Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e2037303239.roa
File: 36322e3139322e3137342e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: EcvGMXmzgnnEOCBdtsvBKje/DNsiJqRsZUYW9G4XFp0=
Subject key identifier: 4D:3E:AE:18:EC:D7:B8:07:70:81:52:C2:C7:47:27:A0:A8:F7:47:09
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 3892C3D99FAB5DFE8EB2B80B7E04C7E224A579D7
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e2037303239.roa
Signing time: Sun 04 Aug 2024 18:07:55 +0000
ROA not before: Sun 04 Aug 2024 18:02:55 +0000
ROA not after: Sun 03 Aug 2025 18:07:55 +0000
asID: 7029
IP address blocks: 62.192.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:92:c3:d9:9f:ab:5d:fe:8e:b2:b8:0b:7e:04:c7:e2:24:a5:79:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 4 18:02:55 2024 GMT
Not After : Aug 3 18:07:55 2025 GMT
Subject: CN=4D3EAE18ECD7B807708152C2C74727A0A8F74709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:08:25:96:f2:ad:a6:5f:cb:43:3e:8a:b9:
45:42:8f:ec:3f:69:3c:17:8a:89:25:1a:63:45:0c:
d2:3a:5c:7c:93:78:ac:dc:79:e8:bc:e7:66:7e:83:
cc:6a:72:0a:23:87:15:56:62:e5:33:c7:be:f3:85:
0c:23:27:c1:71:2f:f7:49:3a:69:97:c0:48:b7:5f:
0a:ad:69:a7:d0:05:ad:c6:fd:bf:72:00:95:14:23:
3a:25:61:ee:67:f0:b5:2e:d6:ed:c7:13:16:b8:d4:
58:cb:60:e8:23:21:a8:04:1f:73:5c:55:e2:96:cd:
af:bd:23:d9:3b:a0:e1:0c:73:6e:da:5c:c2:79:69:
21:aa:4d:27:7b:2f:76:04:48:23:24:fc:e7:c1:1a:
8b:e0:5b:e3:d7:e8:44:c4:18:29:e2:58:d2:f6:ea:
45:1b:b7:4c:12:5f:ac:87:e6:86:d7:cc:91:98:c6:
5f:c2:8f:9d:72:ce:60:fb:43:ec:c6:fb:30:10:0f:
9b:36:ac:9d:8e:58:9b:b4:6b:bf:68:26:c0:b5:5e:
f8:a8:97:ce:d5:54:36:08:b7:0e:f1:32:4a:ba:d0:
ac:32:7d:c0:ba:30:f9:b9:22:48:45:c5:4a:b2:27:
50:44:03:55:26:eb:9d:5b:90:3c:0c:11:0d:bb:85:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:AE:18:EC:D7:B8:07:70:81:52:C2:C7:47:27:A0:A8:F7:47:09
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.174.0/24
Signature Algorithm: sha256WithRSAEncryption
94:93:c9:5b:74:17:0b:32:d2:43:44:51:c3:a4:65:8b:cd:f2:
56:52:bd:f5:9d:49:60:9a:fd:c9:29:7a:6d:64:d0:19:e7:f5:
46:35:57:1a:69:7a:74:85:78:d9:36:00:f8:9a:af:2a:86:80:
a4:ad:6a:d7:ff:86:98:ae:82:b0:62:fd:15:82:73:ab:97:94:
c2:e6:a2:ac:16:23:05:c2:c9:97:5f:e5:51:93:41:04:77:14:
d9:a1:fd:b5:18:28:96:6a:cd:3f:b8:98:e4:7d:30:4c:3b:da:
4f:fa:a5:72:6c:48:9a:4f:bc:b5:b9:c0:e3:08:5c:96:b2:48:
e0:67:fc:1d:ab:a3:4f:60:0f:87:20:d4:46:ef:2f:f2:4b:c6:
0b:d4:a4:ab:98:27:af:6e:57:aa:00:df:d4:33:de:ae:93:1c:
66:0e:25:cf:d7:14:fb:51:34:53:58:c9:39:e9:df:77:91:c3:
6b:04:f8:6c:c9:b8:64:99:4c:62:8f:17:a9:20:d1:f0:18:75:
ad:46:1a:aa:ac:eb:85:dd:93:4e:f3:9c:43:2e:c4:5a:20:08:
ee:32:50:94:e0:ff:ac:32:52:66:ba:e2:ae:a1:82:43:c8:2c:
86:a7:f1:28:fb:30:73:37:d0:66:05:0f:d8:d0:c5:d8:44:45:
bc:c4:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 02:16:58 2024 by rpki-client on console-fra.rpki-client.org