Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EJfHIelQ9PwNeriKJPVk9x9ZGib37oUnySk97IellgA=
Subject key identifier: AC:37:6E:DC:0D:94:8F:9F:09:5C:F5:D1:AD:F1:09:DC:EB:C9:A3:95
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 2B1A091C182BF3672CB170CAD03BB869282F9B07
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Sep 2023 13:00:05 +0000
ROA not before: Wed 06 Sep 2023 12:55:05 +0000
ROA not after: Wed 04 Sep 2024 13:00:05 +0000
asID: 834
IP address blocks: 62.192.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1a:09:1c:18:2b:f3:67:2c:b1:70:ca:d0:3b:b8:69:28:2f:9b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Sep 6 12:55:05 2023 GMT
Not After : Sep 4 13:00:05 2024 GMT
Subject: CN=AC376EDC0D948F9F095CF5D1ADF109DCEBC9A395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:f6:7e:f5:b3:f6:2c:a6:46:ab:ec:ac:0e:
ce:b9:95:20:cf:77:76:8e:78:ad:59:13:cf:a5:74:
dc:15:c2:7f:ce:94:da:27:01:2c:03:95:23:b2:e9:
69:27:32:7e:4f:d4:59:79:f0:05:8d:63:cf:46:8d:
96:b7:e2:e6:72:ad:72:df:78:73:bd:4f:e8:aa:ef:
d7:20:5c:02:33:fb:27:3f:bd:fc:60:45:9e:de:89:
e2:e3:7d:ce:b6:4a:32:da:ba:24:a3:dd:bc:b1:d2:
28:fe:19:79:4c:2c:84:12:b7:3c:e0:d6:0d:84:11:
10:1a:66:f4:e2:0f:35:09:96:e1:3f:7b:38:6d:8a:
36:9a:00:ae:bd:d4:f8:e9:54:59:c6:ae:d2:d5:55:
91:fa:11:cc:0c:73:89:c8:b2:bd:2c:50:5e:d1:fb:
0a:67:3b:96:81:2f:a6:79:7e:65:f9:ff:22:f2:32:
5c:ef:f7:07:2b:d7:2c:ad:c6:c2:e8:f8:20:05:63:
d4:a9:4c:ab:1e:e4:73:1e:52:8c:9c:75:81:66:ca:
51:42:7e:f2:25:df:90:6d:a8:d4:64:df:b1:e7:16:
d4:74:a0:43:00:ee:c3:04:00:00:5a:78:a6:da:71:
b9:19:04:eb:40:d3:39:fb:6e:54:cc:df:b1:0d:eb:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:6E:DC:0D:94:8F:9F:09:5C:F5:D1:AD:F1:09:DC:EB:C9:A3:95
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9f:19:4e:40:e4:33:4b:62:55:01:79:7d:73:e9:a2:44:39:
a6:1f:c8:53:59:13:4d:ea:e0:f8:fa:4a:5c:4c:4f:73:79:e7:
40:a2:59:e3:9d:11:3e:67:72:e5:91:1e:a0:16:43:11:f6:28:
e8:97:68:b9:81:36:5a:ae:fa:d4:10:30:d9:62:4a:6d:e0:98:
c5:a2:47:4e:8c:b1:43:d8:2a:a2:1a:2c:6a:84:07:28:d9:b5:
03:2a:7c:f2:a5:76:f9:7f:b7:8c:c0:aa:a5:d7:d6:6f:26:67:
7e:44:39:af:a7:cc:87:b5:41:cd:dd:cd:b2:48:5b:0c:29:fb:
7c:a7:20:11:41:39:ae:08:28:92:1f:8b:e0:d1:c0:98:f0:07:
79:9b:c5:c6:47:80:c0:5c:7f:2f:b2:a0:a9:94:5a:bb:64:4c:
79:8b:a8:0c:90:a2:5c:81:e2:da:b3:18:1e:34:ba:eb:20:8e:
31:e7:32:8b:e8:9f:72:0e:49:bf:e4:a4:d7:5b:c9:22:33:6b:
84:ce:42:47:7e:9b:51:be:59:a2:3e:28:2e:35:64:f9:50:78:
13:c1:db:35:28:6d:93:b7:b1:6a:16:9e:2b:46:76:46:38:a4:
0f:64:94:af:5b:cd:04:dd:78:4f:ec:cb:90:b0:60:4c:f8:09:
4b:16:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 04:44:34 2023 by rpki-client on console-fra.rpki-client.org