Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gypIuunfi9GEBEIctI9hw4cQLfmxYgi5h5EBG/mwYGI=
Subject key identifier: 11:A7:F2:64:FB:EA:18:87:D3:E3:B3:A2:8F:E2:EE:6E:96:9B:25:19
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 2FCB50049E1FFB04B7F7D544A83038102DD8CE55
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Jan 2025 10:24:07 +0000
ROA not before: Fri 31 Jan 2025 10:19:07 +0000
ROA not after: Fri 30 Jan 2026 10:24:07 +0000
asID: 834
IP address blocks: 62.192.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 17:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cb:50:04:9e:1f:fb:04:b7:f7:d5:44:a8:30:38:10:2d:d8:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jan 31 10:19:07 2025 GMT
Not After : Jan 30 10:24:07 2026 GMT
Subject: CN=11A7F264FBEA1887D3E3B3A28FE2EE6E969B2519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:56:78:60:22:df:1c:80:61:8e:54:34:82:
ed:84:6f:71:55:21:37:5e:23:e2:8c:28:ac:20:56:
23:2f:46:5c:4d:b5:21:c5:a8:aa:4d:75:9d:9d:95:
90:38:67:0b:1f:f6:2c:a2:cb:4c:1a:52:fa:e9:1c:
eb:f8:4f:93:a9:c2:00:2d:d4:59:fc:58:e1:7b:35:
3b:51:f6:e4:3b:53:13:21:66:13:7b:50:02:99:31:
57:58:70:64:de:c4:05:0c:e6:67:52:53:53:36:2d:
a2:a5:29:0b:b5:bf:41:e8:b7:92:90:4d:17:22:7f:
b0:a6:77:49:35:a3:f3:e3:6d:31:43:20:d4:42:c1:
87:bc:85:5b:ca:04:98:56:b1:43:38:53:45:7b:fa:
31:74:15:fc:71:82:d6:ee:ce:7a:79:8b:e4:8f:de:
8f:f3:1a:c0:8a:27:60:91:15:22:88:dd:f6:78:30:
f8:bc:f0:b6:da:74:fc:c8:7a:e8:d7:c2:9a:a7:ad:
6b:26:16:a6:eb:9c:c6:57:a3:b7:f1:86:99:ea:2d:
21:75:db:ee:6d:01:b1:67:de:e2:58:89:8d:b4:d7:
52:2a:3a:18:ef:62:a3:01:d0:06:96:b2:0d:8e:97:
e7:73:b9:ac:62:81:03:5c:f9:24:9d:65:24:7b:1d:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:F2:64:FB:EA:18:87:D3:E3:B3:A2:8F:E2:EE:6E:96:9B:25:19
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:fb:ba:b4:3e:00:9a:33:fb:c2:9b:3b:df:c4:55:01:f5:92:
e4:80:a3:77:11:47:0e:f3:36:83:74:11:3e:c0:4f:6c:a1:91:
07:37:74:16:ce:a4:b6:06:fe:03:df:40:30:b8:74:b8:9d:61:
04:86:d9:14:d6:8e:1b:7c:40:20:bc:53:52:05:c8:96:c7:10:
72:98:e4:ca:19:bc:27:2e:43:25:07:be:b2:aa:1e:f6:f6:bd:
ee:9b:e3:5c:fb:4d:ce:f5:80:e4:bc:c1:a4:35:22:c2:35:9d:
e8:1f:fc:82:8d:08:2b:c8:d4:1f:d8:7d:44:08:24:f2:9e:93:
44:51:3b:bf:0b:38:f4:f8:5c:74:0e:d1:7b:d4:b7:af:e9:c0:
04:88:8d:b7:ed:2c:76:97:06:4b:f1:74:1a:4d:ff:8a:9c:20:
a9:f3:be:8c:f7:e4:2f:ef:05:7c:29:8c:a4:ce:3f:cb:31:37:
1d:74:f9:91:7b:0e:eb:d3:e5:50:24:ab:ec:66:08:9e:4b:80:
15:8b:06:7e:62:c0:3d:f0:3e:d6:c8:8a:ee:0e:93:9f:33:77:
b4:91:6e:b6:3a:56:b7:e8:e0:b7:0b:e4:aa:6c:2e:17:de:56:
24:d3:71:f2:11:13:ca:94:2e:4a:e5:14:6f:00:ff:b3:12:bf:
ad:d1:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:11 2025 by rpki-client