Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20333939303733.roa
File: 33362e3235352e39342e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: GTF+WAfdN7tPJZbEUD7a7lHKs9Dubswh5bDkWF76uuM=
Subject key identifier: 54:4D:6B:44:7A:96:AA:48:9B:AD:F9:C8:49:AB:4B:4B:15:8D:9F:CB
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1EF73804137E9E890898522C2C9916DEED4A9E22
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20333939303733.roa
Signing time: Tue 29 Aug 2023 14:06:38 +0000
ROA not before: Tue 29 Aug 2023 14:01:38 +0000
ROA not after: Tue 27 Aug 2024 14:06:38 +0000
asID: 399073
IP address blocks: 36.255.94.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f7:38:04:13:7e:9e:89:08:98:52:2c:2c:99:16:de:ed:4a:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Aug 29 14:01:38 2023 GMT
Not After : Aug 27 14:06:38 2024 GMT
Subject: CN=544D6B447A96AA489BADF9C849AB4B4B158D9FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:24:65:3c:81:28:68:c1:10:79:42:3b:dd:
88:8a:6f:33:df:75:0f:1f:11:96:43:d2:ac:52:b8:
2c:05:7f:4d:f8:1f:d0:e8:af:04:6a:a7:3f:3f:d4:
65:60:2a:0b:3c:e7:84:f2:32:83:d1:c5:a8:31:48:
94:7f:d3:9d:2f:f2:6d:d2:53:a8:70:99:94:d6:57:
68:80:91:59:8c:d5:99:0a:ee:2d:7c:74:bf:74:02:
ea:6d:ed:be:54:51:fd:51:cd:d6:86:47:2b:b6:2a:
66:97:70:98:9e:d5:16:93:6f:70:27:85:e2:eb:99:
c8:c1:20:ea:99:2f:29:ce:90:2d:43:1e:b6:0a:eb:
10:2d:b0:08:f2:43:12:31:05:f1:cf:3b:76:ba:90:
0b:4a:69:26:36:33:b7:52:ef:ca:50:10:11:f2:e7:
80:9c:b9:9c:dd:86:c5:bd:f1:fb:bf:d8:ce:ee:49:
b3:2a:d6:09:d3:49:37:b4:41:cd:a4:7f:9a:0d:9c:
b9:2e:ef:53:fd:dd:d7:a7:7e:d9:04:2d:a0:3a:ba:
db:90:82:39:15:03:99:46:f3:3b:1b:94:3b:4b:0e:
58:e0:d8:91:ef:29:34:47:9a:25:90:8c:09:97:8e:
45:5c:67:4c:22:69:92:8d:a1:3c:f6:94:2a:55:70:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:6B:44:7A:96:AA:48:9B:AD:F9:C8:49:AB:4B:4B:15:8D:9F:CB
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:dc:54:53:c4:41:24:22:b1:4f:f6:77:dc:34:da:d8:42:68:
c4:01:47:19:8a:36:1b:b2:c1:d1:82:2b:16:3b:0f:ca:a9:b4:
13:c5:6d:07:eb:cd:a9:7d:ab:eb:82:50:73:f7:40:00:bc:cf:
2e:e4:95:44:9f:69:85:1c:95:46:57:f9:79:43:c7:1e:ed:a9:
fd:95:01:9e:c3:fe:e2:74:71:08:cf:fd:90:9d:d3:2c:60:07:
f0:fc:2d:69:3b:ca:4e:8c:ad:d9:48:93:42:16:1f:8d:0d:8a:
12:2a:24:ef:f0:53:b8:5f:08:87:60:a4:81:74:89:eb:6d:46:
35:06:d7:32:51:16:13:45:e6:e6:a8:c4:56:c7:56:35:b9:42:
2d:ca:c3:6a:6a:d8:0e:6c:57:d2:51:61:fc:bb:48:8a:09:d9:
16:00:bb:62:9d:45:36:67:13:34:24:02:5f:0b:30:89:5d:70:
60:80:dc:31:28:50:2a:e3:50:b0:c6:1b:45:fb:7e:2c:02:00:
6c:f3:4c:c7:2e:d5:8d:a8:51:79:14:1e:2f:8d:69:bf:4b:2b:
bb:67:3d:e5:b0:5a:df:36:94:c9:6b:60:40:d8:99:a4:3b:cd:
be:1e:a7:a5:a9:46:29:56:74:39:1f:b7:72:ef:0c:1d:8e:cb:
77:f2:26:64
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 29 00:45:02 2023 by rpki-client on console-ams.rpki-client.org