Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jgQ3ke8qApAKBiHbHEkeNusKcUlYVjQhWp1ArtTEXRU=
Subject key identifier: 2D:DF:3F:1C:88:3A:AE:7E:CC:DD:B9:EF:31:D6:2F:1C:9E:DC:F5:4F
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 482D40EB6C6552CEBAB185640BE0503947596979
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
Signing time: Sat 30 Sep 2023 00:00:08 +0000
ROA not before: Fri 29 Sep 2023 23:55:08 +0000
ROA not after: Sat 28 Sep 2024 00:00:08 +0000
asID: 834
IP address blocks: 62.192.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2d:40:eb:6c:65:52:ce:ba:b1:85:64:0b:e0:50:39:47:59:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Sep 29 23:55:08 2023 GMT
Not After : Sep 28 00:00:08 2024 GMT
Subject: CN=2DDF3F1C883AAE7ECCDDB9EF31D62F1C9EDCF54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:89:33:cf:69:13:71:3d:9f:ec:e5:a1:56:
de:9d:70:af:8c:d8:54:02:da:9e:11:39:7c:60:6c:
a3:ab:04:25:d0:d9:92:d8:d0:b7:8b:cc:1e:e0:73:
3a:31:9d:3a:41:2f:cf:db:60:b2:52:9e:90:99:a5:
dd:69:24:e8:22:d3:9d:d3:25:0f:72:5e:41:4b:9d:
e8:63:4c:46:93:b0:34:c4:f0:98:e8:86:ed:ae:eb:
a1:28:65:72:54:ee:56:76:e7:3b:b8:9a:cb:27:19:
6a:ac:4b:a6:95:4b:77:34:38:57:c5:99:b9:d3:0f:
ff:17:c6:fb:2e:6c:40:ad:54:8c:c6:ad:4d:a2:f3:
ca:eb:55:1d:bd:6d:ce:71:4d:1c:39:40:d4:ff:9f:
58:f6:16:f7:d5:c4:91:75:69:3a:d4:bb:e9:b8:c7:
8b:e0:ea:54:01:1f:06:77:82:6a:03:a4:21:bb:28:
30:94:b3:e1:6a:4c:95:7f:e5:47:25:4e:7e:5d:72:
18:eb:56:13:0d:53:7a:4e:8b:9e:d1:ef:12:04:9b:
d2:78:af:cc:6c:63:cc:7d:65:65:21:f5:52:e6:9d:
2e:03:5f:02:6e:de:eb:f0:ab:dc:b7:7d:e0:52:51:
91:b5:46:b9:9b:53:f7:f3:65:61:93:3e:89:d7:48:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:3F:1C:88:3A:AE:7E:CC:DD:B9:EF:31:D6:2F:1C:9E:DC:F5:4F
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cc:72:57:30:21:64:82:ad:e6:80:d6:e4:70:36:ca:bb:df:
5b:bc:2e:84:b7:10:d4:ab:ba:4a:41:3a:2b:a8:29:c1:dd:ae:
7a:b3:1e:2d:fb:95:2d:9e:a3:b2:05:68:c9:c8:ca:87:1a:6f:
1b:70:f7:16:e3:ae:c0:2c:b2:d7:4c:1a:de:d2:02:61:30:3d:
17:c5:89:61:d6:82:cc:83:27:2f:e8:cb:7c:d5:6a:62:dc:91:
52:9e:82:f1:da:ef:5a:6e:7f:33:d1:b1:67:84:d3:16:35:2a:
6b:be:aa:2b:2f:27:76:9b:b6:e0:f4:22:b7:68:8e:2b:13:4c:
5b:58:d0:f3:38:f5:4a:82:e0:71:04:d6:bc:66:bb:a2:0a:10:
a0:13:16:bf:62:19:44:73:db:ef:58:2d:06:64:ae:9c:fd:d2:
f6:9a:09:2b:c8:85:02:df:0e:5a:6a:c1:ad:4b:fd:a7:75:9a:
27:a1:7a:60:d2:76:58:18:64:21:97:dc:c2:08:06:37:b9:4e:
8d:f6:82:1f:7f:96:8f:a4:da:03:03:37:68:9d:3a:34:4a:d2:
d9:bb:83:2f:6a:30:44:f5:c3:24:7b:65:4b:de:de:eb:e3:c3:
3d:46:ed:e2:2d:ad:6b:8f:16:3f:11:26:88:44:70:ff:ef:ce:
e6:c4:0f:da
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 1 13:05:43 2023 by rpki-client on console-fra.rpki-client.org