Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
File: 36322e3132322e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2D1eu56db816DAduYlCemnSsQZCabjDp1BojLR36Dec=
Subject key identifier: EB:DE:82:BC:93:92:06:CD:64:AE:FF:54:EF:BF:95:A8:4D:3F:2A:99
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 32E111DCE27E1619D8DCB01F8B97D573F5DED7C0
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
Signing time: Tue 09 Apr 2024 00:02:46 +0000
ROA not before: Mon 08 Apr 2024 23:57:46 +0000
ROA not after: Tue 08 Apr 2025 00:02:46 +0000
asID: 834
IP address blocks: 62.122.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 15:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:11:dc:e2:7e:16:19:d8:dc:b0:1f:8b:97:d5:73:f5:de:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Apr 8 23:57:46 2024 GMT
Not After : Apr 8 00:02:46 2025 GMT
Subject: CN=EBDE82BC939206CD64AEFF54EFBF95A84D3F2A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:43:e3:f4:56:cb:f2:4e:38:a7:cf:a6:45:
0f:f1:ec:76:f5:3f:32:57:91:cc:f9:4d:7d:29:7e:
9a:bd:e6:e3:1c:e1:9d:27:35:2e:7e:06:6e:aa:11:
b5:06:da:66:27:62:37:37:3f:20:62:12:06:72:b7:
f8:d6:80:86:7b:2a:8a:d1:6c:2f:83:19:68:1d:a9:
c2:06:17:2b:2f:88:2a:d5:27:d9:77:f8:2d:68:71:
ee:f5:fd:27:a6:f0:c5:f0:57:78:c8:42:4f:7a:27:
51:cb:93:dd:be:d5:31:63:0d:75:b2:5d:27:0d:1a:
fa:07:5b:5c:f7:f1:91:1c:33:b6:18:50:49:38:97:
18:85:3e:d8:d4:f3:93:c2:80:7f:2a:b7:4c:92:57:
29:11:0c:a8:a1:9a:1c:5c:dd:f9:08:44:7a:10:9a:
2d:09:1e:22:38:86:72:0e:ed:51:e9:08:ec:33:be:
eb:9d:5d:45:d4:53:57:1b:c5:6f:6a:02:bc:a7:16:
2f:1b:e9:04:6d:60:e6:82:3c:0d:14:fd:d6:a7:8d:
e5:76:8b:1a:32:3a:43:5e:78:bb:cd:11:3f:5f:b1:
dc:8c:29:e2:ab:0a:b2:d2:d5:a5:34:9e:f6:11:8f:
de:11:8f:16:c5:a0:99:3d:9f:7f:bd:1b:c5:78:54:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:82:BC:93:92:06:CD:64:AE:FF:54:EF:BF:95:A8:4D:3F:2A:99
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c1:5a:f0:64:bf:a1:f5:93:f6:5c:ed:32:26:35:54:49:4c:
35:76:26:2d:82:6f:6f:04:b8:49:57:9a:e0:e7:72:f2:2f:ed:
26:fa:44:8d:04:40:30:4b:76:89:60:4e:a6:d0:73:ba:22:1d:
9a:f1:0c:09:48:61:ed:00:40:1d:ee:a9:1b:d0:ac:7b:3c:e8:
02:70:cc:d6:f0:41:46:34:5b:99:a3:12:e0:b2:72:8f:e0:31:
6c:59:55:5b:c4:db:aa:e9:7b:3c:b2:5d:c7:19:29:a5:23:9c:
7a:c0:94:21:ae:5a:d6:d9:e9:1b:c3:15:d0:a1:e8:13:e0:ac:
12:7e:7b:f0:da:84:db:b6:1b:0d:55:ca:db:5e:92:48:95:77:
7f:49:e6:34:24:9c:3b:94:75:26:4f:01:30:db:a6:b5:cf:9b:
ed:d2:7e:db:39:7a:fe:39:e4:bf:72:3d:13:09:24:51:dc:6c:
f3:62:f5:2e:0d:b9:35:06:19:2c:a4:73:03:ac:5e:2f:89:fb:
6e:1d:7f:bf:54:46:8f:ff:e9:2e:bc:47:e3:d8:b5:b6:d8:cb:
da:40:15:0a:aa:af:f3:7c:a2:b7:62:ed:06:ba:1f:0f:dd:de:
51:7b:d5:ee:e0:28:a3:c5:c1:86:88:02:53:cf:83:44:8d:97:
f8:c5:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:22:50 2024 by rpki-client on console-ams.rpki-client.org