Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20323130353432.roa
File: 33362e3235352e39342e302f32332d3234203d3e20323130353432.roa (raw, json)
Hash identifier: iHxcf0iPwm8pvM0rNrkQcAiZEFriHD317P1BdarHnz8=
Subject key identifier: F3:91:6D:B8:B5:E4:3B:D5:B4:9B:AC:A7:45:4A:1A:F3:D8:21:9A:A4
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 36E0306CD22422FF7107001C26BBB36184965AA2
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20323130353432.roa
Signing time: Wed 11 Oct 2023 08:17:06 +0000
ROA not before: Wed 11 Oct 2023 08:12:06 +0000
ROA not after: Wed 09 Oct 2024 08:17:06 +0000
asID: 210542
IP address blocks: 36.255.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e0:30:6c:d2:24:22:ff:71:07:00:1c:26:bb:b3:61:84:96:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 11 08:12:06 2023 GMT
Not After : Oct 9 08:17:06 2024 GMT
Subject: CN=F3916DB8B5E43BD5B49BACA7454A1AF3D8219AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:46:21:41:e1:d9:7b:4d:35:f5:d1:8e:fb:
73:33:b6:ad:45:69:01:d4:da:b6:b9:51:a5:64:ac:
5c:02:6c:14:7f:ef:bf:09:c5:a0:61:73:ed:12:8c:
00:bf:0d:9a:58:ba:a9:71:db:54:eb:aa:cd:a2:88:
95:0b:b3:01:1e:a7:12:7f:09:5b:a2:6f:1f:c8:67:
63:32:d0:06:c5:0e:33:49:f5:8d:54:a0:79:bb:07:
bf:e2:94:8f:10:57:06:72:f5:74:a8:98:0a:5d:d5:
ec:b7:91:73:1e:7e:ac:1a:4b:cc:63:62:e5:57:ea:
7a:01:c5:1b:d1:bb:21:d4:86:a0:c1:26:ee:1d:e9:
51:09:80:8b:85:bc:69:24:c0:fb:2a:9a:1e:71:c3:
7e:13:db:d4:ea:57:35:20:82:39:11:fc:f6:e4:95:
8f:ba:c1:1f:c7:73:e3:5b:54:2f:58:c1:66:4a:7d:
22:6a:14:59:24:36:40:e0:9e:4d:1e:83:0e:80:01:
c6:60:40:39:52:c7:46:0d:19:fc:d7:49:01:66:c0:
87:e6:30:52:a7:0e:52:f3:20:f4:c9:0b:55:63:d0:
41:a9:d3:ce:4a:42:2d:97:64:c0:ce:e8:17:37:47:
35:27:aa:9f:ba:e9:7e:3f:48:cb:77:a1:c8:26:87:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:6D:B8:B5:E4:3B:D5:B4:9B:AC:A7:45:4A:1A:F3:D8:21:9A:A4
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20323130353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
80:60:6f:f7:96:cc:0e:35:36:18:b5:48:b3:c2:c5:37:e9:c2:
52:57:f5:79:2c:42:19:bf:84:f4:0d:73:9e:7e:0e:b6:73:5d:
8b:a6:21:95:c7:6c:72:e4:55:12:ce:26:ad:55:95:4d:91:32:
c8:92:ba:43:52:ef:21:d8:79:18:34:06:78:e6:77:d2:ee:4d:
db:83:9f:46:c1:6a:74:2e:72:c2:84:bf:38:c3:01:d4:62:61:
a0:df:e8:5a:cb:d2:29:eb:5d:b0:33:d8:28:f3:8d:0e:64:41:
c1:5b:0f:00:87:47:4b:37:70:e9:ea:5d:d7:26:18:53:ea:90:
75:d8:18:20:07:0e:f6:48:93:a4:44:fb:49:f2:2b:c3:c0:e6:
a7:88:62:1e:9d:87:e2:7a:43:97:c5:b9:05:fd:18:32:e6:fc:
92:e8:06:9e:59:60:1c:80:72:0d:f7:6c:13:68:20:68:24:32:
95:f8:c1:2e:a0:8c:d6:ad:d2:b1:b4:59:83:37:22:dd:c6:7b:
31:cc:de:55:16:ec:a6:16:13:0b:43:51:f9:cf:57:52:e2:38:
70:d7:19:f7:bb:b8:e6:ff:86:e9:9e:a3:98:d3:49:be:44:30:
f7:f8:97:cb:ef:ba:ec:e6:88:96:20:3c:fe:c9:9c:4c:bf:37:
05:17:47:cd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNuAwbNIkIv9xBwAcJruzYYSWWqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yMzEwMTEwODEyMDZaFw0yNDEwMDkwODE3MDZaMDMxMTAvBgNV
BAMTKEYzOTE2REI4QjVFNDNCRDVCNDlCQUNBNzQ1NEExQUYzRDgyMTlBQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/UYhQeHZe0019dGO+3Mztq1F
aQHU2ra5UaVkrFwCbBR/778JxaBhc+0SjAC/DZpYuqlx21Trqs2iiJULswEepxJ/
CVuibx/IZ2My0AbFDjNJ9Y1UoHm7B7/ilI8QVwZy9XSomApd1ey3kXMefqwaS8xj
YuVX6noBxRvRuyHUhqDBJu4d6VEJgIuFvGkkwPsqmh5xw34T29TqVzUggjkR/Pbk
lY+6wR/Hc+NbVC9YwWZKfSJqFFkkNkDgnk0egw6AAcZgQDlSx0YNGfzXSQFmwIfm
MFKnDlLzIPTJC1Vj0EGp085KQi2XZMDO6Bc3RzUnqp+66X4/SMt3ocgmh6brAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU85FtuLXkO9W0m6ynRUoa89ghmqQwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzMzNjJlMzIzNTM1MmUzOTM0
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTMwMzUzNDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
JP9eMA0GCSqGSIb3DQEBCwUAA4IBAQCAYG/3lswONTYYtUizwsU36cJSV/V5LEIZ
v4T0DXOefg62c12LpiGVx2xy5FUSziatVZVNkTLIkrpDUu8h2HkYNAZ45nfS7k3b
g59GwWp0LnLChL84wwHUYmGg3+hay9Ip612wM9go840OZEHBWw8Ah0dLN3Dp6l3X
JhhT6pB12BggBw72SJOkRPtJ8ivDwOaniGIenYfiekOXxbkF/Rgy5vyS6AaeWWAc
gHIN92wTaCBoJDKV+MEuoIzWrdKxtFmDNyLdxnsxzN5VFuymFhMLQ1H5z1dS4jhw
1xn3u7jm/4bpnqOY00m+RDD3+JfL77rs5oiWIDz+yZxMvzcFF0fN
Generated at Mon Jan 15 01:12:06 2024 by rpki-client on console-fra.rpki-client.org