Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32302d3230203d3e20383334.roa
File: 36322e38342e3136302e302f32302d3230203d3e20383334.roa (raw, json)
Hash identifier: L2GNpGYQudC+s71jbXiRe7HaqderkAoeQQ3gPp8yeXQ=
Subject key identifier: 47:2E:24:9D:90:83:40:D0:3D:ED:B3:56:00:8A:4E:E8:E1:58:E0:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 507A6A577CF206920010ABCE357507073100D54E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32302d3230203d3e20383334.roa
Signing time: Fri 26 Jul 2024 07:41:10 +0000
ROA not before: Fri 26 Jul 2024 07:36:10 +0000
ROA not after: Fri 25 Jul 2025 07:41:10 +0000
asID: 834
IP address blocks: 62.84.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 21 Aug 2024 06:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7a:6a:57:7c:f2:06:92:00:10:ab:ce:35:75:07:07:31:00:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 26 07:36:10 2024 GMT
Not After : Jul 25 07:41:10 2025 GMT
Subject: CN=472E249D908340D03DEDB356008A4EE8E158E02B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:64:85:72:c9:e4:7f:7f:c1:24:c1:e9:7c:
7c:8d:95:d5:fd:ad:b4:a2:93:35:35:1e:99:e7:50:
5b:11:89:5a:9a:e7:6a:58:ca:7a:b8:ec:03:ab:05:
3a:05:38:75:71:50:98:96:37:42:31:be:b0:65:47:
35:5d:f3:0d:18:c2:66:21:4b:da:45:e0:e1:42:99:
6d:c1:2a:5d:73:c6:b5:a3:02:bd:e9:5f:1b:ad:9c:
6b:1a:53:12:64:c8:7a:fd:15:c4:17:25:f4:5b:ee:
86:63:bb:fe:66:fe:32:a1:73:c2:72:57:a3:04:5f:
4b:b4:22:5c:f7:bd:3b:c2:54:d5:d3:e2:ff:79:be:
78:ed:46:69:e1:81:f9:d7:27:c8:ae:c2:6c:98:f4:
9c:57:6d:fa:13:75:83:96:99:fe:6c:7a:98:3a:e2:
1f:40:24:20:02:db:fc:1e:bb:a9:fb:a0:05:83:50:
0b:0d:76:7d:ae:0c:03:9c:3d:2e:cd:16:30:70:99:
b0:a9:29:d8:40:c6:fb:74:e3:83:b9:99:2f:71:ba:
44:a0:29:84:37:4f:fe:13:c0:af:b8:6e:85:b2:30:
a0:8a:9c:7f:ea:eb:83:05:66:d9:32:a6:14:7b:b5:
62:5c:b2:85:48:46:83:f5:d8:70:f8:83:6a:49:41:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:24:9D:90:83:40:D0:3D:ED:B3:56:00:8A:4E:E8:E1:58:E0:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32302d3230203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/20
Signature Algorithm: sha256WithRSAEncryption
68:74:10:36:91:20:1d:da:5e:5e:ca:ff:aa:53:54:61:67:64:
7c:ec:6b:af:06:fb:e6:6e:b7:a5:26:30:02:80:58:c2:4d:a9:
21:3f:4c:28:31:14:d8:e9:d4:98:eb:19:1a:bb:27:8a:15:90:
f4:94:85:a0:e0:ca:10:a4:0b:84:31:1d:6e:80:2b:fc:db:dc:
b0:bb:a0:0c:ba:42:52:2d:3e:7b:32:89:cd:33:25:de:7d:0f:
3c:a7:62:5f:0d:18:e0:39:6e:53:1b:a4:6d:8f:c7:ad:3a:fb:
09:37:1f:39:5d:69:7e:45:df:41:b3:0d:66:ad:bd:8c:64:94:
8d:b7:b8:69:8c:99:63:40:b4:17:ac:2e:95:b9:e5:46:8b:e0:
e6:d1:da:b0:ec:77:19:9a:c1:af:1c:55:e4:a4:da:a0:0b:14:
a4:c7:5b:57:ef:7b:14:8f:61:61:b6:92:4a:b8:d6:44:81:aa:
e1:8e:14:64:2f:27:be:b1:08:82:a9:58:ed:3b:c0:19:8f:92:
c7:b3:37:00:54:ce:51:f3:7b:46:2f:1c:bb:e5:21:a4:09:0a:
ce:48:a2:d9:ca:0e:93:64:5c:34:ee:be:d8:07:f2:71:e9:f2:
2e:8d:30:a8:9f:7b:32:de:79:5c:d7:49:3b:2f:bb:d8:96:18:
91:1f:1f:aa
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 21 07:45:46 2024 by rpki-client on console-ams.rpki-client.org