Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3132382e302f31382d3138203d3e203432363839.roa
File: 33372e3230332e3132382e302f31382d3138203d3e203432363839.roa (raw, json)
Hash identifier: wPgpzNumf7+qxK6IJw+/2FzcX2yqpvyjZ7WTsfaL3AE=
Subject key identifier: B6:AD:F5:FA:5C:AA:60:C7:FE:2F:C4:CA:FE:75:2D:E5:C6:6A:61:18
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 22666B9A562637D48BE7D28BA866538F341BF7D3
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3132382e302f31382d3138203d3e203432363839.roa
Signing time: Tue 19 Mar 2024 10:16:16 +0000
ROA not before: Tue 19 Mar 2024 10:11:16 +0000
ROA not after: Tue 18 Mar 2025 10:16:16 +0000
asID: 42689
IP address blocks: 37.203.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:66:6b:9a:56:26:37:d4:8b:e7:d2:8b:a8:66:53:8f:34:1b:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Mar 19 10:11:16 2024 GMT
Not After : Mar 18 10:16:16 2025 GMT
Subject: CN=B6ADF5FA5CAA60C7FE2FC4CAFE752DE5C66A6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:cb:f1:50:24:08:8e:4a:02:f6:12:23:0d:
35:e5:34:e4:65:a1:10:29:1d:29:08:35:ed:65:fe:
87:79:62:86:5f:51:5c:51:39:e3:23:3a:ff:fa:b4:
b8:b9:b5:71:a6:4a:74:81:d8:6d:d5:32:d5:04:e8:
33:61:0b:5e:e6:bd:17:b6:d5:06:45:ba:4f:3a:07:
99:15:dd:bb:01:93:f7:07:cc:65:8f:4c:c7:3e:cb:
2a:14:07:4d:62:a9:3f:fa:28:45:5b:b5:da:ec:b6:
df:da:f5:42:48:ff:a1:cb:9a:ec:3e:e1:e3:96:c8:
6e:02:29:38:fa:87:40:7e:79:8a:41:d5:0d:23:fc:
65:f6:96:c0:04:b8:f4:59:0d:cf:0f:4b:6d:3e:b9:
85:07:d0:2c:78:fd:2e:42:77:66:41:29:74:5e:bd:
38:cb:b2:a9:c3:16:9c:e8:fe:65:4a:b8:63:4d:43:
50:cc:05:a8:d4:84:be:76:05:89:d0:3e:85:06:71:
38:cf:0d:dd:b3:dd:0d:70:98:9a:8f:6b:17:16:39:
ab:94:68:4d:90:d0:2b:50:64:f2:18:15:86:6c:26:
78:45:de:d1:b9:97:70:05:0c:45:da:e2:20:e0:cb:
39:37:58:ac:f9:d9:06:0e:33:d2:29:cb:f1:b3:e6:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:F5:FA:5C:AA:60:C7:FE:2F:C4:CA:FE:75:2D:E5:C6:6A:61:18
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3132382e302f31382d3138203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:83:ab:83:b5:f3:b7:4d:2c:99:3a:5c:b4:c4:d7:7e:9f:b7:
4b:a8:bb:4a:8a:84:45:be:8f:4b:ab:05:4a:21:a1:d9:8b:67:
4a:97:ca:6b:ad:ef:fa:cd:b6:66:4b:c7:0a:7b:40:d0:08:00:
39:e0:de:14:47:0e:c4:48:7b:b9:63:fe:96:c6:0b:46:cb:a1:
c7:1e:41:de:dd:8c:bb:da:c4:5a:86:98:3c:e0:67:c4:8c:53:
63:a9:58:ce:d5:5d:67:a3:f9:19:5e:11:98:6b:97:b8:f5:f7:
39:63:21:b7:a4:e2:fd:d9:08:67:28:5b:20:fe:ba:74:1d:17:
51:cd:1b:0b:77:4c:66:67:2f:56:5e:9e:dc:71:3b:7d:38:71:
db:70:ac:cc:0c:7d:f8:96:e4:bc:eb:db:6d:ca:3e:8e:4a:9c:
1d:d6:a1:ed:99:e3:d2:59:21:3a:9c:f0:a5:83:a5:48:2c:de:
0f:90:cc:47:5c:dd:46:1d:38:6b:c3:1c:81:d9:07:64:7c:08:
2b:3c:00:62:ad:7e:54:da:93:b0:e8:3f:f9:30:ff:10:8d:08:
ca:ad:34:64:ef:69:31:e4:5e:c4:35:85:54:17:01:c2:d3:07:
0e:36:ee:dd:49:35:de:1b:d3:f3:3c:00:4f:42:9e:dd:3d:3c:
32:14:ab:35
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUImZrmlYmN9SL59KLqGZTjzQb99MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNDAzMTkxMDExMTZaFw0yNTAzMTgxMDE2MTZaMDMxMTAvBgNV
BAMTKEI2QURGNUZBNUNBQTYwQzdGRTJGQzRDQUZFNzUyREU1QzY2QTYxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWcvxUCQIjkoC9hIjDTXlNORl
oRApHSkINe1l/od5YoZfUVxROeMjOv/6tLi5tXGmSnSB2G3VMtUE6DNhC17mvRe2
1QZFuk86B5kV3bsBk/cHzGWPTMc+yyoUB01iqT/6KEVbtdrstt/a9UJI/6HLmuw+
4eOWyG4CKTj6h0B+eYpB1Q0j/GX2lsAEuPRZDc8PS20+uYUH0Cx4/S5Cd2ZBKXRe
vTjLsqnDFpzo/mVKuGNNQ1DMBajUhL52BYnQPoUGcTjPDd2z3Q1wmJqPaxcWOauU
aE2Q0CtQZPIYFYZsJnhF3tG5l3AFDEXa4iDgyzk3WKz52QYOM9Ipy/Gz5oJ1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUtq31+lyqYMf+L8TK/nUt5cZqYRgwHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmU2ZGE1Yzct
NjcwYS00MWIxLTk2ZWItMzg5OTM4OGIyOTJjLzAvMzMzNzJlMzIzMDMzMmUzMTMy
MzgyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDMyMzYzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG
JcuAMA0GCSqGSIb3DQEBCwUAA4IBAQBeg6uDtfO3TSyZOly0xNd+n7dLqLtKioRF
vo9LqwVKIaHZi2dKl8prre/6zbZmS8cKe0DQCAA54N4URw7ESHu5Y/6WxgtGy6HH
HkHe3Yy72sRahpg84GfEjFNjqVjO1V1no/kZXhGYa5e49fc5YyG3pOL92QhnKFsg
/rp0HRdRzRsLd0xmZy9WXp7ccTt9OHHbcKzMDH34luS869ttyj6OSpwd1qHtmePS
WSE6nPClg6VILN4PkMxHXN1GHThrwxyB2QdkfAgrPABirX5U2pOw6D/5MP8QjQjK
rTRk72kx5F7ENYVUFwHC0wcONu7dSTXeG9PzPABPQp7dPTwyFKs1
-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:24 2024 by rpki-client on console-fra.rpki-client.org