Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3233203d3e2033323134.roa
File: 33362e3235352e39322e302f32332d3233203d3e2033323134.roa (raw, json)
Hash identifier: 5ykG+jnuupmuwLlWYlCQWUE3gu+s1smFVXuBIeN2700=
Subject key identifier: 06:B5:2B:39:D4:63:58:44:69:21:AF:39:D9:D6:2E:59:AE:92:FC:B7
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 229949CCCF822656417B8878DC51883F5AD15045
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3233203d3e2033323134.roa
Signing time: Tue 03 Jan 2023 16:08:28 +0000
ROA not before: Tue 03 Jan 2023 16:03:28 +0000
ROA not after: Tue 02 Jan 2024 16:08:28 +0000
asID: 3214
IP address blocks: 36.255.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:99:49:cc:cf:82:26:56:41:7b:88:78:dc:51:88:3f:5a:d1:50:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:03:28 2023 GMT
Not After : Jan 2 16:08:28 2024 GMT
Subject: CN=06B52B39D46358446921AF39D9D62E59AE92FCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:b4:ea:92:06:c8:ea:ee:48:4d:e8:66:12:
f4:f3:e3:bf:7e:6f:71:68:e5:1e:9a:7e:a8:b1:51:
f0:ac:e3:a7:cb:71:08:e8:2c:8b:e4:50:60:29:bc:
be:f9:27:2e:44:e7:66:3c:78:3a:aa:dd:1b:e1:bd:
8c:5e:c3:0c:14:57:4f:e4:0e:cf:f5:29:e2:18:9a:
a4:3f:55:d1:3d:b6:52:75:4e:e2:e7:1f:08:06:08:
04:4c:9d:39:be:db:f8:ff:1d:78:37:1b:a3:9f:e9:
70:a7:9c:c9:8b:d5:23:2b:a6:68:71:1d:39:d7:73:
34:8c:c0:c4:5a:dd:ce:c3:2b:e8:c6:df:8f:08:dc:
8a:22:1d:0f:b1:93:06:df:29:f2:01:b1:6a:cb:c2:
c0:58:e4:a7:2b:9e:4e:8e:9c:d4:26:e3:28:d5:7f:
2d:38:24:bb:bc:f6:c0:ce:46:70:29:3f:eb:3f:87:
db:f3:bc:54:b4:a0:59:c4:e2:a1:6e:d9:92:de:df:
f0:b7:08:ba:da:51:e5:1c:94:15:61:63:cf:c8:de:
56:a1:b1:5f:8e:63:b7:30:db:9e:c3:c8:54:82:e3:
b8:7a:4b:65:79:af:1e:4b:09:19:11:10:9f:a1:94:
4e:36:cf:85:72:1f:d6:c3:39:9f:c5:a2:e4:d7:18:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B5:2B:39:D4:63:58:44:69:21:AF:39:D9:D6:2E:59:AE:92:FC:B7
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3233203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:ea:8a:ee:82:1d:a3:f5:da:10:fa:ab:e4:81:9e:0b:75:ef:
56:80:50:95:c7:d1:0a:13:c0:a5:de:ea:6e:dc:8e:e3:3c:a6:
21:cc:84:99:a2:5d:a0:0c:36:8e:08:76:6c:ea:72:df:3d:4d:
08:22:d7:9b:94:b8:e2:77:b2:43:28:c2:b3:75:be:98:6e:5d:
1f:b8:59:9c:c2:a8:d4:ac:68:b4:3c:ce:56:85:99:9e:17:a6:
86:ea:3a:3e:1a:7f:b8:d8:30:43:3a:14:bf:ef:94:ab:04:86:
5e:0c:3f:a5:d8:dd:04:4c:13:ba:7f:3b:12:79:96:7c:c2:01:
ae:b8:7c:dd:14:2b:db:00:5a:90:bc:d1:c6:aa:55:17:c9:2f:
1c:07:3a:10:9e:af:62:5b:b9:09:72:b9:e0:6f:54:45:29:8f:
68:16:eb:3e:aa:8c:ad:3a:37:02:45:dc:d9:7f:c5:18:99:3b:
58:d3:7c:e8:7a:ce:49:e9:db:2e:01:4c:9d:26:25:0f:77:61:
50:1e:7b:9b:41:ab:96:03:61:8e:71:d9:11:c1:8b:83:09:ae:
7a:91:72:63:ce:e9:5e:6e:ee:72:a1:73:40:13:62:c7:a0:4f:
64:0b:3b:d8:1a:0f:77:a6:37:f1:f7:87:f8:7d:74:3b:d9:81:
c4:98:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org