Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20323031363730.roa
File: 37372e38332e3130372e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier: kWbF7lluZIB2ByJTYVbc9ykeOBL16rRhyzB2owz1CFw=
Subject key identifier: 48:2F:10:02:CB:D5:9B:60:FD:32:6A:49:A4:57:1E:8C:EB:A6:1F:37
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3D120413631B28EFA3820857E13A8A8B24EF8636
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20323031363730.roa
Signing time: Mon 11 Mar 2024 15:28:08 +0000
ROA not before: Mon 11 Mar 2024 15:23:08 +0000
ROA not after: Mon 10 Mar 2025 15:28:08 +0000
asID: 201670
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 14:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:12:04:13:63:1b:28:ef:a3:82:08:57:e1:3a:8a:8b:24:ef:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 11 15:23:08 2024 GMT
Not After : Mar 10 15:28:08 2025 GMT
Subject: CN=482F1002CBD59B60FD326A49A4571E8CEBA61F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:44:7f:63:1b:bb:86:14:86:4b:17:d6:b3:
63:cd:d9:44:39:72:94:26:b4:8f:97:9a:8a:35:46:
fb:61:a2:00:e6:28:4b:8d:a7:81:c4:07:74:e3:65:
71:ae:97:9c:a0:66:7f:11:ac:89:08:75:f4:1b:0d:
36:1c:b7:42:3d:f7:27:bc:8c:24:55:7c:f6:b1:8a:
00:cf:68:8e:32:f0:5a:0a:5a:18:f4:5b:b2:88:dd:
f8:ae:9d:6d:cf:3b:f0:61:92:b3:dc:f7:f0:1f:4c:
9f:76:9a:a0:e4:d8:da:9d:ca:64:91:fb:8f:6f:1d:
99:58:f2:2a:ae:73:d6:91:27:00:67:98:ba:97:b2:
62:15:d1:df:75:9b:2c:f6:e0:aa:48:94:a0:82:f2:
b3:5a:3a:7f:d5:c9:56:26:a4:94:96:6e:98:bc:c7:
e6:02:2f:9e:b7:dc:d7:b0:1e:32:51:de:c5:e5:76:
83:d5:c6:02:27:4b:2a:37:a4:2d:5e:36:e2:92:2f:
24:85:51:33:92:16:5c:2b:2c:1a:2d:88:a1:e7:94:
2f:09:1d:3b:18:0c:f9:8d:8f:93:83:ab:61:ed:61:
f7:26:d1:6c:c8:ac:58:e3:15:32:fa:85:44:e9:51:
56:7b:50:e5:a3:60:b3:6c:79:ac:16:ba:04:2a:19:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2F:10:02:CB:D5:9B:60:FD:32:6A:49:A4:57:1E:8C:EB:A6:1F:37
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20323031363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0b:64:3a:cb:73:a2:2e:18:5a:9f:f3:08:14:aa:f6:be:e7:
f5:34:b7:59:f6:4f:fe:a1:5a:eb:bd:99:3e:38:80:b5:d9:06:
ad:03:98:71:d5:15:0a:0f:af:be:ed:d3:6a:31:9b:1c:54:3f:
3d:17:22:ff:d3:8f:b0:42:e3:1b:21:c0:ec:40:1e:49:46:2f:
60:d2:4e:b7:a9:ea:de:b1:16:e7:44:b4:ef:8b:a4:c9:96:2c:
4e:c4:cd:f2:67:80:4a:a9:dc:cd:a2:15:54:7b:4b:fd:1e:98:
d1:0e:06:d6:ad:85:ca:a8:a4:b5:a3:5a:c8:65:64:85:6f:2a:
03:e9:7d:1c:6f:fa:5d:bb:f5:59:52:97:8e:68:c0:92:ee:68:
45:3d:ce:cd:e4:6e:f1:cb:61:39:c3:e3:d4:85:b6:5e:e7:23:
69:80:14:54:c1:63:16:f7:45:a7:69:0b:8d:4f:19:05:bd:7e:
51:a1:fa:09:f2:c0:4c:2e:38:74:1a:36:57:22:55:6f:39:31:
53:46:77:b0:42:bb:bf:d7:ce:6e:f7:7a:45:73:54:44:7f:c6:
f1:7e:f7:f8:6c:bb:9b:4e:e1:9d:6d:a3:fd:dc:19:a8:e2:c3:
f3:b4:69:fe:58:7b:4c:bc:30:f5:2b:2a:f2:03:a8:14:11:5f:
a0:e6:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:53:27 2024 by rpki-client on console-fra.rpki-client.org