Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32302e302f32332d3234203d3e2030.roa
File: 38342e35342e32302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: brFh0XfL8x5Ta+tbYtyH9RQJkxnnyIO8Q6JZUJ+cRqI=
Subject key identifier: 9C:9F:94:7A:F9:01:C8:F2:2A:81:E9:F4:A9:AB:8D:ED:AF:4A:D5:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1441327D45E28EFFDD838BBC1642D71ACD16C839
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32302e302f32332d3234203d3e2030.roa
Signing time: Fri 20 Oct 2023 13:41:50 +0000
ROA not before: Fri 20 Oct 2023 13:36:50 +0000
ROA not after: Fri 18 Oct 2024 13:41:50 +0000
asID: 0
IP address blocks: 84.54.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 18:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:41:32:7d:45:e2:8e:ff:dd:83:8b:bc:16:42:d7:1a:cd:16:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:50 2023 GMT
Not After : Oct 18 13:41:50 2024 GMT
Subject: CN=9C9F947AF901C8F22A81E9F4A9AB8DEDAF4AD5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:95:03:3b:20:7c:9c:03:af:19:aa:54:0d:
f3:ef:f8:ff:5b:2d:1a:72:78:87:62:23:a8:4a:34:
eb:4e:99:aa:90:6c:d3:92:ef:5b:8c:87:6e:f3:e1:
f6:78:0c:7f:0b:63:d1:c7:fd:d7:59:be:ae:b9:93:
97:b5:8f:a0:31:a2:8e:b5:0c:e4:67:5a:ce:b8:11:
17:fa:ec:a4:da:da:30:6f:c8:1e:ba:7e:23:40:bf:
ac:d5:20:35:9f:1c:5a:1d:c9:e1:87:ec:f7:9a:fc:
f7:6e:47:89:2d:e7:6e:c9:a4:7c:1c:36:bb:35:89:
23:f0:95:1c:a5:80:fb:87:9e:ab:9a:5f:51:9d:32:
52:66:b6:6c:29:38:d3:fd:b5:d8:00:91:d1:90:6f:
b3:b1:6a:2d:43:b8:f9:0c:0d:38:ee:e4:06:da:41:
09:73:ed:44:d2:ab:2e:d8:9a:18:a5:5f:f6:8d:50:
71:b0:be:f6:63:9a:93:bf:3b:eb:c5:ca:84:8b:3f:
91:04:e4:a7:fb:44:32:63:d7:f6:a2:c1:94:ef:89:
97:c0:6c:3f:86:9f:20:74:bc:4c:a7:c3:09:73:6c:
7b:95:10:0c:53:ca:6c:d6:29:53:36:af:1d:20:ae:
52:d3:c8:51:ea:88:f4:12:7f:ed:13:b3:71:2e:0c:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:94:7A:F9:01:C8:F2:2A:81:E9:F4:A9:AB:8D:ED:AF:4A:D5:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.20.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e8:6c:46:46:cc:b3:6f:6f:0c:db:13:23:fd:d0:db:5a:39:
15:8c:9c:24:e5:68:7d:01:0c:aa:62:57:e4:c3:bd:bf:cb:bb:
b3:f4:b4:31:47:8e:98:4a:e1:d2:1d:0a:1d:78:2f:4a:1d:01:
02:1e:43:42:6e:08:0d:3f:3e:d2:22:16:c3:b4:18:1e:84:76:
33:da:63:18:fb:19:2e:cb:91:09:4e:91:97:91:3b:d0:80:37:
c4:25:a1:08:2d:12:38:54:b3:04:59:d7:13:a9:37:16:29:86:
5b:58:9b:08:d8:11:09:fb:f1:77:bd:d9:d0:e8:56:df:f4:34:
36:89:76:1f:fb:27:02:29:66:e7:e5:2c:97:bc:7c:97:ba:50:
84:bf:67:72:a8:68:bf:f9:e1:0f:5f:73:db:fc:ee:86:d7:a4:
10:90:a9:ed:97:c5:4b:1a:e0:06:a5:f5:d3:76:db:fd:e6:60:
69:2c:e7:26:20:25:4a:c3:7c:a5:14:e2:4a:ba:3d:a8:05:52:
e6:fb:0a:68:d1:36:81:ee:1e:01:5a:7a:a5:d4:be:97:9e:3c:
04:34:c3:7e:e1:e9:4f:b0:74:03:7e:c2:42:f0:03:12:17:78:
d6:fd:b5:00:3f:c1:0b:bd:6c:50:df:4f:a0:ae:9a:34:95:18:
ed:14:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 18:57:46 2024 by rpki-client on console-fra.rpki-client.org