Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e2031.roa
File: 36322e38342e3137352e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier: wOkDqhG/imTiACwQvsMF0wHmaTsjayjPA17kHqI5meg=
Subject key identifier: 45:66:85:64:08:D2:E5:8A:F2:66:8C:4B:9C:C9:42:7E:68:63:CA:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67060C6E223EC43D3D31A368A73CF01706C0A28E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e2031.roa
Signing time: Wed 28 May 2025 17:55:21 +0000
ROA not before: Wed 28 May 2025 17:50:21 +0000
ROA not after: Wed 27 May 2026 17:55:21 +0000
asID: 1
IP address blocks: 62.84.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:06:0c:6e:22:3e:c4:3d:3d:31:a3:68:a7:3c:f0:17:06:c0:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 17:50:21 2025 GMT
Not After : May 27 17:55:21 2026 GMT
Subject: CN=4566856408D2E58AF2668C4B9CC9427E6863CA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:31:b8:e0:5d:a2:8c:21:1a:c0:39:53:50:
1f:d9:38:5f:05:c1:ac:94:30:d4:65:cd:25:2d:83:
4b:41:15:46:cc:eb:aa:3f:a5:33:a9:2f:d9:6e:99:
6f:da:65:bb:11:8e:fe:7b:40:07:fd:98:ec:7e:12:
25:ce:e1:94:75:af:ba:4c:3b:09:12:14:d4:15:95:
e4:4d:a8:fe:c8:1a:22:b3:e2:01:b1:fd:69:8d:1a:
1f:6f:d3:e6:c6:ee:af:5c:15:8d:c8:64:71:8c:96:
d5:42:dd:75:39:0e:36:9b:ae:3c:04:18:24:c6:c8:
ed:b6:70:24:fa:a7:f8:b3:68:51:f7:58:42:05:a5:
5d:17:9f:6d:3e:f8:1a:4f:a2:8c:d4:85:e6:3f:29:
bd:9b:2a:5e:d5:2a:1a:72:02:6a:31:38:03:d6:24:
ec:77:c5:38:ce:46:b5:85:6b:89:99:48:7f:c8:5f:
3e:a6:47:86:eb:15:78:f1:4a:18:d9:53:6a:7b:de:
99:af:1d:bb:18:9d:43:fa:7b:c8:be:a3:b6:bb:d8:
12:ed:63:3f:cc:b9:64:c2:d4:5c:2e:b1:8c:66:99:
d6:ea:11:8c:3a:f5:42:25:7a:47:a5:f0:a6:1b:5f:
a8:a7:ec:d9:a0:b5:00:99:36:f6:1c:f7:c1:16:3e:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:85:64:08:D2:E5:8A:F2:66:8C:4B:9C:C9:42:7E:68:63:CA:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e2031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f4:35:67:45:75:7c:71:6c:45:01:73:0c:5d:01:9a:63:a8:
15:15:73:e3:d2:32:cc:82:be:f6:24:e2:e5:63:9d:d9:98:27:
6f:93:c6:b8:8e:58:d5:68:0e:4b:dd:ac:3c:58:f5:3f:6b:be:
13:2d:3b:ca:75:ee:35:92:61:18:09:07:a7:75:84:14:0b:69:
8c:1c:1b:d9:a7:47:da:66:b7:a5:c1:25:a4:a0:00:d3:18:c0:
8d:b3:ef:30:f2:4f:36:19:a6:6d:a7:e3:24:a3:40:e6:d2:19:
ab:bd:f9:32:c3:04:17:c9:eb:0e:ae:eb:a9:78:40:eb:d0:4a:
17:30:d2:17:77:90:f1:5b:e1:5e:90:fa:ab:67:cf:ac:f9:1e:
0a:7b:44:95:41:9d:8a:ab:4a:c8:10:14:c5:46:ea:99:4a:9a:
f8:91:a0:d4:c1:40:c3:5c:f7:65:33:d6:a3:c3:10:96:42:ec:
8e:0f:d4:fb:d5:b7:0f:c3:91:a0:b2:3e:6b:91:2e:46:14:b1:
34:46:dd:e1:3f:aa:3c:ef:13:90:9a:33:5a:0a:83:3f:8b:15:
07:f2:48:83:a7:78:d3:a8:f7:51:d6:57:6d:bb:55:70:5e:ca:
14:9c:1f:23:13:80:62:26:87:d3:4f:1a:4c:e1:a9:24:f4:54:
e9:b4:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:00:14 2025 by rpki-client