Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2037343131.roa
File: 37372e38332e3130372e302f32342d3234203d3e2037343131.roa (raw, json)
Hash identifier: eLNMyyi0OGihpz5yd+0YkR3MWfEnqtZAYXlLCsXUgtM=
Subject key identifier: 68:A1:D1:F5:DB:37:A3:3A:DD:C3:A8:64:F3:97:6C:3E:E9:45:0E:C8
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 2D6EDF4D6C5EFF32E25BA10171A6B0C1DA9AB6F0
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2037343131.roa
Signing time: Tue 25 Apr 2023 11:34:05 +0000
ROA not before: Tue 25 Apr 2023 11:29:05 +0000
ROA not after: Tue 23 Apr 2024 11:34:05 +0000
asID: 7411
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6e:df:4d:6c:5e:ff:32:e2:5b:a1:01:71:a6:b0:c1:da:9a:b6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Apr 25 11:29:05 2023 GMT
Not After : Apr 23 11:34:05 2024 GMT
Subject: CN=68A1D1F5DB37A33ADDC3A864F3976C3EE9450EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:9e:cc:c2:27:5f:15:c3:c2:10:d8:65:6e:
20:db:29:fb:95:b8:a6:b9:20:d3:51:66:95:6c:71:
c9:f6:5e:9e:47:73:64:72:63:66:ae:b5:14:a5:b0:
f1:b8:0b:99:71:1d:36:09:a5:f7:d9:9f:7a:d2:99:
57:2d:ed:fb:e6:87:f5:67:01:f8:c8:95:17:b9:ae:
26:77:e0:bb:ae:59:66:62:24:6e:84:be:25:3d:64:
23:19:f9:ea:30:cd:f5:e0:16:4f:f0:a1:4a:e3:c0:
4c:d4:c8:47:76:00:96:b8:5b:ab:0d:ac:0c:cd:41:
13:6b:91:8f:68:7a:df:27:fa:10:a7:d9:cf:98:40:
bf:1d:cc:18:42:ab:a8:75:0c:32:bd:18:14:e0:83:
0f:04:31:ca:5b:3d:d2:d3:5e:f4:e3:f5:54:09:47:
1a:f1:1b:da:3c:0a:ce:6c:29:55:d0:54:c4:01:ea:
f8:4f:2b:85:68:40:c7:b8:a1:72:f8:5d:d5:aa:26:
22:9e:bc:5a:3e:b9:85:d1:55:cc:29:22:06:3d:f4:
03:06:c2:38:d4:4a:c5:8c:87:92:56:8b:08:16:e2:
70:0d:dd:5d:a4:61:d8:85:03:97:06:91:18:fc:57:
7b:cc:96:af:94:dc:ee:a1:16:24:48:95:18:a7:d8:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:D1:F5:DB:37:A3:3A:DD:C3:A8:64:F3:97:6C:3E:E9:45:0E:C8
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2037343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:91:ef:5f:81:45:7f:65:20:e6:9f:9e:7b:e3:b4:c9:fd:
4b:82:c9:f5:f7:63:6f:41:28:cc:6d:a2:c9:4c:a4:fb:cc:df:
c8:28:42:2e:2d:a1:2c:a0:d8:a1:27:fd:bd:53:78:ca:2e:d4:
1c:34:6f:08:27:d2:84:95:43:13:4b:a8:69:63:c9:00:db:49:
90:7f:e0:4f:c1:04:02:64:16:e5:c8:41:94:ef:18:30:69:0c:
50:2f:77:7d:b5:58:4b:b0:54:09:dc:d0:e1:ed:2c:3e:cb:37:
3e:8d:c3:33:9f:6a:d1:f3:41:ef:ba:39:40:d9:d1:2f:51:31:
d3:69:cf:68:3e:13:f7:8c:85:89:db:9b:77:04:c0:ca:3b:66:
d1:00:7f:1d:0f:8f:82:25:9c:e3:1b:01:8b:ad:b3:5f:63:a7:
83:4c:f5:0f:5b:67:b5:7b:84:96:43:03:12:ca:63:ca:23:bf:
e5:e8:f4:c4:34:25:04:52:f9:75:4c:79:92:6b:40:b5:4e:7d:
29:32:e4:5e:92:8f:9a:f1:76:aa:1c:71:9d:ed:80:b8:d1:5a:
23:2e:7d:b8:45:c8:66:9d:b2:f4:66:7f:7f:d3:fb:94:65:dc:
fd:fa:fc:87:a9:bd:5c:5c:77:cc:ea:32:e6:88:10:0c:78:de:
1e:c7:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org