Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3232203d3e203437353833.roa
File: 36322e37322e31362e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: dwlLWaC+8B1qDV9pjRtMKHNwYgpCk70MUfKSLBlczTw=
Subject key identifier: A8:62:62:8F:3B:26:5C:BB:1C:F0:C5:7E:88:4E:E3:42:6D:CB:7B:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2499A3EDACE6E9782B0EECA1FFF8CEE3E0BE30E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3232203d3e203437353833.roa
Signing time: Wed 12 Jun 2024 19:03:53 +0000
ROA not before: Wed 12 Jun 2024 18:58:53 +0000
ROA not after: Wed 11 Jun 2025 19:03:53 +0000
asID: 47583
IP address blocks: 62.72.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:99:a3:ed:ac:e6:e9:78:2b:0e:ec:a1:ff:f8:ce:e3:e0:be:30:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 18:58:53 2024 GMT
Not After : Jun 11 19:03:53 2025 GMT
Subject: CN=A862628F3B265CBB1CF0C57E884EE3426DCB7B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:c4:a0:79:14:d8:66:5d:36:d3:9d:c1:85:
40:6c:36:92:8f:f0:07:e9:39:77:40:19:61:2d:67:
c8:f7:8b:94:84:7f:e6:90:fa:d1:a9:0d:63:c7:20:
94:1a:e8:b4:fe:d8:1f:9e:94:57:50:54:5b:3f:9e:
1c:d6:67:2a:2b:02:97:ac:3d:52:4d:8f:9b:94:75:
47:4b:74:6f:ee:6c:fb:c3:cb:cd:fc:21:a6:2c:22:
54:0a:c7:be:91:56:42:f0:4a:0d:fa:68:f0:3a:be:
03:38:c9:fe:34:34:79:ac:70:93:1f:6b:1d:2e:89:
98:e3:09:73:62:00:97:ed:a8:f1:fe:43:8c:12:c9:
41:e5:30:7c:7d:c8:68:51:7b:e1:9c:6d:85:1b:dd:
d1:28:11:a3:45:44:a0:c1:86:0c:0c:b9:fc:30:0c:
2d:7f:cb:88:2d:2b:24:e4:c9:54:74:da:f2:9f:ec:
48:52:bd:75:ff:2d:70:f7:cf:5e:13:3f:24:60:29:
c0:42:0a:b5:d3:61:cf:c9:e5:de:b5:7b:bb:f4:4a:
06:55:64:7f:3f:33:f7:14:d7:4d:c4:8c:d6:19:92:
cb:38:70:29:8a:75:8b:97:e2:a2:19:b7:9b:e4:a1:
76:3d:aa:fc:ac:2c:cc:2f:1b:f0:af:d2:fa:80:eb:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:62:8F:3B:26:5C:BB:1C:F0:C5:7E:88:4E:E3:42:6D:CB:7B:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.16.0/22
Signature Algorithm: sha256WithRSAEncryption
49:96:f6:b5:c7:37:5e:33:78:25:14:62:e7:7e:a1:b6:56:b4:
04:bf:c4:c3:6e:6f:50:32:f3:02:cc:a9:8e:2a:41:12:2b:f1:
b6:69:b1:22:f6:ff:2f:15:a9:8e:df:88:17:a4:ec:29:c4:03:
e5:b9:81:e2:5a:53:d9:5e:da:64:05:a0:ed:ca:5f:c3:77:20:
15:c4:50:df:9e:86:a2:a7:43:f8:bf:06:e3:c1:41:08:bb:41:
f0:91:a1:b1:e3:18:ac:71:15:eb:c1:3e:b7:7d:7c:fb:80:ec:
3b:71:93:d5:2c:a8:0f:1d:0c:9a:b3:c6:31:27:82:89:66:0e:
ff:4b:7c:8f:a7:5d:e4:59:84:8d:4f:f4:6c:82:6e:a0:2c:a8:
80:5d:bd:59:b8:1b:29:ae:90:09:a7:51:c3:d6:ed:b0:f8:08:
d5:80:4c:5d:16:df:b4:2e:92:88:3c:02:a5:2e:03:b1:06:29:
1b:db:b2:66:e1:44:88:64:1f:19:92:ac:39:a6:2c:4d:97:f7:
6b:12:af:41:da:5a:ae:92:3f:c4:b2:b9:c1:03:a7:6a:5e:b2:
d8:49:fe:f3:a3:e8:56:11:77:71:52:f2:a8:ba:43:6f:02:9c:
21:bf:9f:4b:91:f1:0f:42:89:71:8c:38:6c:20:f2:b9:f0:a5:
2b:9a:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org