Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
File: 36322e3139322e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z1oyrNltiDN5Rgdo6ZOBDR7ctYyqP779Qek2l1uM/gg=
Subject key identifier: 96:FE:78:BD:B5:42:8D:57:E3:F4:8D:86:63:CD:99:83:91:42:AB:9F
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 253DAEB5EDA1E1C49AA15D67C66F23ADEC0DC9B0
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Apr 2025 11:23:13 +0000
ROA not before: Fri 25 Apr 2025 11:18:13 +0000
ROA not after: Fri 24 Apr 2026 11:23:13 +0000
asID: 834
IP address blocks: 62.192.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 14:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3d:ae:b5:ed:a1:e1:c4:9a:a1:5d:67:c6:6f:23:ad:ec:0d:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Apr 25 11:18:13 2025 GMT
Not After : Apr 24 11:23:13 2026 GMT
Subject: CN=96FE78BDB5428D57E3F48D8663CD99839142AB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:9c:ae:e7:be:83:ec:53:60:0b:17:73:fc:
29:85:72:16:9b:d6:82:e6:53:dd:bc:18:76:63:02:
df:1c:26:87:5d:47:5e:2e:4d:75:e6:66:66:6c:37:
cf:2d:49:83:f5:cc:84:e7:16:21:d1:fc:e1:77:af:
cc:07:cb:10:6f:49:4b:8f:b0:bc:8d:ff:0e:7d:cc:
2b:71:1a:3c:bf:39:63:3d:a0:81:be:46:fe:e4:3d:
77:07:32:00:88:88:e9:05:fd:54:fa:e4:21:72:8d:
91:d4:05:95:13:76:63:b6:0f:e2:fc:c2:8b:98:83:
dc:d1:24:4b:5a:fb:0e:40:a1:2e:18:23:b0:b8:d3:
99:8f:ec:5d:e2:c8:94:2e:5d:09:0d:74:64:bc:e8:
c6:f0:11:90:41:ba:81:69:ad:ab:e0:0a:a3:26:74:
e7:c0:53:77:47:97:3d:df:6f:a3:c5:1c:84:3f:8c:
85:fe:64:94:26:44:86:52:a3:e6:9d:1a:46:ec:bb:
ed:e3:ac:b6:90:b2:1c:60:be:dc:e3:27:40:23:3a:
4c:50:17:bf:b2:4e:7b:35:3f:32:e4:13:0b:8c:a1:
15:cc:57:cc:d8:e5:4e:98:a6:a5:72:db:cc:22:df:
b3:63:92:af:39:01:6d:1e:a9:5c:d3:ed:de:2d:f7:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:78:BD:B5:42:8D:57:E3:F4:8D:86:63:CD:99:83:91:42:AB:9F
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e3:d7:22:2f:d6:9d:21:5f:79:47:49:ef:06:9d:c9:c8:eb:
39:37:27:fd:19:f1:2b:3f:1d:c2:3c:f5:bf:80:85:f9:40:87:
8f:2b:88:9a:97:d6:bb:36:83:99:1a:b2:52:21:06:8c:3d:9f:
51:65:88:da:23:82:6c:19:d5:03:9b:06:97:be:2e:83:c8:05:
bc:f7:67:41:da:f6:51:bd:42:fa:fe:13:70:a3:f8:ee:2d:e6:
42:36:41:9f:ce:20:de:1d:ff:26:8e:5b:53:32:d1:5b:1b:b5:
5d:ad:eb:70:04:fa:93:24:5f:f5:ce:41:58:08:a9:21:4d:67:
3b:60:7b:a1:0e:a1:ba:36:0a:b6:3d:dd:11:83:e8:6e:c9:eb:
bb:4d:09:28:7a:20:c5:d4:34:5e:0e:3b:99:fb:37:c8:3d:29:
c5:71:13:ec:81:7a:fc:6e:19:58:94:d1:5a:4a:d8:5f:95:02:
ab:bf:cb:78:ea:3d:b9:3e:bd:f6:bc:71:87:f3:76:17:5a:2c:
31:f4:9c:ee:b5:25:6f:a1:36:6f:36:d6:fd:78:87:9c:73:95:
bb:c9:be:3d:08:7d:fc:44:65:a3:c3:3c:65:8a:68:1a:8c:93:
ac:31:27:a9:1e:fc:4a:8b:5b:ca:24:c5:8c:f2:77:77:f8:66:
c5:9c:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:35:24 2025 by rpki-client