Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203136353039.roa
File: 36322e38342e3137362e302f32302d3230203d3e203136353039.roa (raw, json)
Hash identifier: /AfIczXWJNYeBpqIaKXFgkUXEf5dDsS7k2ax8/J1ACM=
Subject key identifier: 81:B1:F8:83:BF:19:6B:56:DC:48:B7:7C:B6:C7:24:55:A2:52:35:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 690540CDE6DA0EFEE555C1695452BF54754E18B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203136353039.roa
Signing time: Tue 09 Jan 2024 09:07:07 +0000
ROA not before: Tue 09 Jan 2024 09:02:07 +0000
ROA not after: Tue 07 Jan 2025 09:07:07 +0000
asID: 16509
IP address blocks: 62.84.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:05:40:cd:e6:da:0e:fe:e5:55:c1:69:54:52:bf:54:75:4e:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 9 09:02:07 2024 GMT
Not After : Jan 7 09:07:07 2025 GMT
Subject: CN=81B1F883BF196B56DC48B77CB6C72455A25235A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:3f:82:04:19:4c:2d:77:ae:98:a3:1e:94:
c5:d4:12:de:88:60:e9:28:ea:dc:59:cd:89:16:65:
85:20:b4:ce:89:bf:83:55:44:9a:8e:ba:58:82:14:
4e:01:62:61:00:05:d8:1c:4a:a8:76:72:da:0e:64:
a4:bc:6e:25:97:63:02:ed:56:cc:6c:3a:5b:45:3c:
c4:56:5f:c1:01:2c:e1:bf:e9:f7:12:17:63:4b:26:
e5:f9:51:26:71:95:cb:a9:2b:c0:70:ef:88:09:b2:
00:58:58:76:d0:6d:04:85:48:9b:39:10:10:0c:6f:
6e:9e:02:6f:9c:34:1b:2e:8b:32:ce:e0:33:b5:b2:
a1:a2:08:4e:f7:2f:ea:d5:45:40:4e:c9:67:8e:df:
e8:26:a9:50:a0:c6:74:e6:e2:b5:2f:a6:bd:5e:8d:
f0:d9:32:1f:e1:bb:91:01:04:b8:0c:72:ae:f2:1f:
5a:87:03:73:e8:16:40:41:13:2c:62:46:34:12:f7:
dd:ee:9e:71:cb:79:e9:d1:79:89:b8:35:a3:7e:31:
e2:4b:41:89:96:a2:09:22:4f:1e:b6:bc:e6:33:0e:
88:85:c0:96:4a:5a:9e:4f:61:45:3d:56:39:14:36:
f7:8d:4c:51:26:6d:17:3b:a4:00:5b:bb:c2:6b:bc:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:F8:83:BF:19:6B:56:DC:48:B7:7C:B6:C7:24:55:A2:52:35:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:0d:1a:8b:7b:18:fe:ed:32:4e:30:50:f6:bf:18:f3:f5:37:
35:5f:94:07:78:be:37:8b:3a:a9:96:59:67:2f:c1:06:3e:53:
ae:79:02:30:c0:54:64:e2:2f:89:c1:1e:c5:b8:c2:d4:c5:a2:
82:38:be:b6:9a:73:d8:fd:f5:db:3a:c7:75:94:97:4d:b1:df:
84:51:ef:20:0c:46:98:47:b6:7d:29:f2:df:6b:e8:53:bb:20:
26:00:18:79:79:4c:08:08:07:b3:be:25:cb:6d:09:78:7b:c6:
76:5e:4c:d5:c5:71:75:91:2e:1b:80:41:92:3b:66:b9:2a:df:
8d:fd:d1:97:37:14:7b:23:66:45:e8:3e:f5:e4:bc:6c:00:91:
34:52:c8:b7:bb:94:bc:7b:f7:75:9f:d9:73:03:4b:63:28:f1:
8a:dd:3c:cc:95:f8:51:49:c4:03:82:14:0f:95:b2:a7:85:46:
01:40:05:17:ca:9f:8d:31:b0:17:a3:39:16:5b:2f:7d:9b:9c:
1c:12:04:d2:ad:84:9b:3b:8f:07:c7:81:e0:62:86:09:03:b9:
3a:69:51:20:89:e1:29:54:c9:9b:8b:f4:77:e2:a9:98:99:b5:
0b:cc:9b:86:e5:49:6c:3c:c1:8e:45:42:46:f9:17:57:60:93:
5f:5e:df:9b
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 10 00:01:49 2024 by rpki-client on console-ams.rpki-client.org