Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa
File: 36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa (raw, json)
Hash identifier: 9601zygN8QizLfMnsDjIw0AuxPMgP/dHpxrFy5qQ5Ys=
Subject key identifier: 41:67:4B:B4:54:97:37:00:C5:56:05:E1:87:DE:5A:D7:79:02:79:15
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 68874A218EEA587D213A044A9E98B164D8992E41
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa
Signing time: Sat 16 Dec 2023 07:28:32 +0000
ROA not before: Sat 16 Dec 2023 07:23:32 +0000
ROA not after: Sat 14 Dec 2024 07:28:32 +0000
asID: 209940
IP address blocks: 62.122.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:87:4a:21:8e:ea:58:7d:21:3a:04:4a:9e:98:b1:64:d8:99:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Dec 16 07:23:32 2023 GMT
Not After : Dec 14 07:28:32 2024 GMT
Subject: CN=41674BB454973700C55605E187DE5AD779027915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:f7:0d:f7:4d:58:a4:e9:b9:2b:dd:8a:aa:
b3:73:87:16:e8:1d:8b:9c:5e:ef:ea:44:57:cf:6f:
5e:86:1d:3b:ae:55:30:43:0e:69:d4:2b:80:58:2a:
cb:45:a4:47:82:79:0d:bc:f2:f7:92:96:7a:a1:2a:
fe:87:de:ec:a7:fc:7c:27:0c:1e:76:e5:12:f0:5b:
29:f5:7d:b4:19:83:01:85:c3:4d:d7:a1:a5:c7:ea:
a1:dc:29:68:f4:9b:60:87:d7:71:cb:50:5e:b3:c1:
30:fd:ad:93:f4:24:99:7b:da:c7:7f:bd:8d:d8:2c:
0b:cf:1d:94:0d:8c:18:4c:bf:74:ce:61:e5:5c:a8:
d0:92:96:8b:6e:04:64:55:e4:c1:a1:c7:a1:a9:7e:
22:c6:cc:1d:0b:2c:a4:cc:4b:a0:f4:93:02:0d:48:
2a:8a:1d:a4:bb:96:b9:d7:e3:c8:39:e6:05:a3:bc:
b3:f6:15:65:69:09:94:6f:0c:f9:c8:ee:30:f0:b1:
de:10:f0:de:df:67:23:71:88:01:96:27:6b:e7:c9:
1d:f9:2a:9f:5a:69:3a:4a:27:f7:05:5b:d9:6c:c6:
ad:62:c9:50:31:c0:f5:fb:0a:fa:56:d4:84:b2:93:
b0:ac:a9:b2:d0:00:13:bf:38:fb:ab:3c:dc:12:07:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:4B:B4:54:97:37:00:C5:56:05:E1:87:DE:5A:D7:79:02:79:15
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20323039393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:73:8e:5f:33:8b:fc:a8:50:41:2a:ce:93:16:85:d9:8e:d8:
c6:f8:bc:1a:82:9a:35:55:9a:b0:52:6e:bd:eb:81:c7:25:97:
86:db:01:96:26:f0:d3:7b:6d:57:92:70:bb:57:2a:76:8d:00:
ed:3d:33:de:8b:4f:e1:f5:16:09:8d:40:49:fe:61:d6:50:cb:
8f:ee:6e:f3:bf:d1:60:00:ea:f5:da:19:e8:be:79:30:b3:d0:
bb:7a:15:97:92:89:03:e8:63:7d:49:f0:e6:4d:92:67:ee:77:
43:f0:f0:48:5b:bc:1b:91:ce:aa:74:72:15:9d:3d:57:3d:c2:
93:e0:97:c8:27:a9:f7:8f:19:c7:11:3b:da:ce:d0:76:03:3c:
1d:fb:f2:2a:d9:96:18:78:22:00:30:3b:df:66:6a:b8:64:b4:
4f:35:8f:e2:81:49:3e:98:17:2e:bb:ce:34:bf:64:30:43:1a:
f5:e5:ab:01:0d:7b:fd:f0:ac:af:a3:ad:e5:f6:8e:3f:f2:0a:
bb:ef:cd:9a:e9:0a:6d:88:f5:3e:65:01:11:52:97:cc:8e:47:
22:e8:59:27:0f:85:38:0a:e1:c7:da:9c:c2:da:4e:bf:85:6c:
48:17:91:78:82:69:7b:8d:f6:d2:b4:a3:3d:06:2a:a4:1f:ef:
f9:ba:f4:90
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaIdKIY7qWH0hOgRKnpixZNiZLkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yMzEyMTYwNzIzMzJaFw0yNDEyMTQwNzI4MzJaMDMxMTAvBgNV
BAMTKDQxNjc0QkI0NTQ5NzM3MDBDNTU2MDVFMTg3REU1QUQ3NzkwMjc5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/fcN901YpOm5K92KqrNzhxbo
HYucXu/qRFfPb16GHTuuVTBDDmnUK4BYKstFpEeCeQ288veSlnqhKv6H3uyn/Hwn
DB525RLwWyn1fbQZgwGFw03XoaXH6qHcKWj0m2CH13HLUF6zwTD9rZP0JJl72sd/
vY3YLAvPHZQNjBhMv3TOYeVcqNCSlotuBGRV5MGhx6GpfiLGzB0LLKTMS6D0kwIN
SCqKHaS7lrnX48g55gWjvLP2FWVpCZRvDPnI7jDwsd4Q8N7fZyNxiAGWJ2vnyR35
Kp9aaTpKJ/cFW9lsxq1iyVAxwPX7CvpW1ISyk7CsqbLQABO/OPurPNwSBwizAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUQWdLtFSXNwDFVgXhh95a13kCeRUwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzOTM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA+er0wDQYJKoZIhvcNAQELBQADggEBABpzjl8zi/yoUEEqzpMWhdmO2Mb4vBqC
mjVVmrBSbr3rgccll4bbAZYm8NN7bVeScLtXKnaNAO09M96LT+H1FgmNQEn+YdZQ
y4/ubvO/0WAA6vXaGei+eTCz0Lt6FZeSiQPoY31J8OZNkmfud0Pw8EhbvBuRzqp0
chWdPVc9wpPgl8gnqfePGccRO9rO0HYDPB378irZlhh4IgAwO99marhktE81j+KB
ST6YFy67zjS/ZDBDGvXlqwENe/3wrK+jreX2jj/yCrvvzZrpCm2I9T5lARFSl8yO
RyLoWScPhTgK4cfanMLaTr+FbEgXkXiCaXuN9tK0oz0GKqQf7/m69JA=
-----END CERTIFICATE-----
Generated at Fri Mar 8 02:24:10 2024 by rpki-client on console-fra.rpki-client.org