Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e203233343730.roa
File: 33362e3235352e39342e302f32332d3234203d3e203233343730.roa (raw, json)
Hash identifier: NJiWZYzo1LHpIhvFllvsVNlLFQIG9S72JuFs0OzMeXM=
Subject key identifier: 5B:6E:63:78:3C:D2:62:A1:57:AF:3C:A7:DD:8E:EC:F0:07:CB:7F:BC
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 901E19ED96E7639D38D84CDB198B8979C280C7
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e203233343730.roa
Signing time: Mon 15 Jan 2024 06:58:54 +0000
ROA not before: Mon 15 Jan 2024 06:53:54 +0000
ROA not after: Mon 13 Jan 2025 06:58:54 +0000
asID: 23470
IP address blocks: 36.255.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 10:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
90:1e:19:ed:96:e7:63:9d:38:d8:4c:db:19:8b:89:79:c2:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 15 06:53:54 2024 GMT
Not After : Jan 13 06:58:54 2025 GMT
Subject: CN=5B6E63783CD262A157AF3CA7DD8EECF007CB7FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:2b:83:1f:5a:ba:04:04:db:4c:22:29:58:
5f:4c:e2:1e:fa:4c:3e:da:b2:13:17:37:6f:cd:8b:
7d:22:11:d2:c0:75:5c:38:ed:4e:f1:90:99:b6:8f:
b9:44:20:49:cc:a6:1e:df:d3:2b:e9:64:6d:c4:45:
46:34:f5:26:db:50:e4:5d:ed:96:05:ea:b0:2a:e4:
63:69:7f:11:50:68:29:9a:8e:4b:d5:b6:31:a0:62:
55:7b:b0:6a:f9:4c:1d:13:90:ee:af:6c:fc:83:ca:
38:12:b9:2c:87:6b:de:bd:29:b8:fe:87:1d:eb:29:
c4:2b:c9:97:1b:d3:92:80:09:25:6d:9c:4c:d1:df:
9e:9a:51:6e:66:f0:a5:ee:fd:04:44:01:ce:d5:19:
83:ae:e5:f0:e7:5d:ed:f1:af:20:77:08:62:9d:73:
d7:cf:0d:88:5c:e6:3c:a5:56:87:b7:53:03:b0:2e:
5d:b5:b5:e6:06:b3:0d:48:07:bf:57:12:d7:54:e3:
0e:84:0f:c3:b7:2a:ad:b6:26:c0:b6:7d:49:92:4d:
65:af:81:09:23:d0:53:61:77:4e:80:b6:8f:79:51:
8c:36:ce:47:76:ae:3d:04:d5:20:41:a4:47:16:89:
fd:89:48:ed:6e:0c:8a:23:82:73:2e:1d:bc:f8:d7:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:63:78:3C:D2:62:A1:57:AF:3C:A7:DD:8E:EC:F0:07:CB:7F:BC
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:98:0a:10:c7:35:05:f9:db:e9:54:d4:33:fc:d0:cc:04:47:
69:41:e3:51:41:e8:66:72:48:94:7e:86:d6:48:99:20:2a:fe:
9b:ab:e4:1a:1a:58:47:09:dd:63:c8:3d:53:fb:d3:9b:40:5e:
f5:7a:18:b3:e2:d2:1f:73:a5:f0:df:41:f0:8f:03:9f:bc:e0:
d8:fb:13:3f:f8:71:e3:c0:b9:34:fa:a5:0d:47:10:95:73:f1:
a6:2b:fb:5b:3f:f4:62:44:a9:2c:d9:8f:09:04:d2:3a:e5:be:
62:19:79:f9:6c:9a:bf:1d:ea:89:c8:1c:40:1e:00:c0:35:af:
ab:de:db:ff:29:d8:74:0a:e5:4a:5e:d6:77:42:22:44:e0:d5:
80:ae:c8:2c:07:c6:72:87:13:5c:99:26:26:dd:35:35:b3:d9:
55:4c:78:fc:17:c3:1e:5e:60:55:4b:01:81:44:55:9f:01:50:
4a:65:22:d5:4f:70:49:f2:da:72:13:17:a7:a8:9c:15:dc:2f:
61:17:9d:32:22:bd:65:33:d5:7e:77:73:37:b5:93:76:54:50:
f1:81:da:b1:6e:3a:d4:bb:7f:b9:c8:08:6d:03:a6:3c:62:65:
6a:33:ff:ae:cc:3d:4f:a3:11:82:b2:60:04:80:2f:df:45:b2:
d4:d4:13:45
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 16 11:27:56 2024 by rpki-client on console-fra.rpki-client.org