Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3233203d3e203631333137.roa
File: 37372e38332e3130362e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier: PwkGKBqA1RgrdBStlPrZxfgkKOGIbq/GRJFUYtU2XKw=
Subject key identifier: 99:83:EE:6D:48:B5:A4:81:8C:89:8B:B5:CD:44:EC:52:7D:88:FE:04
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4B4FB9EA73E8F400A941ED99CC05073B029CDB49
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3233203d3e203631333137.roa
Signing time: Wed 04 Jan 2023 10:44:09 +0000
ROA not before: Wed 04 Jan 2023 10:39:09 +0000
ROA not after: Wed 03 Jan 2024 10:44:09 +0000
asID: 61317
IP address blocks: 77.83.106.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4f:b9:ea:73:e8:f4:00:a9:41:ed:99:cc:05:07:3b:02:9c:db:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:09 2023 GMT
Not After : Jan 3 10:44:09 2024 GMT
Subject: CN=9983EE6D48B5A4818C898BB5CD44EC527D88FE04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:4b:e3:27:52:c4:2b:e7:1a:6b:9d:96:01:
0e:f0:93:9a:6f:87:bf:5d:30:ea:26:25:5f:53:75:
9a:40:5f:99:56:31:0c:0e:87:60:b8:61:37:0e:62:
c0:a1:b8:f6:88:91:92:c4:20:37:0b:ca:80:6e:72:
80:8a:b1:90:cc:0c:0f:71:07:83:ff:37:4a:72:93:
42:8c:df:f3:96:25:8d:04:76:8d:21:a3:0c:42:5c:
27:1d:e7:cd:af:50:1d:0d:77:ba:f1:df:9f:3f:ce:
dd:99:1e:04:5f:bf:9c:d0:99:ea:7b:5e:cc:fa:ce:
cf:e6:00:84:b2:bc:83:3f:be:e5:7b:ea:b2:e8:b8:
9e:4a:f5:fc:16:22:d2:23:79:a4:e4:50:ec:47:ea:
33:93:83:3f:71:0c:94:1a:ff:ca:af:b4:4e:88:e2:
b7:61:f7:f0:f9:19:51:f6:a0:cd:40:24:7d:c2:6d:
8c:6b:5a:68:8f:06:d4:5f:1f:37:66:77:96:5e:c3:
20:6e:ac:69:8e:65:9d:fe:97:01:1f:fa:fa:3a:2d:
63:6b:f6:c9:e5:2f:f6:8f:78:fe:96:79:53:4f:86:
11:93:ec:e7:ad:62:e2:5d:4f:ad:77:7a:20:3b:92:
06:a4:4b:7b:77:bf:40:3f:6b:f0:f3:44:d4:f9:b6:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:EE:6D:48:B5:A4:81:8C:89:8B:B5:CD:44:EC:52:7D:88:FE:04
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3233203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/23
Signature Algorithm: sha256WithRSAEncryption
47:60:64:e1:f9:f8:fb:34:7c:18:31:e9:7f:e1:9e:df:02:ed:
29:f5:73:b5:ee:6e:7c:ac:f2:b0:8d:a3:5f:92:ee:86:5c:14:
39:41:b7:f2:2e:a9:6b:52:e5:fa:a3:a2:7c:98:f0:3f:ee:a5:
b0:0d:52:b5:4d:eb:cf:6c:8f:05:c4:45:e1:5b:33:7c:62:66:
25:6a:03:9f:3b:7d:9e:19:84:65:22:b6:f9:71:9a:45:9c:2b:
ee:fd:51:aa:a5:a3:3c:c1:42:39:75:53:5e:73:84:2e:19:2f:
15:57:b2:0c:a4:81:b2:6b:3b:07:7f:3b:fb:1a:1c:02:7e:be:
de:7f:18:6b:b9:f7:67:92:d6:e7:e7:9a:47:52:52:0a:61:e8:
60:6e:5c:4a:8f:b3:92:89:4f:a2:2b:88:7c:fe:73:48:be:c2:
48:d6:4d:81:2d:c5:a2:10:a7:ee:ad:b3:35:c3:98:07:24:11:
6d:5e:0d:e4:c8:eb:fe:02:11:2a:63:56:53:86:8c:68:ba:8f:
c8:b6:70:6f:89:90:54:e8:75:cf:16:a1:d9:3c:6e:a6:5f:ed:
1d:c6:38:2d:0a:a9:20:f4:a7:38:10:e4:b5:b6:d3:d3:03:57:
20:a2:91:df:58:fc:ac:e6:1a:1b:eb:57:cb:e2:2f:77:f7:38:
76:b8:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org