Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20313430393437.roa
File: 36322e3132322e3138362e302f32342d3234203d3e20313430393437.roa (raw, json)
Hash identifier: 0qRDnHO3FNYaZBHYr6mZBjCTO/n2Y9BAQZQ0kQgnAe8=
Subject key identifier: AD:E3:A5:09:45:8D:41:75:52:9D:14:22:19:48:8A:8B:1F:D1:68:3E
Certificate issuer: /CN=be1602129721f44032c45a0138dd897317b19cc5
Certificate serial: 5C38C89F22AF74236A9D9B87678B6AA97C12D764
Authority key identifier: BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20313430393437.roa
Signing time: Wed 22 Mar 2023 19:39:28 +0000
ROA not before: Wed 22 Mar 2023 19:34:28 +0000
ROA not after: Wed 20 Mar 2024 19:39:28 +0000
asID: 140947
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:38:c8:9f:22:af:74:23:6a:9d:9b:87:67:8b:6a:a9:7c:12:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1602129721f44032c45a0138dd897317b19cc5
Validity
Not Before: Mar 22 19:34:28 2023 GMT
Not After : Mar 20 19:39:28 2024 GMT
Subject: CN=ADE3A509458D4175529D142219488A8B1FD1683E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:af:1f:52:ba:86:d6:5a:e3:5c:09:0f:11:
2f:b4:9b:69:b7:c2:1e:69:38:bc:4b:e8:ce:f1:3a:
16:a4:8a:56:49:ad:2c:c2:c8:32:ef:d0:c8:4d:dd:
1a:48:60:7b:b3:ec:95:66:00:db:22:bb:57:e2:64:
55:f1:e7:17:6d:c3:6c:35:ae:7d:b2:71:7c:3e:59:
79:14:85:f8:49:87:02:da:03:78:1e:41:61:48:cd:
f6:33:ba:80:60:9d:2a:63:f2:4f:4b:69:30:48:8d:
c1:8d:4b:27:d4:54:1c:82:24:8b:75:22:86:88:1a:
31:b6:de:de:39:ff:6c:30:b8:7e:1c:5e:06:e9:3f:
ea:cb:63:1e:e8:90:74:45:7c:f9:07:15:81:cb:57:
9a:a7:a4:6c:b7:e9:c4:5d:1d:93:c1:23:15:7d:51:
d8:e8:63:fe:55:9f:ff:23:d7:86:16:d9:c7:7c:81:
48:80:db:ae:42:6c:e9:c6:e8:0c:bb:54:7d:9c:a9:
8f:cd:79:1a:2e:61:4a:c5:3c:7a:87:b8:bd:f2:1e:
51:77:73:bd:c9:56:14:3a:e2:91:3c:af:00:a0:74:
66:af:36:2c:4b:98:21:6b:3e:bd:b7:ef:6b:8a:db:
7f:91:68:f8:d3:84:76:d6:8e:d0:f5:fd:ee:c7:e7:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:A5:09:45:8D:41:75:52:9D:14:22:19:48:8A:8B:1F:D1:68:3E
X509v3 Authority Key Identifier:
keyid:BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20313430393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:74:70:21:ee:b0:ae:3a:bf:9b:4e:a4:85:a6:de:0d:1f:b0:
de:c1:8c:cf:df:a7:d9:6d:aa:38:12:05:58:71:f8:6e:92:78:
e1:b3:e7:da:49:93:f8:6b:e2:a5:ea:c2:08:00:f4:b0:bf:9f:
89:e7:1e:55:6d:aa:02:fe:59:26:7b:b6:af:e9:d3:e5:5f:d5:
2f:4b:6d:3d:e0:a8:5a:fe:fc:23:18:e9:e7:d5:34:77:14:c7:
10:bb:ba:f3:aa:6f:6f:b4:3b:48:b9:74:07:7a:7e:20:a9:94:
08:53:b9:e1:75:f3:f9:40:65:17:3d:51:ad:1b:d5:92:9b:bc:
80:34:a4:fc:41:ba:1d:ff:1d:b1:51:25:90:df:98:cd:dc:18:
ea:19:49:86:0c:0a:47:d3:38:90:df:24:1c:24:34:a5:ff:7c:
c2:4a:86:80:14:38:97:0c:61:db:e6:35:67:98:a6:dc:32:d0:
ee:8e:fd:bd:79:b4:9b:a4:d8:62:f4:15:f3:f7:9a:70:b2:d4:
0c:45:59:1f:09:f4:bd:dd:00:a5:82:58:e1:c9:86:2e:dc:1d:
21:55:82:91:7a:a1:87:b8:22:ef:8c:bb:30:58:e4:4e:80:97:
f8:b8:f3:62:d6:1a:b1:79:3d:d8:88:d7:62:4d:41:6f:0b:03:
4f:49:32:33
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXDjInyKvdCNqnZuHZ4tqqXwS12QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUxNjAyMTI5NzIxZjQ0MDMyYzQ1YTAxMzhkZDg5NzMx
N2IxOWNjNTAeFw0yMzAzMjIxOTM0MjhaFw0yNDAzMjAxOTM5MjhaMDMxMTAvBgNV
BAMTKEFERTNBNTA5NDU4RDQxNzU1MjlEMTQyMjE5NDg4QThCMUZEMTY4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvq8fUrqG1lrjXAkPES+0m2m3
wh5pOLxL6M7xOhakilZJrSzCyDLv0MhN3RpIYHuz7JVmANsiu1fiZFXx5xdtw2w1
rn2ycXw+WXkUhfhJhwLaA3geQWFIzfYzuoBgnSpj8k9LaTBIjcGNSyfUVByCJIt1
IoaIGjG23t45/2wwuH4cXgbpP+rLYx7okHRFfPkHFYHLV5qnpGy36cRdHZPBIxV9
UdjoY/5Vn/8j14YW2cd8gUiA265CbOnG6Ay7VH2cqY/NeRouYUrFPHqHuL3yHlF3
c73JVhQ64pE8rwCgdGavNixLmCFrPr2372uK23+RaPjThHbWjtD1/e7H5+ZnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUreOlCUWNQXVSnRQiGUiKix/RaD4wHwYDVR0j
BBgwFoAUvhYCEpch9EAyxFoBON2JcxexnMUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEtNmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJi
NjgyLzAvQkUxNjAyMTI5NzIxRjQ0MDMyQzQ1QTAxMzhERDg5NzMxN0IxOUNDNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZoWUNFcGNoOUVBeXhGb0JPTjJKY3hl
eG5NVS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEt
NmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJiNjgyLzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzOTM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA+erowDQYJKoZIhvcNAQELBQADggEBAHN0cCHusK46v5tOpIWm3g0fsN7BjM/f
p9ltqjgSBVhx+G6SeOGz59pJk/hr4qXqwggA9LC/n4nnHlVtqgL+WSZ7tq/p0+Vf
1S9LbT3gqFr+/CMY6efVNHcUxxC7uvOqb2+0O0i5dAd6fiCplAhTueF18/lAZRc9
Ua0b1ZKbvIA0pPxBuh3/HbFRJZDfmM3cGOoZSYYMCkfTOJDfJBwkNKX/fMJKhoAU
OJcMYdvmNWeYptwy0O6O/b15tJuk2GL0FfP3mnCy1AxFWR8J9L3dAKWCWOHJhi7c
HSFVgpF6oYe4Iu+MuzBY5E6Al/i482LWGrF5PdiI12JNQW8LA09JMjM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org