Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20383334.roa
File: 36322e3132322e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zWsvq8JrqQ9vaiajSk6/WEb8GUzN96axLKSN5HSNgOc=
Subject key identifier: 34:4B:D3:B0:8E:93:D9:FE:AE:27:0A:D4:41:BE:E4:CB:9B:39:B5:A1
Certificate issuer: /CN=be1602129721f44032c45a0138dd897317b19cc5
Certificate serial: 2F8288D5DDC1E8BF97CD43FE0166E5908D57C99F
Authority key identifier: BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Apr 2023 00:00:12 +0000
ROA not before: Mon 03 Apr 2023 23:55:12 +0000
ROA not after: Tue 02 Apr 2024 00:00:12 +0000
asID: 834
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:82:88:d5:dd:c1:e8:bf:97:cd:43:fe:01:66:e5:90:8d:57:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1602129721f44032c45a0138dd897317b19cc5
Validity
Not Before: Apr 3 23:55:12 2023 GMT
Not After : Apr 2 00:00:12 2024 GMT
Subject: CN=344BD3B08E93D9FEAE270AD441BEE4CB9B39B5A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:fe:8e:97:8b:51:98:9a:ec:cc:d6:8b:0b:
46:89:c2:56:59:ea:65:78:ea:ae:83:9d:a6:f2:50:
bf:a8:cf:2d:c4:54:48:39:1d:50:38:39:ec:2e:0f:
9e:21:d6:94:6d:9e:57:a4:39:98:60:1d:76:37:80:
76:e0:61:32:22:ab:e8:e1:ca:58:f9:3b:8e:e2:c7:
ca:6d:7e:c4:ce:00:4c:78:2b:63:c8:89:23:92:ab:
09:43:73:b7:6e:bc:e5:91:17:50:51:c6:44:3c:57:
c6:49:a1:54:85:9d:95:46:ff:39:ea:01:41:eb:14:
a7:89:5a:ad:17:da:06:59:8c:18:fc:9b:df:54:72:
2f:e4:1a:51:4f:f6:b8:9e:82:f2:ca:d7:54:7b:4a:
09:5c:53:b7:92:cd:1e:f2:89:db:9f:b1:19:ec:1e:
e1:f6:cf:eb:b3:b9:88:9f:d2:9b:11:73:77:bf:58:
be:98:90:19:35:0d:c8:a2:38:30:7c:46:ae:c5:9a:
6b:f7:34:24:24:3c:28:9d:54:69:46:0b:e5:1e:e2:
bf:df:68:0b:5c:a7:62:51:ab:e6:75:ff:63:17:db:
3f:fd:8b:58:34:4a:44:ed:0b:0c:ec:d0:5d:b5:63:
c8:a8:58:cf:95:2c:bf:14:bf:ba:22:83:6a:7b:92:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:D3:B0:8E:93:D9:FE:AE:27:0A:D4:41:BE:E4:CB:9B:39:B5:A1
X509v3 Authority Key Identifier:
keyid:BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
39:28:47:12:40:08:07:76:fe:85:51:66:de:68:07:db:d8:82:
a5:a3:b7:eb:82:d4:11:e5:ae:7e:e1:eb:e1:7c:b9:1f:41:20:
fb:ba:70:de:7a:b6:e9:b9:2d:f1:63:1b:73:f3:15:bc:ba:cd:
b2:5f:b7:65:ea:f3:7c:32:2c:80:79:9c:d3:ac:f3:b2:af:77:
ab:46:a0:e4:3f:f1:b0:ff:3f:44:98:da:a3:5b:1c:53:42:f8:
a0:47:7a:65:c0:70:95:ea:d2:42:2f:eb:d5:c0:7c:99:e4:fd:
4d:a4:b7:55:82:01:dd:b2:51:72:23:90:83:d5:a2:be:e2:75:
0c:1e:91:5e:90:02:1e:eb:3c:60:a9:fb:42:26:45:b5:2d:e7:
aa:66:53:e1:56:85:26:6d:3a:7e:bc:60:e7:2d:b6:cb:1a:7b:
f0:c6:45:2a:1c:fe:ed:d9:0a:84:e6:bb:3b:4a:73:9b:20:71:
8d:1a:99:fd:92:b9:cf:b1:a2:09:c0:16:ec:f9:cd:49:93:6b:
bd:55:a1:ad:ee:f9:9a:8b:77:60:8e:ca:80:0a:01:be:ae:89:
f0:63:7c:a1:96:31:48:55:06:13:2b:7e:52:0c:4c:1c:ba:b0:
91:63:c7:48:fd:a2:93:a9:34:26:73:62:f1:6a:fe:81:b9:3f:
84:53:0c:38
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUL4KI1d3B6L+XzUP+AWblkI1XyZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUxNjAyMTI5NzIxZjQ0MDMyYzQ1YTAxMzhkZDg5NzMx
N2IxOWNjNTAeFw0yMzA0MDMyMzU1MTJaFw0yNDA0MDIwMDAwMTJaMDMxMTAvBgNV
BAMTKDM0NEJEM0IwOEU5M0Q5RkVBRTI3MEFENDQxQkVFNENCOUIzOUI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP/6Ol4tRmJrszNaLC0aJwlZZ
6mV46q6DnabyUL+ozy3EVEg5HVA4OewuD54h1pRtnlekOZhgHXY3gHbgYTIiq+jh
ylj5O47ix8ptfsTOAEx4K2PIiSOSqwlDc7duvOWRF1BRxkQ8V8ZJoVSFnZVG/znq
AUHrFKeJWq0X2gZZjBj8m99Uci/kGlFP9riegvLK11R7SglcU7eSzR7yidufsRns
HuH2z+uzuYif0psRc3e/WL6YkBk1DciiODB8Rq7Fmmv3NCQkPCidVGlGC+Ue4r/f
aAtcp2JRq+Z1/2MX2z/9i1g0SkTtCwzs0F21Y8ioWM+VLL8Uv7oig2p7kgD3AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUNEvTsI6T2f6uJwrUQb7ky5s5taEwHwYDVR0j
BBgwFoAUvhYCEpch9EAyxFoBON2JcxexnMUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEtNmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJi
NjgyLzAvQkUxNjAyMTI5NzIxRjQ0MDMyQzQ1QTAxMzhERDg5NzMxN0IxOUNDNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZoWUNFcGNoOUVBeXhGb0JPTjJKY3hl
eG5NVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEt
NmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJiNjgyLzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+erow
DQYJKoZIhvcNAQELBQADggEBADkoRxJACAd2/oVRZt5oB9vYgqWjt+uC1BHlrn7h
6+F8uR9BIPu6cN56tum5LfFjG3PzFby6zbJft2Xq83wyLIB5nNOs87Kvd6tGoOQ/
8bD/P0SY2qNbHFNC+KBHemXAcJXq0kIv69XAfJnk/U2kt1WCAd2yUXIjkIPVor7i
dQwekV6QAh7rPGCp+0ImRbUt56pmU+FWhSZtOn68YOcttssae/DGRSoc/u3ZCoTm
uztKc5sgcY0amf2Suc+xognAFuz5zUmTa71Voa3u+ZqLd2COyoAKAb6uifBjfKGW
MUhVBhMrflIMTBy6sJFjx0j9opOpNCZzYvFq/oG5P4RTDDg=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org