Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203134363138.roa
File: 36322e38342e3137362e302f32302d3230203d3e203134363138.roa (raw, json)
Hash identifier: J/FTvs/OKu7lyNfmCHV6ji1O8BxMblS+szfLyENUSCk=
Subject key identifier: B6:0B:43:85:9B:4F:A3:0D:66:2E:23:50:7B:78:4D:4F:86:AF:D4:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 200A5A6B0CD5D911818B5612BD3D23B5F32CF0CB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203134363138.roa
Signing time: Tue 09 Jan 2024 09:07:25 +0000
ROA not before: Tue 09 Jan 2024 09:02:25 +0000
ROA not after: Tue 07 Jan 2025 09:07:25 +0000
asID: 14618
IP address blocks: 62.84.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0a:5a:6b:0c:d5:d9:11:81:8b:56:12:bd:3d:23:b5:f3:2c:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 9 09:02:25 2024 GMT
Not After : Jan 7 09:07:25 2025 GMT
Subject: CN=B60B43859B4FA30D662E23507B784D4F86AFD496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:01:71:ac:78:65:63:0f:49:23:0a:92:94:
3e:57:1b:c1:a6:4b:e1:e6:f8:c2:c3:57:6d:f3:8a:
90:87:29:27:a3:33:bf:0d:05:4f:2a:32:e7:28:57:
13:74:0b:5d:76:e6:54:d6:f8:e3:3d:40:d3:48:8f:
ae:1c:f5:09:94:93:c6:e9:8a:4f:29:f5:e9:04:28:
e9:a8:7a:24:e6:67:34:d0:71:1b:50:a1:8d:7a:fd:
fc:73:89:2d:4f:a6:94:5c:f2:23:60:48:b2:0f:69:
f7:4e:4f:0f:76:27:fc:57:44:fb:8d:bb:46:8f:89:
88:65:e2:0e:6a:a5:71:01:c7:1b:16:0c:d7:b6:ec:
d3:03:32:ef:2c:04:c3:b4:3d:11:28:6b:25:e2:80:
e9:c1:81:29:96:70:82:e5:8f:1b:1a:90:19:ea:3b:
9b:a4:90:71:cd:45:9d:b2:bc:8c:f3:02:39:c9:a5:
20:ae:6e:d2:b5:2e:d1:e9:f6:61:8b:32:18:5a:4e:
1f:21:1a:9b:92:cc:51:75:9b:a8:b3:56:88:a6:09:
a0:bc:35:31:0c:33:6c:1e:04:7e:aa:26:b6:4e:8a:
fb:5d:c8:10:97:32:62:c0:19:4c:4c:f9:24:e2:e0:
9f:55:4e:fe:83:f2:2d:7e:fb:4c:7b:26:0b:95:7f:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:43:85:9B:4F:A3:0D:66:2E:23:50:7B:78:4D:4F:86:AF:D4:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:34:33:33:28:cc:6f:74:38:b2:62:72:eb:68:2a:44:78:ed:
c1:92:ff:fe:60:d1:98:5b:ff:3c:c5:eb:30:ea:33:b5:9c:0d:
43:a4:a3:5f:39:38:ed:ee:2c:df:a8:87:9f:3f:29:97:a5:2b:
c6:6d:00:6e:a1:1e:83:d5:76:a8:74:55:76:ad:56:4b:91:39:
62:ee:24:15:a7:90:38:91:1d:cc:69:7e:a0:f2:2a:3a:70:05:
76:27:b4:45:15:40:81:47:0b:30:d3:75:39:da:5b:0a:b3:0a:
39:bf:ca:93:98:a7:12:88:17:80:c7:fd:90:f3:17:9a:55:da:
70:da:71:75:c7:f5:8f:0b:da:be:63:7c:a9:0a:ef:7d:ba:5c:
23:e7:90:6e:07:28:b2:48:bc:28:6c:45:dc:d4:3c:4f:77:1e:
49:27:ed:d8:e8:b4:24:ee:52:c9:5c:de:e6:4f:9c:ba:e0:2f:
61:97:02:fa:87:a3:a2:14:29:e9:d7:69:49:15:6b:7a:8f:b1:
3d:62:f9:95:4f:c7:21:50:43:05:31:3e:e7:05:07:60:9e:6e:
b3:ff:78:18:5f:15:71:ce:04:13:2e:de:c6:c5:89:09:7e:78:
2b:b7:53:f5:dd:d1:b9:9d:ce:a1:21:c6:50:47:6f:65:ba:d4:
24:e3:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:00:38 2024 by rpki-client on console-fra.rpki-client.org