Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e203631333137.roa
File: 36322e3132322e3138392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1utvLm95NfxACdiIRvmvIMvKw67fFakzeORXM3wwnXo=
Subject key identifier: AE:66:56:EA:1B:AC:B8:8B:B4:C5:66:38:D3:F7:C6:D6:B0:87:63:51
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 128A1624BA37A007D7531D3A3D7D1D181DF9246C
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e203631333137.roa
Signing time: Sat 09 Mar 2024 15:46:08 +0000
ROA not before: Sat 09 Mar 2024 15:41:08 +0000
ROA not after: Sat 08 Mar 2025 15:46:08 +0000
asID: 61317
IP address blocks: 62.122.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8a:16:24:ba:37:a0:07:d7:53:1d:3a:3d:7d:1d:18:1d:f9:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Mar 9 15:41:08 2024 GMT
Not After : Mar 8 15:46:08 2025 GMT
Subject: CN=AE6656EA1BACB88BB4C56638D3F7C6D6B0876351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:b9:ce:64:63:b6:c8:be:6f:27:f7:9c:e9:
f7:0a:2c:72:1c:15:4d:45:41:f5:3e:2a:d2:3e:72:
84:00:b9:ff:6f:e9:74:08:86:6a:6b:30:b9:44:eb:
b0:52:97:c4:68:c4:10:ec:a5:f6:c8:74:b2:e8:8d:
4a:75:0b:78:65:20:88:b9:9d:56:31:45:a4:d8:29:
d7:78:0a:10:7e:31:78:1e:ef:f1:4b:a4:1e:c6:53:
a7:65:6e:f2:7b:92:3a:38:ac:6b:e5:29:19:c5:01:
16:d7:4f:36:49:04:2c:9d:77:f4:74:f7:73:12:20:
60:c3:7e:3b:a7:cf:72:f3:00:03:14:12:5b:6c:c9:
13:44:e5:33:85:03:d2:1e:4c:83:cf:46:0b:12:69:
ae:c2:86:ac:15:39:6c:9d:27:05:e0:73:1f:20:9a:
0a:c0:8f:26:72:bd:83:47:1c:56:5b:46:5b:9d:1a:
72:45:0a:48:a1:23:c2:3f:b5:ae:fb:31:ef:4a:9b:
01:39:fc:8b:cb:fb:0b:e9:2f:b6:dc:a0:11:30:42:
9c:40:21:79:b8:cb:86:56:11:cd:0f:90:e7:48:95:
43:c2:21:6d:16:86:c9:d0:37:5e:77:66:30:b3:8d:
f1:a4:d3:12:a1:d0:c7:db:50:69:8b:e8:03:e6:e4:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:56:EA:1B:AC:B8:8B:B4:C5:66:38:D3:F7:C6:D6:B0:87:63:51
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1b:69:d6:3e:28:3e:cc:eb:fb:75:ad:7c:60:3f:cf:56:a8:
a6:2a:22:c2:06:6c:d8:a2:94:de:84:b7:f1:85:79:f3:97:e9:
61:46:f7:60:b9:3d:44:97:20:5c:51:aa:38:4c:8f:81:af:80:
fe:32:a9:ba:10:aa:a4:c2:56:91:ec:b8:3c:61:8a:99:11:70:
36:ff:ab:4b:e1:6a:30:b6:95:08:03:eb:86:7f:83:be:10:31:
e2:af:4e:aa:b3:89:4f:ec:9f:89:8a:f1:4f:d7:69:99:4b:46:
fd:61:f7:ee:4d:43:20:c0:0f:ac:2e:6f:e4:0b:7a:8a:62:e0:
28:bb:7d:12:af:7c:b2:32:e7:30:33:fb:c7:2c:8e:a4:4e:a3:
7e:2b:11:15:ef:87:f8:65:cb:4a:22:03:cb:d9:b1:ac:04:b9:
d2:26:66:ee:ee:8a:da:da:fa:12:7d:fd:68:8b:e3:25:55:39:
e8:c1:90:71:36:e0:03:63:bc:27:7b:13:0a:e1:30:ca:07:7d:
96:91:8a:b8:6c:2f:15:e7:8f:70:bb:62:ad:39:e0:27:77:5e:
8d:17:f3:f0:38:e3:ee:59:4e:2d:87:af:4d:1a:4e:3f:33:23:
dd:b9:43:d6:77:0b:7d:a8:93:83:f2:dc:86:5c:4c:76:cd:0b:
6a:c7:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 00:57:04 2024 by rpki-client on console-ams.rpki-client.org