61:aa:49:
55:89:dc:dc:16:03:eb:27:2d:d2:f9:aa:e7:62:92:
9e:e3:90:ad:64:e9:a1:b2:c7:17:eb:d0:a2:fb:14:
58:9a:09:45:1b:56:74:58:22:b9:59:fd:c3:cd:68:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:D6:CB:08:60:3D:06:A3:9D:AE:4B:49:02:5E:C9:B5:D2:19:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.0.0/21
Signature Algorithm: sha256WithRSAEncryption
43:36:49:6c:56:02:0e:2e:b5:4e:43:37:9e:e7:37:86:20:5a:
cd:2b:5a:4d:13:3e:d7:aa:f8:79:52:8b:93:3d:65:0a:9b:04:
27:b9:55:45:43:c5:f6:8c:49:22:55:1d:d6:c3:50:57:2a:9a:
17:bc:1e:44:d0:c5:73:df:c0:5c:21:c2:08:eb:75:2f:50:cf:
88:14:f5:12:2d:29:72:47:fa:bb:c3:f1:37:e2:71:48:ae:6f:
68:92:2e:ef:71:c3:ca:d7:f3:79:37:21:3b:f3:73:bb:67:da:
36:28:e7:99:51:ab:c4:33:89:b6:0e:b6:30:45:a0:41:35:bf:
43:ef:d2:83:37:b7:55:30:c9:14:3e:c9:46:42:02:57:84:c1:
15:42:de:0a:ae:e6:db:87:e2:ea:02:d9:af:ab:74:51:13:a9:
38:81:c8:f0:5f:37:89:a1:46:65:45:24:82:fe:0f:b9:67:f1:
9e:5a:e0:80:1f:c7:77:9c:d6:e2:cb:1b:b0:94:0d:83:15:67:
69:22:c5:bb:bf:bb:1d:e5:d6:a9:6a:29:65:04:75:2c:95:9b:
8c:cd:d1:a9:10:76:a1:e6:39:92:af:c4:d7:a9:ef:99:6d:47:
d3:e4:52:78:89:17:22:f5:f5:38:dc:dd:33:ea:52:e6:11:a1:
e2:c2:2c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org