Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3233203d3e2033323134.roa
File: 33362e3235352e39342e302f32332d3233203d3e2033323134.roa (raw, json)
Hash identifier: 4wYPPAw+O71XRCEFRZAZxm19XTFaWqeaQTN6gXpk5LA=
Subject key identifier: 0A:2D:37:2B:3D:D7:81:78:08:1E:A2:6B:41:83:97:F6:E4:62:15:B5
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 590B1DA2CE9B0BAE2C1FD2871AC8EB3CD312F6BB
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3233203d3e2033323134.roa
Signing time: Tue 03 Jan 2023 16:08:32 +0000
ROA not before: Tue 03 Jan 2023 16:03:32 +0000
ROA not after: Tue 02 Jan 2024 16:08:32 +0000
asID: 3214
IP address blocks: 36.255.94.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0b:1d:a2:ce:9b:0b:ae:2c:1f:d2:87:1a:c8:eb:3c:d3:12:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:03:32 2023 GMT
Not After : Jan 2 16:08:32 2024 GMT
Subject: CN=0A2D372B3DD78178081EA26B418397F6E46215B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:d1:99:d6:73:8c:32:5f:62:75:58:08:c2:
c4:ca:78:49:35:67:1e:49:e8:c1:63:bf:46:cb:b0:
43:5a:2e:ed:a2:13:e4:26:ee:19:5a:fb:c2:84:53:
57:59:22:b3:af:50:a5:5c:71:49:98:8a:36:0e:d2:
e7:0e:eb:9b:83:38:fb:aa:85:b8:44:81:8f:05:7e:
e7:ec:36:b5:38:2f:6f:3b:88:67:bc:bd:b7:97:11:
a4:3c:76:7e:4d:ba:98:2b:f1:58:14:31:c3:00:d0:
bc:cb:9d:43:30:92:01:9d:a3:45:e5:0f:db:17:ca:
7d:70:d1:88:e0:3d:30:9a:c1:6a:63:8d:7f:16:08:
ba:c5:39:8a:8e:ae:35:04:2e:20:8d:2f:0e:7c:87:
2c:92:71:91:9a:fd:de:f1:92:fa:3f:1e:9c:3b:e6:
46:12:74:3b:b7:c2:f1:15:de:a2:20:e7:70:6a:c5:
35:e5:d3:3c:87:ad:06:32:e1:de:cf:57:cd:d1:f1:
62:51:16:62:7e:c6:0e:9d:40:6f:18:f8:d9:58:cd:
11:9e:15:9d:ee:4b:a9:09:37:31:1e:74:51:cb:a5:
93:0d:69:81:3d:0d:19:0e:49:67:b0:91:67:a0:55:
0e:57:6a:77:eb:49:15:a7:c5:76:0e:fe:65:8e:69:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:37:2B:3D:D7:81:78:08:1E:A2:6B:41:83:97:F6:E4:62:15:B5
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3233203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
86:42:ad:ac:90:9a:17:d5:65:a8:7c:6b:bc:b8:ca:ce:43:16:
cb:7a:3a:48:fd:82:5d:0e:17:6c:a3:e6:65:5e:46:e4:c5:b2:
0a:8b:10:64:b7:c7:8d:06:4a:a5:a7:f6:91:bf:4f:f7:94:b0:
e2:0d:58:85:17:7c:45:b3:7f:b6:6e:71:55:65:09:ee:1e:2c:
54:97:ed:4e:b0:06:8b:71:fb:e0:e3:25:8d:0c:26:74:2d:cc:
f1:54:09:da:31:bd:69:8b:ff:e2:00:67:2a:9e:8a:05:eb:81:
38:1b:bd:1d:c4:50:70:30:aa:c2:f0:ea:d3:05:85:76:be:b6:
96:03:ea:53:ad:14:27:94:df:6f:00:b1:0b:ca:8a:ec:87:ae:
73:bd:2f:cd:b6:5a:f7:bb:d2:28:9d:99:84:24:0c:55:42:5d:
b4:87:b7:76:4e:5d:17:05:fd:66:dd:99:32:d3:3a:09:e1:e8:
51:99:2f:0e:7e:43:bb:1e:dd:bd:a4:9b:07:10:50:dd:fc:55:
78:98:97:a9:ae:a7:02:f3:8d:4e:47:37:7e:54:94:9a:9a:2d:
bf:91:d3:dc:fb:c1:f4:e3:d0:67:0a:37:0c:36:7f:13:a5:64:
68:0c:83:75:5a:f8:f2:29:53:bd:2f:b0:fd:b5:f9:2f:e4:b2:
2d:42:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org