Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e203235373830.roa
File: 36322e3139322e3137322e302f32322d3234203d3e203235373830.roa (raw, json)
Hash identifier: 41BGX/VG7vAVhkSylsRN+wSbQux+5HhvH3NSV37l/ws=
Subject key identifier: B4:A1:74:B8:16:76:7E:D1:E2:BE:97:A1:2F:6B:54:8C:FD:AF:23:DC
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 5B6557297DCEC9ED4F31CE508EAEF7AE62728C6A
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e203235373830.roa
Signing time: Thu 23 Mar 2023 17:03:30 +0000
ROA not before: Thu 23 Mar 2023 16:58:30 +0000
ROA not after: Thu 21 Mar 2024 17:03:30 +0000
asID: 25780
IP address blocks: 62.192.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:65:57:29:7d:ce:c9:ed:4f:31:ce:50:8e:ae:f7:ae:62:72:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 23 16:58:30 2023 GMT
Not After : Mar 21 17:03:30 2024 GMT
Subject: CN=B4A174B816767ED1E2BE97A12F6B548CFDAF23DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:0f:8a:a3:d1:d0:f2:f0:0d:de:64:b3:e6:
ac:a1:1e:3c:6a:c3:1f:26:7b:da:2d:a9:58:04:44:
a4:d0:5d:96:65:96:5f:92:7c:a3:bf:10:5a:ed:01:
28:54:b5:00:d6:d8:77:c1:26:27:68:ae:86:ea:65:
61:0e:51:1c:42:de:09:0e:19:0b:d9:3f:f9:d1:73:
2b:ef:56:7e:12:6a:89:19:ca:d6:1c:3e:db:8c:f8:
5c:6f:0a:17:15:70:9e:10:09:73:4d:6b:5d:9d:30:
85:ba:13:ec:89:7e:a8:c7:ef:8a:39:ae:71:2a:0c:
5b:76:46:b7:7f:cc:c8:79:8e:12:9f:b8:e3:41:f7:
3d:5f:89:fc:ea:b8:bb:02:a6:a2:e5:21:98:bc:26:
b5:bc:dd:05:78:1e:ab:22:56:76:a1:a6:27:a8:3a:
28:5b:b1:e3:4e:01:bb:55:23:f6:83:e6:c4:0d:44:
a1:50:46:e6:6c:87:3e:6c:ac:e6:e1:05:6e:7f:fa:
2b:39:cc:ec:36:a0:f2:67:95:91:63:b1:73:dd:5e:
3b:9e:7d:5c:02:04:4a:25:d7:11:7f:e5:b2:ba:d9:
e0:88:b1:89:73:78:b9:8d:50:f2:24:be:a0:d2:60:
f2:86:35:01:e6:57:3d:45:c8:98:b3:63:9c:4a:35:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A1:74:B8:16:76:7E:D1:E2:BE:97:A1:2F:6B:54:8C:FD:AF:23:DC
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32322d3234203d3e203235373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d1:41:f9:6c:d8:8d:be:c1:79:3d:7b:e1:bd:45:68:a8:c2:
48:2e:c9:d2:1e:48:76:2a:ad:af:79:6f:cd:05:09:3b:d1:bb:
ca:7b:5e:e7:6c:74:4c:d6:17:19:9f:30:fd:75:aa:21:d9:f6:
33:06:59:04:3c:55:7a:d2:54:bb:50:61:5d:66:69:0a:9f:75:
e4:61:f1:83:82:df:a6:aa:ba:ae:1d:b2:d5:5d:e2:19:30:de:
03:21:b3:1b:4f:da:fd:ff:49:40:07:60:6b:26:a5:75:df:5f:
a2:cf:68:08:3a:9f:3a:a7:2a:1b:a1:17:98:55:96:5f:d6:5b:
8d:75:a9:03:b9:04:fa:ee:32:d3:22:12:fc:40:1f:5a:5d:fa:
16:fa:4c:36:f8:d3:f8:a1:ba:ce:93:1e:fc:3f:20:48:c1:0a:
48:ec:f9:79:9c:5a:33:cd:f8:2c:c2:94:6f:6d:97:7e:8d:85:
c1:d0:60:44:65:a9:bb:e8:de:3c:ce:7b:1c:d4:b5:b1:d3:ed:
1a:64:0d:60:36:5a:fd:c4:16:c7:79:56:da:e7:44:12:df:d5:
d3:0d:be:90:04:2d:76:e5:9d:1b:65:fe:48:70:7f:fb:8c:75:
47:57:9d:80:38:b1:34:79:90:b1:d5:ae:a8:8f:07:db:1c:4e:
11:1b:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org