Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20313437323931.roa
File: 36322e3139322e3137332e302f32342d3234203d3e20313437323931.roa (raw, json)
Hash identifier: CmPKxZxcLQIxFYZCIe8qeBTo4t7s5LJl7eNyL/u7mGg=
Subject key identifier: 0B:76:98:B4:0D:FE:1A:FC:D3:82:16:E3:4C:5A:4E:C1:83:F3:D5:A6
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 019D3FC1BD019AC5B6EB6889F0133B66B263A210
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20313437323931.roa
Signing time: Thu 31 Aug 2023 16:52:22 +0000
ROA not before: Thu 31 Aug 2023 16:47:22 +0000
ROA not after: Thu 29 Aug 2024 16:52:22 +0000
asID: 147291
IP address blocks: 62.192.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:c1:bd:01:9a:c5:b6:eb:68:89:f0:13:3b:66:b2:63:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 31 16:47:22 2023 GMT
Not After : Aug 29 16:52:22 2024 GMT
Subject: CN=0B7698B40DFE1AFCD38216E34C5A4EC183F3D5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:4b:5c:bb:54:60:4a:62:91:df:c1:54:d9:
bd:3c:20:72:33:c7:16:05:af:8c:8b:b9:a3:9b:95:
b7:89:47:1f:8d:c9:4d:9e:6f:95:43:2d:46:44:59:
ea:29:79:00:1b:3d:e9:c5:47:ec:10:d9:e0:64:ca:
cc:ac:19:0b:1c:06:47:90:2a:1e:54:f9:1e:fe:c3:
0d:9c:e1:b0:45:6e:fe:35:26:a3:b6:85:e3:69:01:
87:14:a3:b5:91:49:d0:ae:8b:50:7d:07:bc:50:ec:
b0:90:c3:a4:76:94:8f:b6:33:87:26:37:e0:2b:38:
ac:92:33:5b:13:d5:8a:e9:6e:d4:41:76:a0:da:ee:
9b:d1:e7:1e:f6:c0:ca:69:25:8c:76:9b:0f:25:d8:
1c:ca:17:3d:3b:6f:46:5f:76:a3:a6:63:11:8f:55:
5b:5a:1b:3b:55:39:db:36:cd:49:6b:65:d2:45:41:
31:0a:c2:d0:00:dd:e0:3a:e0:40:76:0c:b4:83:4c:
18:1a:48:95:a0:e4:fd:d5:ce:06:6a:34:a9:9e:a6:
64:bd:9c:8b:09:92:ea:f7:28:0b:13:5a:a6:f6:ed:
01:90:c7:82:e5:11:17:ff:99:fa:68:2b:5a:77:a2:
e7:7d:2e:43:49:86:5d:6e:92:8b:43:1c:d1:6c:dd:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:98:B4:0D:FE:1A:FC:D3:82:16:E3:4C:5A:4E:C1:83:F3:D5:A6
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20313437323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5b:8c:81:ef:99:af:3f:5f:26:6a:80:6d:d5:ed:5c:85:c7:
be:ee:02:e1:6d:98:4c:1a:60:12:2d:93:93:55:56:14:4a:8c:
c8:1e:c0:b7:de:36:01:bb:fe:d3:07:40:99:c1:fd:58:d5:d3:
eb:5f:69:18:2b:e3:91:a9:6a:85:b5:7f:4c:1c:72:54:b1:1f:
e2:f3:37:22:52:a2:e0:4c:35:a0:31:12:c8:48:09:51:55:3e:
9d:1c:89:e4:a0:69:4e:8b:1b:e1:7a:60:d9:84:2b:5d:ca:9c:
be:54:f1:2c:d8:5c:7e:73:6b:2a:b0:d9:5b:49:00:4a:e8:b7:
76:6f:96:38:36:3a:38:76:7d:bc:de:f2:8a:4e:6f:2b:12:53:
90:9c:a0:57:09:c2:20:d4:89:65:fe:89:19:9d:00:8a:03:03:
1c:46:c2:0a:b7:34:78:2c:0b:fb:5d:6a:b7:02:1e:c7:77:a3:
47:fd:86:c8:1f:3f:61:a4:ee:0e:c7:45:2c:58:83:b2:e4:4d:
f6:81:47:8f:26:4c:69:15:2a:18:cb:40:01:fd:a4:3f:c2:97:
08:8c:05:ff:a0:93:b4:c7:28:a6:55:02:7d:81:c3:66:b4:fe:
da:36:af:f1:19:64:5d:1b:12:31:0f:05:f6:0b:e8:01:ff:c2:
d2:67:79:11
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAZ0/wb0BmsW262iJ8BM7ZrJjohAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA4MzExNjQ3MjJaFw0yNDA4MjkxNjUyMjJaMDMxMTAvBgNV
BAMTKDBCNzY5OEI0MERGRTFBRkNEMzgyMTZFMzRDNUE0RUMxODNGM0Q1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7ktcu1RgSmKR38FU2b08IHIz
xxYFr4yLuaOblbeJRx+NyU2eb5VDLUZEWeopeQAbPenFR+wQ2eBkysysGQscBkeQ
Kh5U+R7+ww2c4bBFbv41JqO2heNpAYcUo7WRSdCui1B9B7xQ7LCQw6R2lI+2M4cm
N+ArOKySM1sT1YrpbtRBdqDa7pvR5x72wMppJYx2mw8l2BzKFz07b0ZfdqOmYxGP
VVtaGztVOds2zUlrZdJFQTEKwtAA3eA64EB2DLSDTBgaSJWg5P3VzgZqNKmepmS9
nIsJkur3KAsTWqb27QGQx4LlERf/mfpoK1p3oud9LkNJhl1ukotDHNFs3WCBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUC3aYtA3+GvzTghbjTFpOwYPz1aYwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzYzMjJlMzEzOTMyMmUzMTM3
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA+wK0wDQYJKoZIhvcNAQELBQADggEBAMRbjIHvma8/XyZqgG3V7VyFx77uAuFt
mEwaYBItk5NVVhRKjMgewLfeNgG7/tMHQJnB/VjV0+tfaRgr45GpaoW1f0wcclSx
H+LzNyJSouBMNaAxEshICVFVPp0cieSgaU6LG+F6YNmEK13KnL5U8SzYXH5zayqw
2VtJAErot3Zvljg2Ojh2fbze8opObysSU5CcoFcJwiDUiWX+iRmdAIoDAxxGwgq3
NHgsC/tdarcCHsd3o0f9hsgfP2Gk7g7HRSxYg7LkTfaBR48mTGkVKhjLQAH9pD/C
lwiMBf+gk7THKKZVAn2Bw2a0/to2r/EZZF0bEjEPBfYL6AH/wtJneRE=
-----END CERTIFICATE-----
Generated at Wed Sep 6 13:39:27 2023 by rpki-client on console-fra.rpki-client.org