Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e2030.roa
File: 36322e3139322e3137322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: ugDnhKrPoulhjGEZFmyxF+g4aoQm81CjxqhaXLACA0Y=
Subject key identifier: 9D:31:5C:FE:8A:9D:3B:0E:FC:7D:C7:53:17:B3:D1:25:86:FF:05:BE
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 2143CF52C7BEEE75C6706E7243785949090CE0B0
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e2030.roa
Signing time: Fri 18 Aug 2023 07:23:03 +0000
ROA not before: Fri 18 Aug 2023 07:18:03 +0000
ROA not after: Fri 16 Aug 2024 07:23:03 +0000
asID: 0
IP address blocks: 62.192.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:43:cf:52:c7:be:ee:75:c6:70:6e:72:43:78:59:49:09:0c:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 18 07:18:03 2023 GMT
Not After : Aug 16 07:23:03 2024 GMT
Subject: CN=9D315CFE8A9D3B0EFC7DC75317B3D12586FF05BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:cf:43:7b:44:94:e0:61:de:9c:2e:63:aa:
9b:39:71:9a:5f:b7:53:2c:66:7c:23:46:bf:9b:5c:
7c:d9:ae:62:0c:de:db:2b:22:89:9d:39:36:ca:f4:
95:0a:a1:c4:05:78:a3:45:e7:d8:52:2d:cb:c9:67:
f3:b7:ee:31:df:af:99:9e:94:93:a7:d4:05:91:ca:
8e:0f:06:51:4b:8c:52:41:43:ff:b6:3f:e6:d8:f2:
19:e7:a4:2e:19:98:45:c6:5c:65:e3:fd:a6:e5:e2:
0f:9f:82:dd:0f:31:58:d2:8f:9a:22:d1:1e:64:ad:
ab:af:44:f5:61:c4:c4:c4:81:f2:1d:71:7e:17:56:
94:85:cc:a4:97:06:3f:b5:da:6d:9f:f8:2a:64:4e:
ee:a6:6f:36:54:eb:99:1d:bd:f8:09:d6:24:f6:d1:
1a:b4:d0:4c:ad:4d:2c:be:dd:85:16:47:18:02:27:
65:26:76:8f:71:43:f0:5d:cf:7a:ff:67:88:c0:3f:
3f:47:90:74:a0:ce:75:b7:2e:89:e1:4f:06:bb:bd:
59:e8:b6:70:39:b6:04:62:5b:5c:17:c9:b3:8d:1e:
09:f3:47:71:bc:0e:23:2d:03:6c:f0:73:11:59:71:
88:cc:a0:2b:80:48:53:48:05:ae:c3:25:b7:87:51:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:5C:FE:8A:9D:3B:0E:FC:7D:C7:53:17:B3:D1:25:86:FF:05:BE
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
21:91:2a:7a:10:ad:d6:27:0f:20:12:55:b9:b3:58:99:5c:2b:
e4:d3:e1:62:60:a6:90:af:80:c5:b5:8a:ec:71:77:2c:d1:e8:
e7:e0:17:de:2f:fa:16:10:2f:ec:79:3f:82:c5:94:e1:55:be:
97:ec:5f:c3:20:00:6e:99:4a:69:81:71:58:19:a9:b3:79:91:
54:41:af:98:08:5f:46:e5:d3:78:78:f1:8d:92:eb:53:5a:44:
d4:d8:d7:b4:81:4f:9c:4d:a7:82:cb:36:69:8c:32:0a:7e:f0:
e8:05:72:40:20:61:ec:e7:14:ea:47:7d:21:20:35:8d:3b:e0:
2a:e9:66:75:34:57:5a:b6:8d:a3:ca:47:a9:8e:33:3a:d0:c0:
44:7d:f3:55:33:1a:b9:8c:10:5b:8a:88:cb:a9:aa:cb:5a:dc:
00:1b:5f:f1:40:f2:49:0b:4c:fe:a8:61:b4:af:05:63:35:c4:
2f:46:f1:d4:13:b5:ad:0c:b9:a8:6c:3c:3e:65:7f:20:a8:f1:
68:0b:08:58:b1:1a:d1:03:b1:bd:f7:9d:27:d1:b0:42:ba:c1:
3a:4c:0d:53:18:f3:af:20:09:01:4d:7f:01:fc:37:8f:bb:c1:
36:9d:9a:56:3b:2b:b5:57:13:d9:6d:c1:34:01:04:c6:d9:69:
cf:dd:fe:36
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUIUPPUse+7nXGcG5yQ3hZSQkM4LAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA4MTgwNzE4MDNaFw0yNDA4MTYwNzIzMDNaMDMxMTAvBgNV
BAMTKDlEMzE1Q0ZFOEE5RDNCMEVGQzdEQzc1MzE3QjNEMTI1ODZGRjA1QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0c9De0SU4GHenC5jqps5cZpf
t1MsZnwjRr+bXHzZrmIM3tsrIomdOTbK9JUKocQFeKNF59hSLcvJZ/O37jHfr5me
lJOn1AWRyo4PBlFLjFJBQ/+2P+bY8hnnpC4ZmEXGXGXj/abl4g+fgt0PMVjSj5oi
0R5krauvRPVhxMTEgfIdcX4XVpSFzKSXBj+12m2f+CpkTu6mbzZU65kdvfgJ1iT2
0Rq00EytTSy+3YUWRxgCJ2Umdo9xQ/Bdz3r/Z4jAPz9HkHSgznW3LonhTwa7vVno
tnA5tgRiW1wXybONHgnzR3G8DiMtA2zwcxFZcYjMoCuASFNIBa7DJbeHUSM5AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUnTFc/oqdOw78fcdTF7PRJYb/Bb4wHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzYzMjJlMzEzOTMyMmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj7ArDANBgkq
hkiG9w0BAQsFAAOCAQEAIZEqehCt1icPIBJVubNYmVwr5NPhYmCmkK+AxbWK7HF3
LNHo5+AX3i/6FhAv7Hk/gsWU4VW+l+xfwyAAbplKaYFxWBmps3mRVEGvmAhfRuXT
eHjxjZLrU1pE1NjXtIFPnE2ngss2aYwyCn7w6AVyQCBh7OcU6kd9ISA1jTvgKulm
dTRXWraNo8pHqY4zOtDARH3zVTMauYwQW4qIy6mqy1rcABtf8UDySQtM/qhhtK8F
YzXEL0bx1BO1rQy5qGw8PmV/IKjxaAsIWLEa0QOxvfedJ9GwQrrBOkwNUxjzryAJ
AU1/Afw3j7vBNp2aVjsrtVcT2W3BNAEExtlpz93+Ng==
Generated at Thu Aug 24 07:12:12 2023 by rpki-client on console-fra.rpki-client.org