Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VYI4ZXaE2Z5WvewRicsrWyWN2f7VLFA2iW0iUid9Rpw=
Subject key identifier: 98:CE:3A:8F:55:80:57:1C:C9:EE:37:A5:D1:E0:45:0E:80:A8:49:6A
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0C849E26C205DA021D5B54624376778F18551E0C
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Sep 2024 00:03:19 +0000
ROA not before: Tue 03 Sep 2024 23:58:19 +0000
ROA not after: Wed 03 Sep 2025 00:03:19 +0000
asID: 834
IP address blocks: 62.192.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 07:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:84:9e:26:c2:05:da:02:1d:5b:54:62:43:76:77:8f:18:55:1e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Sep 3 23:58:19 2024 GMT
Not After : Sep 3 00:03:19 2025 GMT
Subject: CN=98CE3A8F5580571CC9EE37A5D1E0450E80A8496A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:a1:b8:f4:56:5e:e2:18:1b:7e:57:59:9e:
55:c3:a5:d0:c7:8a:27:59:12:50:a9:57:c6:8b:d9:
52:cf:51:05:bf:7c:39:e0:0a:ef:cf:52:a5:de:53:
42:9e:b3:df:90:26:91:fe:65:7f:1e:08:44:c6:d6:
86:40:a6:3d:77:12:bb:1f:09:f3:84:16:7b:cd:a1:
88:d9:6e:fa:75:1a:8c:c5:fe:2a:0f:fa:9d:d6:d9:
7d:8b:8f:9a:d2:ae:8b:a8:5f:46:a3:13:9c:2d:09:
f7:4a:a6:ed:dc:e8:f3:7c:55:a7:1c:99:b0:36:7e:
14:5e:87:96:26:48:40:65:6b:7a:1c:ad:68:cd:36:
db:da:91:18:c9:dd:b4:28:c9:a0:b9:e0:34:59:f6:
7b:87:51:d7:b0:0c:06:1e:f1:40:df:6e:be:b0:aa:
7e:72:25:ff:26:f3:ef:46:cd:99:13:4f:a8:b5:2e:
86:30:4b:8d:a6:e8:d1:75:7f:f1:d6:80:e1:fc:d5:
7f:d0:da:a3:ee:d2:1b:84:06:03:73:da:c8:71:5d:
d7:fa:6f:5e:34:71:1c:ec:7e:df:45:74:c7:b7:b4:
f4:ea:2b:44:f7:e6:7d:ec:e7:ab:8e:6a:8d:15:64:
ea:f3:98:11:8f:f6:65:1c:d7:c0:33:77:c2:84:96:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:3A:8F:55:80:57:1C:C9:EE:37:A5:D1:E0:45:0E:80:A8:49:6A
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.174.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6a:f0:5e:9d:ef:24:50:55:56:a1:aa:fa:ed:21:b9:bc:a7:
25:02:ed:d2:f3:8b:50:9f:e0:e3:a7:66:85:16:a7:de:d0:a8:
a6:e3:be:e3:0f:b7:ef:77:f0:8e:94:9f:f8:0f:6b:eb:a3:9f:
75:a5:09:a2:d8:b3:37:c5:d4:3d:94:fb:8a:d8:27:af:f0:bc:
f2:85:c9:9d:49:cc:92:61:f6:46:7a:4a:7b:c5:a4:ab:a7:6e:
b8:e8:f6:0a:d6:d9:1a:d0:e1:d8:ee:05:21:9c:85:fa:c1:4e:
d8:3f:fe:b3:85:a0:0b:0a:4f:9c:d0:20:64:14:99:51:d2:50:
c5:83:b5:cc:7f:fa:ca:85:a0:ba:d3:ed:ad:02:05:24:65:1f:
e5:93:71:0e:9d:87:08:48:d5:c0:3b:7f:de:eb:70:08:5c:39:
09:33:a8:a1:05:2c:d7:4e:3a:ec:7b:ef:cb:08:1c:f9:c1:73:
a0:06:ee:da:fc:e7:89:f3:7e:19:b7:d2:94:eb:8e:3c:34:ec:
6e:1d:47:bf:8c:fc:3a:0d:73:f7:28:41:46:8e:ab:f5:cf:4f:
7c:ba:c8:09:99:80:f3:c3:e4:00:11:ef:68:be:ef:ad:c5:6e:
5d:86:e6:7d:7d:c5:64:b3:a5:2d:f2:3b:65:f9:05:71:98:e1:
78:73:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 10:01:33 2024 by rpki-client on console-ams.rpki-client.org