Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20383334.roa
File: 33362e3235352e39342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: eKRKaWRnRvRvnSy3zPQzW6evIXgQlC5HzXdUpF9n9PY=
Subject key identifier: 6E:62:15:F1:6A:2B:2A:A7:DC:F8:0F:4E:B4:B2:FD:7F:01:D8:D6:C6
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 05953E65E34FEE8FDCF2138616DB3281EB9FA1B6
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20383334.roa
Signing time: Sat 16 Mar 2024 10:05:26 +0000
ROA not before: Sat 16 Mar 2024 10:00:26 +0000
ROA not after: Sat 15 Mar 2025 10:05:26 +0000
asID: 834
IP address blocks: 36.255.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 02:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:95:3e:65:e3:4f:ee:8f:dc:f2:13:86:16:db:32:81:eb:9f:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Mar 16 10:00:26 2024 GMT
Not After : Mar 15 10:05:26 2025 GMT
Subject: CN=6E6215F16A2B2AA7DCF80F4EB4B2FD7F01D8D6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:90:9d:28:52:6f:48:13:62:df:99:78:fb:
cf:47:6d:3b:9e:32:e8:66:f1:73:10:e6:0c:9d:1d:
ac:1a:32:1c:dd:3c:1b:e6:a1:e2:3f:c2:53:85:69:
37:0d:4a:2c:4a:9c:b4:61:c3:f2:de:44:42:29:dd:
40:32:d4:31:18:55:bb:bb:d8:13:c8:c1:e0:c1:0c:
a3:51:e1:69:a1:46:a8:61:98:a6:4e:f4:e6:b9:fc:
ef:95:90:0e:a3:22:8b:52:2c:31:c0:77:94:33:ee:
09:73:0d:21:34:44:95:50:ab:9e:35:a6:ee:21:d1:
18:ad:21:1e:de:6d:69:4e:1b:c4:a4:47:13:d6:12:
14:21:89:06:c6:51:9f:b6:6b:f1:62:59:78:95:ef:
a0:72:c3:9a:a2:38:6e:e1:f0:68:85:d3:55:98:d7:
e1:68:b7:fa:db:0f:37:fa:19:df:58:ba:2c:72:6a:
39:a4:5c:5e:55:c6:d3:bc:75:0d:fb:70:ca:9b:dc:
85:2e:e2:b3:c2:69:e6:f4:d6:29:b7:71:7a:f3:6f:
c3:9f:c0:a7:8e:73:9e:37:03:45:59:4f:20:2e:ef:
61:84:35:8e:68:96:d8:08:b8:cb:87:c8:14:1b:90:
e1:a5:4f:dd:ab:db:b7:86:05:45:79:96:6c:0b:4c:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:15:F1:6A:2B:2A:A7:DC:F8:0F:4E:B4:B2:FD:7F:01:D8:D6:C6
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:02:9b:29:7f:b2:78:82:4e:0c:fb:25:02:80:22:53:8d:24:
30:62:8a:9c:7e:e6:4f:dc:ed:bf:17:97:24:00:e3:18:ab:43:
8e:fe:57:e0:5f:63:7d:ad:8d:bc:e2:80:2d:f0:7a:f1:ca:2d:
98:e4:d9:78:af:0d:36:67:ad:9a:2f:99:9a:9c:93:c9:c7:dc:
04:45:99:39:f7:1b:66:2c:f6:0e:ac:18:7c:3a:55:48:67:0c:
fb:0d:ac:a9:8e:63:19:cd:a5:88:83:09:f3:c2:ca:6c:a5:ff:
35:d1:e4:b7:d7:d2:56:f3:59:d7:92:a6:4e:00:ca:d4:2e:49:
a8:db:1c:19:b1:01:5d:3c:c3:6f:03:26:5d:27:80:49:1c:75:
46:35:94:3a:d2:4e:43:63:22:88:3b:eb:bd:8d:da:af:ba:a3:
1d:1e:2c:27:de:9b:c3:b1:c5:fc:3b:cc:cd:28:e2:aa:ab:97:
b3:b4:b0:a0:dc:e3:88:e3:2a:31:18:bf:ed:0e:e5:78:74:f6:
95:f4:b7:ca:7e:40:2e:3a:5a:6f:6f:61:33:82:26:0b:5c:8d:
c1:e9:7a:a9:2f:7d:98:0d:94:29:b3:e6:c4:0a:78:f0:00:bb:
b8:5c:03:7f:b9:c0:63:51:96:ce:9b:01:6f:0f:41:dc:3a:1f:
ee:54:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org