Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32322e302f32342d3234203d3e2030.roa
File: 38342e35342e32322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: LxdsT51E/tifLyfSAyQk/bj9QKiZ0eWmIHwoRhKPVDE=
Subject key identifier: 75:4E:1A:9A:84:3C:0A:51:5B:08:62:C4:27:7E:1C:AF:76:81:20:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E4BA9EA86F13A436247B045794D569FEC477A78
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32322e302f32342d3234203d3e2030.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 0
IP address blocks: 84.54.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 18:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4b:a9:ea:86:f1:3a:43:62:47:b0:45:79:4d:56:9f:ec:47:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=754E1A9A843C0A515B0862C4277E1CAF76812069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:7f:ec:c7:35:7e:26:36:6b:e2:64:ec:d0:
00:6d:25:ce:01:ec:03:bc:74:f0:e8:f7:58:99:a0:
bf:0a:9b:13:ab:e8:7f:eb:28:54:24:ae:5a:90:57:
e4:88:41:64:60:b8:76:56:0b:65:76:1e:0d:d1:b5:
f3:b7:d2:bc:a7:00:74:50:66:24:7f:3b:71:73:fd:
c7:40:41:f0:28:31:c1:9a:f0:59:09:0f:27:e6:b5:
34:34:87:15:f3:93:6a:29:02:85:3b:3a:42:7e:4e:
eb:49:c7:dd:62:44:98:5d:23:09:69:61:2e:56:ee:
61:00:b9:e3:71:56:2d:95:a2:8c:6c:8c:ab:97:46:
5d:50:36:1b:d8:eb:9d:42:da:44:64:e5:a8:39:d9:
c0:8a:ef:29:6b:bc:dd:b6:e2:e3:ee:81:be:18:fa:
03:bb:af:a1:80:01:64:09:6b:fb:60:b9:8e:ca:44:
a6:56:16:18:83:f0:a1:b8:ff:2a:8b:b5:0f:5e:36:
96:08:de:0d:dc:3e:14:ed:5f:e4:58:a1:a1:9d:fa:
70:fa:58:cb:19:c3:b4:95:6d:2a:7a:75:68:9c:0d:
29:25:8c:0d:f6:d5:59:cc:ff:e5:0c:52:93:0d:c4:
dd:8f:14:46:de:23:42:17:17:67:4c:c5:d7:3a:b3:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:1A:9A:84:3C:0A:51:5B:08:62:C4:27:7E:1C:AF:76:81:20:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.22.0/24
Signature Algorithm: sha256WithRSAEncryption
11:11:54:64:5d:79:38:95:c6:8b:76:80:8d:20:30:1a:77:58:
bd:24:68:6f:02:c9:3b:e6:9d:5f:35:c7:6d:b2:e9:37:64:a9:
46:19:6d:cd:8e:de:02:4c:c6:dd:d7:5c:03:57:d3:e3:75:ff:
87:fa:74:98:67:78:da:f4:50:74:44:29:a1:7f:27:6b:85:09:
ec:eb:57:7a:80:c7:f4:f6:b8:fc:c3:a7:49:36:af:17:ba:47:
55:10:7a:65:9a:3d:23:92:7f:c9:cb:08:cd:3f:f0:a6:75:b2:
3c:c4:49:8f:56:fd:61:d9:e7:9f:d2:1e:a4:42:54:33:6c:40:
9c:21:9e:a5:89:22:61:a6:f0:57:c5:40:ef:0b:4a:48:c4:56:
3d:9a:0b:ed:aa:08:77:20:7c:4c:03:c0:74:9b:31:43:a9:89:
71:16:73:69:55:19:fc:18:1f:85:1d:7d:7c:c4:05:1a:55:c6:
94:cc:99:cb:f9:cf:1d:9f:b4:38:c4:fc:51:53:af:42:e7:9f:
97:3e:26:4d:77:b6:12:23:75:98:c8:df:bc:5d:6c:62:ac:db:
ff:5a:77:37:fb:72:cd:b6:b8:14:e2:f0:06:11:f4:79:95:91:
e3:7c:7d:28:b4:4a:d1:42:1c:8b:6a:11:1d:6b:3d:65:fd:05:
d7:1b:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 18:56:52 2024 by rpki-client on console-ams.rpki-client.org