Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203238393730.roa
File: 36322e3139322e3137322e302f32322d3232203d3e203238393730.roa (raw, json)
Hash identifier: dK1RxjnFKjwfDjgm9LSca9gDw+t2nKb3kGRMDj4dosM=
Subject key identifier: B2:AA:DF:3C:5A:43:09:1E:1A:0D:05:58:D9:03:4C:70:C4:50:38:6F
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 64E1181DE4A018435B3D6BA0E6EC6EB9FB0C7E27
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203238393730.roa
Signing time: Fri 14 Jul 2023 10:06:35 +0000
ROA not before: Fri 14 Jul 2023 10:01:35 +0000
ROA not after: Fri 12 Jul 2024 10:06:35 +0000
asID: 28970
IP address blocks: 62.192.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e1:18:1d:e4:a0:18:43:5b:3d:6b:a0:e6:ec:6e:b9:fb:0c:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 14 10:01:35 2023 GMT
Not After : Jul 12 10:06:35 2024 GMT
Subject: CN=B2AADF3C5A43091E1A0D0558D9034C70C450386F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:e6:f6:fb:36:62:97:5a:2d:6c:1b:4a:8f:
bb:d0:7c:47:79:63:96:72:40:ec:88:1e:8b:6c:66:
9f:58:9b:93:c5:81:f7:44:97:64:fd:0e:10:bd:35:
0a:6e:c0:e7:23:c4:0e:a8:9f:cc:cc:f3:cf:d9:e4:
a8:04:e9:22:2b:60:d4:61:05:ab:c8:d0:12:19:bc:
33:97:b1:1c:91:0f:4c:bd:f1:57:a9:f3:71:b8:c7:
96:6d:17:d2:a3:ba:83:2b:eb:df:12:7e:59:6c:14:
77:3c:a7:1b:6a:0a:ef:4d:cf:2a:65:37:96:79:28:
02:dd:51:70:f9:4e:63:ae:9e:40:c4:c9:02:8b:d7:
e5:7d:d2:37:b0:92:27:11:a7:36:bb:db:8c:e1:bf:
c7:e0:3c:4e:d1:ca:fa:82:92:82:ad:08:fe:1e:d9:
0a:6c:f9:7b:c1:11:1c:d0:1c:33:84:db:54:25:2c:
c4:b1:6a:4c:13:a1:6a:73:33:4f:a4:4f:d9:4f:9c:
94:a5:20:2a:6e:29:28:38:e5:ef:43:0c:a5:37:73:
ac:bd:76:45:14:93:b4:6b:f6:eb:6b:8b:34:68:c3:
7b:18:53:c1:34:1f:ef:cd:fe:89:6b:63:7f:a3:c5:
a7:55:39:6c:3e:c3:09:e1:e8:72:91:df:4a:3b:ff:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:DF:3C:5A:43:09:1E:1A:0D:05:58:D9:03:4C:70:C4:50:38:6F
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3232203d3e203238393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
81:0d:76:04:09:e3:25:2a:e8:08:4f:49:a6:11:94:24:d7:b0:
2e:c0:53:27:87:9f:13:c7:1c:a8:1d:ed:13:a5:be:9b:d9:bc:
dd:85:d0:df:70:20:48:78:6b:67:40:2e:f3:21:0c:3c:ec:7c:
32:61:11:e9:c9:05:1a:55:bc:e9:b1:c0:4b:d8:30:04:56:9f:
24:df:e1:3d:04:de:9e:77:76:bb:8f:8e:4b:c0:8e:9b:3e:b1:
ec:91:aa:36:07:6d:e3:c3:ea:4c:34:6e:58:21:5b:8f:eb:e1:
1e:62:42:f5:d5:7b:52:3d:3b:bf:8d:d8:cc:64:e4:c2:6c:fd:
99:c3:0a:bb:2c:91:fc:0d:0a:99:d2:af:4f:f8:40:a6:17:63:
7b:7b:dc:52:b0:76:2c:85:00:d2:76:de:d6:39:4b:1d:aa:36:
8b:19:6a:f5:9b:aa:14:43:e7:ea:14:70:39:67:c6:e1:d6:0c:
17:21:4d:b8:be:82:03:ef:1c:2d:e8:3b:ef:f6:cf:81:48:02:
47:9f:7f:47:5f:8c:cc:7f:5b:05:c2:51:c0:f7:66:85:18:88:
c9:b0:69:9d:87:f2:53:60:0b:c7:89:71:2c:21:f5:a3:12:73:
82:ac:85:09:4b:66:fb:8e:7c:75:39:9d:7a:30:c8:a6:f2:f1:
f7:b2:25:c8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZOEYHeSgGENbPWug5uxuufsMficwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA3MTQxMDAxMzVaFw0yNDA3MTIxMDA2MzVaMDMxMTAvBgNV
BAMTKEIyQUFERjNDNUE0MzA5MUUxQTBEMDU1OEQ5MDM0QzcwQzQ1MDM4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcub2+zZil1otbBtKj7vQfEd5
Y5ZyQOyIHotsZp9Ym5PFgfdEl2T9DhC9NQpuwOcjxA6on8zM88/Z5KgE6SIrYNRh
BavI0BIZvDOXsRyRD0y98Vep83G4x5ZtF9KjuoMr698SfllsFHc8pxtqCu9Nzypl
N5Z5KALdUXD5TmOunkDEyQKL1+V90jewkicRpza724zhv8fgPE7RyvqCkoKtCP4e
2Qps+XvBERzQHDOE21QlLMSxakwToWpzM0+kT9lPnJSlICpuKSg45e9DDKU3c6y9
dkUUk7Rr9utrizRow3sYU8E0H+/N/olrY3+jxadVOWw+wwnh6HKR30o7/1whAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsqrfPFpDCR4aDQVY2QNMcMRQOG8wHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzYzMjJlMzEzOTMyMmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzkzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
PsCsMA0GCSqGSIb3DQEBCwUAA4IBAQCBDXYECeMlKugIT0mmEZQk17AuwFMnh58T
xxyoHe0Tpb6b2bzdhdDfcCBIeGtnQC7zIQw87HwyYRHpyQUaVbzpscBL2DAEVp8k
3+E9BN6ed3a7j45LwI6bPrHskao2B23jw+pMNG5YIVuP6+EeYkL11XtSPTu/jdjM
ZOTCbP2Zwwq7LJH8DQqZ0q9P+ECmF2N7e9xSsHYshQDSdt7WOUsdqjaLGWr1m6oU
Q+fqFHA5Z8bh1gwXIU24voID7xwt6Dvv9s+BSAJHn39HX4zMf1sFwlHA92aFGIjJ
sGmdh/JTYAvHiXEsIfWjEnOCrIUJS2b7jnx1OZ16MMim8vH3siXI
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org