Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e2030.roa
File: 36322e3139322e3137322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: 95BdHNp3bOfmL7eDvkflOo89rqDa0Sqg4VGs5JSBIfA=
Subject key identifier: 36:71:B0:5F:E1:8A:FA:48:B1:76:8C:B1:B5:BE:EF:6A:77:59:23:41
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 229D59E1764D15C9A09A64C7EC84C93158040F31
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e2030.roa
Signing time: Wed 12 Jul 2023 08:47:56 +0000
ROA not before: Wed 12 Jul 2023 08:42:56 +0000
ROA not after: Wed 10 Jul 2024 08:47:56 +0000
asID: 0
IP address blocks: 62.192.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9d:59:e1:76:4d:15:c9:a0:9a:64:c7:ec:84:c9:31:58:04:0f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 12 08:42:56 2023 GMT
Not After : Jul 10 08:47:56 2024 GMT
Subject: CN=3671B05FE18AFA48B1768CB1B5BEEF6A77592341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:d8:a0:90:33:6f:a7:56:d3:03:73:4d:f5:
32:53:1b:ba:f8:6a:34:08:88:ab:dc:54:c0:cf:5b:
cf:37:1a:47:8f:52:90:58:24:d1:28:27:4a:c2:2e:
15:d8:58:c3:87:4e:5b:85:3c:42:97:b9:5b:52:77:
84:73:82:9d:fe:d9:be:30:6e:a5:7e:d3:2c:94:bd:
be:10:42:ef:dd:fa:98:5c:96:9c:f3:0b:d7:5c:0b:
bc:11:ea:03:d6:24:80:c8:85:ca:bf:a4:39:f4:ca:
10:e6:2d:26:da:e9:bf:4f:d8:89:2f:9e:5f:64:ef:
7e:b9:d4:af:02:39:6c:ea:9a:a4:08:ae:70:d2:26:
7e:06:f3:67:09:01:12:62:23:17:b7:f1:be:5e:98:
a9:fb:7e:b9:b1:88:d6:7b:5e:bd:fb:ec:d0:46:b9:
12:46:70:f2:f4:11:af:83:77:f6:9e:59:de:59:6f:
5e:3c:64:27:59:00:6b:2e:f5:8a:6f:c7:4d:76:58:
6b:ac:79:59:2d:4e:80:33:a0:e8:4f:74:cb:fa:fe:
b7:c1:90:1b:be:53:1a:20:6d:14:0c:8b:d9:eb:50:
3c:e0:5c:6b:6a:14:ba:76:91:ab:e4:9d:6c:86:fd:
76:91:6a:f4:01:69:78:2f:d2:33:fa:ac:20:8d:c7:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:B0:5F:E1:8A:FA:48:B1:76:8C:B1:B5:BE:EF:6A:77:59:23:41
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:72:77:c7:0e:b8:54:dc:c9:2a:2b:ac:15:06:f7:6a:42:37:
e6:f1:68:5a:7b:d6:21:6c:c5:c7:c1:dd:d1:0b:d1:31:e6:06:
1f:1c:e9:a4:d7:2e:4d:a9:94:cd:42:e3:4e:5b:cb:c7:6f:32:
c9:e9:8f:02:5c:e2:16:cf:f3:76:b1:cf:c6:28:11:71:a1:87:
9e:f1:6f:b4:7e:af:06:a3:e0:4c:4d:b9:21:62:39:7e:86:3c:
f4:4b:b8:af:49:33:ed:eb:5d:5e:93:6b:bf:c6:cf:98:c8:c5:
c0:81:3d:c8:77:cc:df:4f:12:3d:b3:e6:79:74:6e:31:40:de:
56:33:79:22:27:6a:5d:fc:17:ba:b0:9e:5d:41:21:47:27:98:
fc:e4:2b:58:6a:b4:01:aa:d3:6b:32:6c:63:71:45:26:c9:20:
c7:94:0b:69:40:9b:b5:ae:e2:b6:66:b0:fd:c4:17:d2:70:f0:
27:c2:02:e2:7e:b8:2a:53:98:07:27:c7:fa:52:a2:ff:5c:62:
3a:28:76:ae:7b:95:ad:e8:0e:bd:cf:2e:bc:f5:15:8f:c5:66:
de:62:47:eb:c6:78:53:02:fc:cd:dd:a2:82:87:1e:c7:a4:c7:
fe:76:eb:78:0b:7f:71:0c:da:e2:f0:5b:c8:bf:4e:f4:84:83:
b9:0e:ce:4e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUIp1Z4XZNFcmgmmTH7ITJMVgEDzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA3MTIwODQyNTZaFw0yNDA3MTAwODQ3NTZaMDMxMTAvBgNV
BAMTKDM2NzFCMDVGRTE4QUZBNDhCMTc2OENCMUI1QkVFRjZBNzc1OTIzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdztigkDNvp1bTA3NN9TJTG7r4
ajQIiKvcVMDPW883GkePUpBYJNEoJ0rCLhXYWMOHTluFPEKXuVtSd4Rzgp3+2b4w
bqV+0yyUvb4QQu/d+phclpzzC9dcC7wR6gPWJIDIhcq/pDn0yhDmLSba6b9P2Ikv
nl9k73651K8COWzqmqQIrnDSJn4G82cJARJiIxe38b5emKn7frmxiNZ7Xr377NBG
uRJGcPL0Ea+Dd/aeWd5Zb148ZCdZAGsu9Ypvx012WGuseVktToAzoOhPdMv6/rfB
kBu+UxogbRQMi9nrUDzgXGtqFLp2kavknWyG/XaRavQBaXgv0jP6rCCNx4XrAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUNnGwX+GK+kixdoyxtb7vandZI0EwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzYzMjJlMzEzOTMyMmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj7ArDANBgkq
hkiG9w0BAQsFAAOCAQEAsHJ3xw64VNzJKiusFQb3akI35vFoWnvWIWzFx8Hd0QvR
MeYGHxzppNcuTamUzULjTlvLx28yyemPAlziFs/zdrHPxigRcaGHnvFvtH6vBqPg
TE25IWI5foY89Eu4r0kz7etdXpNrv8bPmMjFwIE9yHfM308SPbPmeXRuMUDeVjN5
IidqXfwXurCeXUEhRyeY/OQrWGq0AarTazJsY3FFJskgx5QLaUCbta7itmaw/cQX
0nDwJ8IC4n64KlOYByfH+lKi/1xiOih2rnuVregOvc8uvPUVj8Vm3mJH68Z4UwL8
zd2igocex6TH/nbreAt/cQza4vBbyL9O9ISDuQ7OTg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org