Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
File: 33362e3235352e39322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: dpoLT1BQFAD4VaZu0WueuAYo5r46O5cOD2BXM0v/iho=
Subject key identifier: 60:BA:11:89:7D:4F:14:9D:3A:72:4D:42:CD:65:DF:43:09:E0:5A:12
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 42D6675BDF72A3068279B629402BF77236C8C04C
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
Signing time: Mon 15 Jan 2024 00:00:05 +0000
ROA not before: Sun 14 Jan 2024 23:55:05 +0000
ROA not after: Mon 13 Jan 2025 00:00:05 +0000
asID: 834
IP address blocks: 36.255.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 07:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d6:67:5b:df:72:a3:06:82:79:b6:29:40:2b:f7:72:36:c8:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 14 23:55:05 2024 GMT
Not After : Jan 13 00:00:05 2025 GMT
Subject: CN=60BA11897D4F149D3A724D42CD65DF4309E05A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:17:6f:f2:45:e5:96:bc:1f:ce:51:01:cd:
b0:08:c5:86:3d:cf:00:e0:b7:f0:8b:dd:8e:2e:14:
7c:bb:1a:45:0b:14:a6:88:f1:df:40:3a:0f:97:76:
6d:52:31:f7:70:4f:8f:53:63:0f:32:3f:dd:d7:62:
aa:da:ff:18:59:48:83:79:14:8a:7e:c7:71:a9:1c:
fe:ce:1e:44:f0:75:db:74:5a:51:cb:c8:36:76:32:
c3:34:3f:75:c8:b4:27:40:8e:e4:29:01:fb:a1:92:
44:c9:eb:40:e9:26:05:37:22:f5:9c:b5:22:51:89:
29:e8:84:dc:40:c7:00:03:72:66:4b:27:14:95:0d:
35:c5:f0:e8:e4:1f:78:8c:f5:e1:e8:f8:8c:36:bb:
f8:a9:9b:d7:7d:99:1f:6b:a1:83:91:d5:72:86:7e:
1d:9d:55:5a:c3:67:e9:0c:29:3c:3e:0f:e6:87:93:
03:ce:2c:b4:4d:d6:c2:70:d3:7a:a0:c9:7a:3e:ab:
af:3a:0f:bc:ec:30:3a:68:f9:b4:cd:3c:ab:64:1d:
f1:91:2b:38:69:d1:22:ff:b7:71:17:50:db:d7:6d:
ad:6f:77:80:40:96:82:bc:b1:d6:95:dc:67:c6:2c:
5d:56:43:bd:94:ea:f8:95:a0:af:d1:1a:c9:51:ab:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:11:89:7D:4F:14:9D:3A:72:4D:42:CD:65:DF:43:09:E0:5A:12
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/23
Signature Algorithm: sha256WithRSAEncryption
68:cc:3b:41:b0:0e:bf:75:de:65:5c:e8:c8:e7:e0:c0:94:01:
da:f3:7e:fb:5e:e9:ed:3d:ff:e9:c6:d5:54:d4:a6:5f:5f:4c:
4c:2e:f1:82:f5:62:8e:25:5d:11:54:0a:7d:c8:d0:d6:0d:d9:
0d:ea:29:80:0b:7d:54:57:1f:66:1d:42:25:b8:56:97:e3:a9:
4e:37:09:d9:ad:31:ea:05:54:01:7a:81:d0:83:65:12:5f:12:
4f:5f:6a:08:b5:51:ca:a3:7a:79:2d:a9:38:bd:30:08:60:95:
41:b3:db:26:09:66:ae:ed:ff:6a:36:2c:e9:2a:4a:96:bc:68:
3a:2f:93:63:e9:e9:30:0b:bf:a8:18:01:fc:99:cc:29:cc:26:
73:38:64:58:cf:fb:7d:58:35:a9:f9:21:3a:a3:69:d9:31:94:
25:3c:2c:79:37:90:5a:1e:79:4f:5e:51:cf:07:d7:7f:43:8d:
c4:a0:59:16:8d:8e:16:b8:d9:50:f7:32:f7:4b:98:0d:02:3c:
5c:ba:2c:83:c7:f1:27:2f:3a:9c:9a:c0:88:7f:11:4b:fa:33:
d4:48:e0:9d:59:d0:d8:d0:19:d9:bd:09:96:65:13:ce:d5:3a:
d3:b5:4f:e8:fa:fa:0b:f2:f4:7f:90:cc:84:62:64:0b:c4:89:
47:39:7a:96
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 20 09:21:43 2024 by rpki-client on console-ams.rpki-client.org