Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32332d3234203d3e20383334.roa
File: 37372e38332e3130362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: KlyP7+93XHH9apGgJ4/t89D2V6ErgSM2yc70YVkzHew=
Subject key identifier: DE:6B:C5:2D:73:AE:4E:07:05:7A:38:24:54:39:05:37:33:3B:BF:43
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0403C82B6562C2BDA5A053CBD92C03E7E571FE8B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32332d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:37 +0000
ROA not before: Mon 23 Oct 2023 09:36:37 +0000
ROA not after: Mon 21 Oct 2024 09:41:37 +0000
asID: 834
IP address blocks: 77.83.106.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:03:c8:2b:65:62:c2:bd:a5:a0:53:cb:d9:2c:03:e7:e5:71:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:37 2023 GMT
Not After : Oct 21 09:41:37 2024 GMT
Subject: CN=DE6BC52D73AE4E07057A382454390537333BBF43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:59:12:e9:72:cd:51:53:71:db:f2:07:46:
b7:5e:ef:ae:b4:22:71:73:ac:1f:98:64:ff:da:27:
eb:42:42:15:48:d2:f7:64:a4:ba:e6:64:d7:69:fc:
89:e1:f2:70:64:58:90:d1:7e:13:f5:1b:85:ac:6c:
45:d2:f7:32:53:95:0a:f4:e7:cb:35:f3:d5:8b:04:
3f:cb:3d:41:1e:ff:bc:f1:3d:d4:08:58:3c:94:4c:
08:01:dd:1c:b6:69:e7:26:32:6f:9f:fa:cb:2b:63:
55:de:ce:10:cf:75:19:31:3e:7b:ea:ea:09:36:29:
cf:17:b2:07:8d:97:ed:1c:ee:f6:ee:ea:d8:19:fe:
40:03:5d:8b:83:82:32:b2:90:09:b4:6e:e8:c5:9a:
21:a2:55:32:92:be:ed:ff:23:ec:20:62:65:60:85:
87:43:40:58:da:ed:9c:ed:d6:15:1d:e9:cc:6d:2a:
05:00:ab:9b:51:dd:f3:39:36:8c:f2:f4:41:72:f8:
63:f4:40:65:b2:29:87:9c:ec:11:e5:05:0d:85:d4:
19:0e:fe:f8:27:af:83:62:a7:72:43:02:19:95:76:
0f:58:32:f5:90:dd:00:e7:b1:7a:bf:29:2a:24:3a:
4a:ea:6e:5b:0e:f0:a3:dc:8a:fa:dc:01:50:f8:d5:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:C5:2D:73:AE:4E:07:05:7A:38:24:54:39:05:37:33:3B:BF:43
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:a5:9f:60:0d:64:4f:23:b9:d3:63:3a:8e:37:16:b1:da:9b:
a9:27:e0:49:dd:f1:4d:1f:d1:3c:ce:39:d9:cd:84:a8:f1:54:
a2:3a:03:04:91:8f:91:af:ed:eb:e8:51:04:79:88:cb:67:81:
fd:0b:b8:f9:3a:e2:ec:58:8f:7b:a7:93:65:ac:eb:ec:e8:be:
60:ad:5d:21:5d:ee:b4:29:f5:cd:1e:5d:ab:6c:1d:98:85:f7:
ae:a7:5b:95:8a:ae:88:f0:63:58:55:8f:9e:07:d8:9a:aa:03:
4f:ec:0e:7d:be:e1:5e:a2:7b:18:60:8e:0b:88:ca:94:eb:b8:
a7:ad:a3:9f:20:22:81:03:b2:72:27:0b:b4:f2:3b:9b:f9:1a:
31:a9:1e:a2:4c:f8:82:8b:97:32:05:8d:4b:1a:38:e4:e7:ae:
91:d1:04:e7:8e:0a:a7:af:7b:a2:a8:3b:79:7d:57:d0:92:2c:
d8:de:b8:13:fd:08:b6:f1:2a:95:88:9f:95:06:c9:b2:f3:57:
61:e8:6d:b8:7a:20:ab:a1:bf:21:0e:10:60:e2:70:77:ba:be:
24:db:5b:94:ba:10:01:5d:f8:f2:fe:e4:8f:cf:91:dd:92:bd:
d1:95:9f:88:06:a2:03:21:d1:65:15:62:b3:da:c0:e4:b2:1b:
38:d4:6b:0c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUBAPIK2Viwr2loFPL2SwD5+Vx/oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEwMjMwOTM2MzdaFw0yNDEwMjEwOTQxMzdaMDMxMTAvBgNV
BAMTKERFNkJDNTJENzNBRTRFMDcwNTdBMzgyNDU0MzkwNTM3MzMzQkJGNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuVkS6XLNUVNx2/IHRrde7660
InFzrB+YZP/aJ+tCQhVI0vdkpLrmZNdp/Inh8nBkWJDRfhP1G4WsbEXS9zJTlQr0
58s189WLBD/LPUEe/7zxPdQIWDyUTAgB3Ry2aecmMm+f+ssrY1XezhDPdRkxPnvq
6gk2Kc8XsgeNl+0c7vbu6tgZ/kADXYuDgjKykAm0bujFmiGiVTKSvu3/I+wgYmVg
hYdDQFja7Zzt1hUd6cxtKgUAq5tR3fM5Nozy9EFy+GP0QGWyKYec7BHlBQ2F1BkO
/vgnr4Nip3JDAhmVdg9YMvWQ3QDnsXq/KSokOkrqblsO8KPcivrcAVD41fMHAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU3mvFLXOuTgcFejgkVDkFNzM7v0MwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVNqMA0G
CSqGSIb3DQEBCwUAA4IBAQDhpZ9gDWRPI7nTYzqONxax2pupJ+BJ3fFNH9E8zjnZ
zYSo8VSiOgMEkY+Rr+3r6FEEeYjLZ4H9C7j5OuLsWI97p5NlrOvs6L5grV0hXe60
KfXNHl2rbB2Yhfeup1uViq6I8GNYVY+eB9iaqgNP7A59vuFeonsYYI4LiMqU67in
raOfICKBA7JyJwu08jub+RoxqR6iTPiCi5cyBY1LGjjk566R0QTnjgqnr3uiqDt5
fVfQkizY3rgT/Qi28SqViJ+VBsmy81dh6G24eiCrob8hDhBg4nB3ur4k21uUuhAB
Xfjy/uSPz5Hdkr3RlZ+IBqIDIdFlFWKz2sDkshs41GsM
-----END CERTIFICATE-----
Generated at Wed Jan 10 01:26:44 2024 by rpki-client on console-ams.rpki-client.org