Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
File: 33362e3235352e39322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: GOyquNE0IMPaoHrnbqFmlta8juWg6QCpG2TEPwe5klA=
Subject key identifier: CE:E7:50:40:A3:32:25:37:AB:09:3E:72:08:34:CC:CB:41:53:B6:50
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 7874BA6E7E27C27C1C42E93FED11404E6ED4D7E5
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
Signing time: Fri 20 Sep 2024 00:01:03 +0000
ROA not before: Thu 19 Sep 2024 23:56:03 +0000
ROA not after: Fri 19 Sep 2025 00:01:03 +0000
asID: 834
IP address blocks: 36.255.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 07:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:74:ba:6e:7e:27:c2:7c:1c:42:e9:3f:ed:11:40:4e:6e:d4:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 19 23:56:03 2024 GMT
Not After : Sep 19 00:01:03 2025 GMT
Subject: CN=CEE75040A3322537AB093E720834CCCB4153B650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:ce:fe:a4:15:73:7b:66:64:51:a5:5f:c0:
c5:6f:d0:83:bd:42:2a:49:58:c2:2f:3e:fa:36:19:
5d:d5:14:95:5f:46:a6:30:7d:95:06:59:14:34:2a:
fe:9d:83:2c:02:4b:fe:ca:91:27:bb:82:07:c2:fd:
43:c9:00:dc:72:80:a7:cc:10:20:85:7b:a4:94:37:
52:9c:70:3c:95:bf:77:e9:df:1a:40:a7:94:68:81:
31:e8:9d:00:b9:92:f7:2c:98:4e:30:32:a5:2b:65:
c6:f6:69:fa:f9:f3:1a:4d:4e:06:02:75:57:4b:4c:
94:22:22:da:e3:a2:9b:50:24:ad:4d:67:f7:37:bc:
ba:ed:60:f3:9a:b1:1e:80:84:1b:a3:1e:42:03:5d:
2d:a7:1a:b6:5a:e0:31:04:b2:92:94:cb:e5:30:00:
29:6c:59:2e:dc:d6:93:29:d6:4b:21:4a:be:29:c4:
b6:b9:e8:00:f2:00:6c:5c:b0:54:fb:29:49:f2:b1:
b0:e6:27:42:e3:04:a5:fd:f8:2d:5f:7b:ce:85:ee:
0a:aa:17:18:1b:f6:da:56:34:da:2e:63:f1:9a:07:
11:1a:46:34:24:2b:60:36:43:26:39:12:5a:9e:e0:
2b:0b:b7:a5:40:83:d5:4f:ef:8c:f9:73:6a:ae:ed:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:50:40:A3:32:25:37:AB:09:3E:72:08:34:CC:CB:41:53:B6:50
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:98:e2:aa:bc:78:ee:5a:d1:bb:10:d8:28:58:45:f4:16:ce:
87:65:92:3a:5a:f2:c7:e4:fc:f6:3b:db:d8:0b:86:b9:f3:cc:
0a:54:55:fd:ba:aa:6c:43:f4:e5:8c:3e:95:a4:eb:65:15:4e:
9b:f3:da:c0:0a:6f:8b:9d:18:7f:db:51:a9:86:66:01:44:64:
bf:54:8e:77:3c:66:ea:a3:cc:49:ca:3c:cd:64:6a:e0:51:66:
92:34:cf:4d:55:10:6d:e7:af:9b:21:27:fd:b9:e4:17:e9:2d:
f1:d9:ff:36:e0:d9:0d:6a:a1:22:3f:a6:84:34:09:08:ec:f0:
2b:3e:9b:0c:a2:af:2f:cf:cb:b6:95:b9:46:1b:7c:24:bc:f0:
77:f3:72:7d:52:2a:62:20:4b:12:bc:2e:77:77:b1:30:61:a4:
3c:43:26:ec:22:8e:9a:25:6f:f2:d4:b4:c4:60:dc:58:84:b2:
c8:e5:6e:50:c8:c9:3a:3c:f0:2c:20:6c:35:2e:7c:12:28:bf:
98:07:98:bd:d5:07:30:99:33:3b:ac:5d:0e:30:31:56:8d:a0:
4e:bd:c5:92:24:1c:3e:44:00:fc:a9:84:4b:3c:7d:11:63:10:
10:f6:a6:fe:9d:5b:cf:00:dd:1e:26:f9:18:b0:35:e0:8b:f0:
9a:50:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 08:00:34 2024 by rpki-client on console-fra.rpki-client.org