Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
File: 36322e37322e31322e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: XQJ8la6nRkUZ5QolDmx3cZ2DxpW0ktjJYG4MSvnl7vE=
Subject key identifier: 94:B2:7D:4E:BD:C5:BA:CE:E8:FB:2C:C0:52:04:8A:28:6A:AB:6D:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C70736217C190C4696B506B18C958364BD0E4DC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
Signing time: Wed 12 Jun 2024 19:03:53 +0000
ROA not before: Wed 12 Jun 2024 18:58:53 +0000
ROA not after: Wed 11 Jun 2025 19:03:53 +0000
asID: 47583
IP address blocks: 62.72.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:70:73:62:17:c1:90:c4:69:6b:50:6b:18:c9:58:36:4b:d0:e4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 18:58:53 2024 GMT
Not After : Jun 11 19:03:53 2025 GMT
Subject: CN=94B27D4EBDC5BACEE8FB2CC052048A286AAB6D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:4e:77:c4:51:2f:7f:6c:f0:f5:a5:a4:21:
f5:01:9d:82:e2:59:11:5f:dc:6c:a8:73:70:90:3c:
9d:e9:93:ac:7d:0f:f9:4c:4e:15:c0:08:25:f5:9b:
f5:35:8e:ff:ee:03:e8:6e:1e:70:29:77:7f:00:9a:
74:4e:7d:fc:0a:21:a3:b4:9c:ff:35:af:1a:4e:b0:
5f:9c:35:df:bb:35:2d:17:0b:2b:87:15:33:57:f6:
f4:e8:da:8f:47:04:bd:ce:1a:06:a1:c7:45:f5:69:
04:a3:70:4f:6d:4e:67:be:28:73:22:e4:07:ac:f5:
71:64:b7:f0:87:5d:52:5b:81:6d:6a:08:3e:0c:e9:
d3:c2:7e:c3:80:31:65:b2:85:9b:ab:18:72:39:f7:
44:51:ed:8d:56:70:2a:d3:2f:3b:f4:cc:bd:5b:ab:
d2:f9:7f:c6:d1:d7:d4:bb:d0:58:01:49:1f:b0:ee:
5e:e7:f2:dd:4e:36:bf:80:19:7c:ba:4e:93:1b:59:
b8:9d:ef:0a:41:98:c1:0f:c4:a7:69:e7:ee:6d:3b:
9a:e5:e5:0e:bd:d4:dd:3d:0c:c3:a3:4a:f7:5f:40:
3e:60:db:f2:56:07:69:54:98:28:a4:ed:ca:f4:7b:
8e:9d:57:e7:33:14:86:58:be:8a:c1:74:43:5c:6d:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:7D:4E:BD:C5:BA:CE:E8:FB:2C:C0:52:04:8A:28:6A:AB:6D:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
23:b4:6f:df:5c:c8:cf:6e:a1:a0:5b:23:8f:19:6f:1a:3d:66:
da:a9:ee:7b:33:89:25:b1:8e:8d:c2:9c:1b:bd:3e:a3:60:87:
0f:6a:bf:cc:37:58:80:24:a0:b6:58:c3:52:c0:c0:9a:2b:76:
6f:76:bf:38:2e:44:0f:04:0e:cf:24:50:46:ce:3c:6b:c1:c7:
27:3b:38:0c:30:31:84:66:d6:2a:78:8e:ef:65:48:58:ee:a5:
19:e9:1e:9f:b8:23:0f:c5:b1:71:e6:16:cd:15:69:26:2c:3a:
00:9b:29:8c:e7:f0:e8:a0:2d:36:78:c0:df:37:0b:79:87:a1:
b5:3b:e9:f3:d1:52:a6:3f:af:8d:0e:5f:8f:e1:56:9d:b0:1b:
96:1e:45:7b:dd:4c:d5:a1:73:b2:3a:1e:b7:32:48:d1:33:16:
05:7f:f3:5e:e5:bc:14:6d:a9:84:73:2b:b3:b1:0d:58:aa:1d:
ac:2c:ba:2d:02:92:a7:f7:a9:7d:36:cf:1f:32:9b:dd:d9:91:
04:c4:c4:56:3d:44:fd:7c:d8:36:be:8a:1f:21:cb:35:d1:58:
d5:be:d8:c0:b0:20:65:73:c9:a3:3a:8e:4a:78:fd:80:a5:c1:
cc:63:41:6a:c5:f7:4a:f2:55:84:58:ed:7f:a1:e1:88:a9:d5:
23:ba:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org