Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: disjonGu9aMqsHuGhI3sDYbmGm9pVOt0tKNYDmoAkhQ=
Subject key identifier: E0:0D:79:9F:2E:BB:AE:9C:ED:B1:8B:8E:75:D1:16:6F:0C:2F:F6:79
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 3F9E9DF43B944A05EE39CB07008B2567C8EB450A
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
Signing time: Sat 24 Feb 2024 00:01:59 +0000
ROA not before: Fri 23 Feb 2024 23:56:59 +0000
ROA not after: Sat 22 Feb 2025 00:01:59 +0000
asID: 834
IP address blocks: 62.192.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 13:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9e:9d:f4:3b:94:4a:05:ee:39:cb:07:00:8b:25:67:c8:eb:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Feb 23 23:56:59 2024 GMT
Not After : Feb 22 00:01:59 2025 GMT
Subject: CN=E00D799F2EBBAE9CEDB18B8E75D1166F0C2FF679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:a4:cc:8e:1a:ac:a0:7d:d5:ed:20:5f:51:
6b:58:39:22:94:83:6b:aa:e1:b0:d2:4c:ca:ac:fd:
dc:8e:c6:25:4f:74:76:21:33:eb:65:0e:3b:99:da:
ac:82:26:7d:b2:c1:45:6e:2c:d8:1c:27:c5:25:b1:
15:bf:c6:e1:97:e3:4c:99:71:01:2a:bd:f4:5f:5a:
77:c2:e6:d0:4c:78:13:b5:e7:c8:f8:0b:0f:db:1a:
16:51:0e:09:a1:f7:2e:71:75:40:ad:10:1a:73:c7:
e0:59:39:49:2e:ad:20:07:d4:6f:9d:0d:99:8f:84:
54:fd:17:9d:e3:dd:fd:92:bd:f0:11:40:30:3a:9e:
1a:f3:9a:8c:cf:d3:33:05:98:58:56:25:70:78:b4:
8a:b4:2a:4f:df:bd:c3:9c:e2:a8:99:64:66:66:ae:
a0:f6:d9:b6:a1:c4:f7:a2:f5:0f:70:7e:02:60:f0:
74:f4:da:45:b6:da:6b:ec:44:1a:88:ec:3f:08:43:
86:b0:b7:04:db:a6:d4:17:a8:0b:82:be:11:06:02:
4e:51:2f:6f:90:96:d1:a4:f4:dc:22:c1:8c:99:c9:
62:9e:00:e3:14:e8:0b:9e:2f:a6:c4:59:de:10:38:
7c:65:ca:b9:29:e8:68:f0:08:90:4f:54:eb:55:07:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:79:9F:2E:BB:AE:9C:ED:B1:8B:8E:75:D1:16:6F:0C:2F:F6:79
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a0:e1:c0:e1:01:bf:bc:86:a4:e4:6a:38:64:1b:90:74:10:
a5:de:dd:40:d5:f3:dc:43:d8:d2:f0:a6:41:8f:c9:a3:c1:79:
89:9f:0a:ae:ae:5a:a1:9d:86:f9:bc:7e:12:55:e8:89:04:90:
64:28:11:5f:04:43:fb:82:bf:50:5e:40:2a:3f:af:56:7c:a7:
00:4f:94:72:b8:45:93:6b:8e:cb:e5:79:2d:43:31:fc:e8:b3:
d0:54:3f:23:d0:0f:e2:f1:63:38:ed:f0:10:a7:ea:99:1d:1c:
ac:3d:ef:9b:b1:98:e8:a8:d5:6d:54:28:9e:85:08:d5:fa:22:
c1:43:24:39:61:9e:98:64:55:35:75:dd:29:0f:a5:1a:f9:26:
9c:af:12:5f:a1:99:30:bd:44:7a:35:ef:78:df:7b:75:dd:30:
d5:31:f8:32:07:12:93:df:b6:c9:97:25:d6:48:97:cc:6c:aa:
dd:c3:db:4a:32:95:98:4b:35:a8:fc:62:d8:0b:cc:43:2f:af:
14:2d:4e:24:ae:ed:87:88:1e:1e:63:25:09:98:a6:e9:1e:d8:
22:7d:b5:7b:76:2d:8c:22:8b:bd:36:58:19:67:0e:17:96:f6:
dd:c2:1c:e4:6f:ba:6d:9b:14:4d:ac:82:4f:98:d2:da:31:17:
12:90:68:6b
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 24 14:05:15 2024 by rpki-client on console-fra.rpki-client.org