Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QuqYSN3LDrpPf2kqnjQgZbnEJWoT32nAyYT4FFYJZ3E=
Subject key identifier: 59:30:72:10:2E:89:54:8E:7E:AB:40:80:40:CB:3E:64:39:58:55:6D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 60E0F9CA6A1CF71F48337919A8779D5214C3E7AB
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20383334.roa
Signing time: Thu 29 Feb 2024 00:03:49 +0000
ROA not before: Wed 28 Feb 2024 23:58:49 +0000
ROA not after: Thu 27 Feb 2025 00:03:49 +0000
asID: 834
IP address blocks: 77.83.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 12:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e0:f9:ca:6a:1c:f7:1f:48:33:79:19:a8:77:9d:52:14:c3:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Feb 28 23:58:49 2024 GMT
Not After : Feb 27 00:03:49 2025 GMT
Subject: CN=593072102E89548E7EAB408040CB3E643958556D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:75:14:50:a5:c7:1a:98:a5:b9:98:43:0a:
0b:77:2e:b5:74:37:48:36:3d:5a:b5:be:63:c2:78:
8b:a4:f0:00:cd:7e:9f:cc:09:70:3a:df:12:ec:5b:
cb:40:c5:14:49:98:b9:9c:fd:fb:49:cb:c8:f5:09:
21:93:54:47:d4:38:c4:4e:2b:82:2c:ce:51:7a:bd:
e8:b6:6a:12:07:b4:c9:6d:c9:6a:80:4b:ac:12:f7:
a8:1d:4d:d0:4b:17:db:98:35:5f:23:57:92:c1:64:
44:ef:ab:b6:b5:2a:cd:aa:89:85:61:39:8a:17:f3:
4f:53:a5:99:6c:3d:9c:f4:18:4f:c4:71:35:7a:c9:
85:05:99:b2:1d:2b:3f:7a:24:78:cb:b6:ea:96:4b:
d8:1c:89:ab:9b:50:5f:7f:0c:83:74:8a:94:b6:54:
97:b7:da:e9:11:0d:af:1e:23:f8:df:f1:88:93:86:
1d:4c:25:fc:35:6e:6e:b3:7a:73:ff:af:65:48:ce:
9c:5b:bd:51:5b:51:a6:ee:a8:01:ca:26:16:24:ee:
1c:17:89:2b:fd:b2:79:b8:20:dd:11:5c:1c:81:77:
4f:36:7f:26:05:fd:cf:9c:0b:e6:5b:b4:d1:ca:1b:
9a:9a:f9:e0:90:53:3d:c8:b3:c8:0d:c9:bb:6f:ee:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:72:10:2E:89:54:8E:7E:AB:40:80:40:CB:3E:64:39:58:55:6D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bf:bf:6d:b9:7b:1f:d3:bf:b0:b6:91:df:38:9a:42:2c:f0:
c1:fa:16:78:33:8d:4f:43:8f:d7:a3:48:c4:35:e9:b5:1f:e4:
e2:dc:29:6f:dd:3e:c6:f2:d5:9f:af:4f:37:30:86:02:14:e1:
df:80:54:4c:da:88:55:de:12:45:5e:90:15:26:6b:26:21:ce:
ad:d5:94:fc:af:06:3d:c6:a5:c4:2c:c0:09:25:6e:cb:29:ff:
52:70:dc:52:b5:9d:d2:49:62:90:af:f3:b9:b4:42:6e:14:63:
eb:25:42:26:8e:bd:c3:49:88:e4:ef:ab:3d:29:e1:ab:0b:84:
35:b5:b1:2e:44:eb:1a:d9:d7:17:8a:03:5d:52:e6:37:f3:51:
fc:56:3f:fe:24:ac:24:a7:6a:38:06:d3:33:de:d2:12:08:70:
9c:c3:82:84:f4:0c:b5:45:3b:b8:b7:0c:45:44:37:e4:61:ae:
a4:a3:86:e5:df:f0:40:9e:0b:5a:51:d2:29:4b:5e:eb:d6:62:
50:b0:7a:4f:dc:08:e4:fa:f9:22:77:01:33:7e:ca:74:8d:e8:
ac:d3:99:6b:b7:a7:4f:82:51:c0:77:d4:58:5f:a7:b1:2b:3a:
b1:16:d3:d3:a4:b8:ce:55:f9:96:dc:a1:53:67:5b:18:13:c1:
2c:a7:77:b8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUYOD5ymoc9x9IM3kZqHedUhTD56swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNDAyMjgyMzU4NDlaFw0yNTAyMjcwMDAzNDlaMDMxMTAvBgNV
BAMTKDU5MzA3MjEwMkU4OTU0OEU3RUFCNDA4MDQwQ0IzRTY0Mzk1ODU1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSnUUUKXHGpiluZhDCgt3LrV0
N0g2PVq1vmPCeIuk8ADNfp/MCXA63xLsW8tAxRRJmLmc/ftJy8j1CSGTVEfUOMRO
K4IszlF6vei2ahIHtMltyWqAS6wS96gdTdBLF9uYNV8jV5LBZETvq7a1Ks2qiYVh
OYoX809TpZlsPZz0GE/EcTV6yYUFmbIdKz96JHjLtuqWS9gciaubUF9/DIN0ipS2
VJe32ukRDa8eI/jf8YiThh1MJfw1bm6zenP/r2VIzpxbvVFbUabuqAHKJhYk7hwX
iSv9snm4IN0RXByBd082fyYF/c+cC+ZbtNHKG5qa+eCQUz3Is8gNybtv7uNZAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUWTByEC6JVI5+q0CAQMs+ZDlYVW0wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVNoMA0G
CSqGSIb3DQEBCwUAA4IBAQBpv79tuXsf07+wtpHfOJpCLPDB+hZ4M41PQ4/Xo0jE
Nem1H+Ti3Clv3T7G8tWfr083MIYCFOHfgFRM2ohV3hJFXpAVJmsmIc6t1ZT8rwY9
xqXELMAJJW7LKf9ScNxStZ3SSWKQr/O5tEJuFGPrJUImjr3DSYjk76s9KeGrC4Q1
tbEuROsa2dcXigNdUuY381H8Vj/+JKwkp2o4BtMz3tISCHCcw4KE9Ay1RTu4twxF
RDfkYa6ko4bl3/BAngtaUdIpS17r1mJQsHpP3Ajk+vkidwEzfsp0jeis05lrt6dP
glHAd9RYX6exKzqxFtPTpLjOVfmW3KFTZ1sYE8Esp3e4
Generated at Sat Mar 2 13:02:34 2024 by rpki-client on console-ams.rpki-client.org