Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e203631333137.roa
File: 37372e33372e33372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: SYxaeUyKZz721+7ahVi/3rgWc3gPCIWnX8ez3dmACds=
Subject key identifier: 04:C8:1E:D5:1D:5F:94:F1:CE:B2:5F:C0:A9:2A:01:F6:3F:06:09:B5
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6AFA6A16700938EDFEF630365C6B85C3995C72C9
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Mar 2023 07:22:55 +0000
ROA not before: Wed 08 Mar 2023 07:17:55 +0000
ROA not after: Wed 06 Mar 2024 07:22:55 +0000
asID: 61317
IP address blocks: 77.37.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fa:6a:16:70:09:38:ed:fe:f6:30:36:5c:6b:85:c3:99:5c:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 8 07:17:55 2023 GMT
Not After : Mar 6 07:22:55 2024 GMT
Subject: CN=04C81ED51D5F94F1CEB25FC0A92A01F63F0609B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:db:16:c7:b3:0a:6f:e5:49:e4:a4:cc:44:
c9:6f:ea:3c:b6:d8:23:75:63:ef:2a:78:fa:8c:a4:
7b:55:05:0b:bf:91:0d:2b:63:63:d2:26:31:87:97:
65:d1:55:21:81:8b:d5:30:d9:ec:62:3e:6f:d3:86:
36:f4:a8:fd:39:e0:90:50:72:3a:37:1e:d9:3b:30:
10:a4:e5:9c:01:a3:b8:08:2a:a6:5e:b8:1f:59:7c:
ec:95:c7:e1:8e:b2:b7:c5:7b:79:81:6d:c5:00:92:
91:8d:52:33:d5:27:2c:7d:14:0d:ce:21:ee:6c:24:
2c:05:22:26:e9:1f:04:dc:1c:0c:f7:80:cf:04:c1:
c0:54:91:7d:9b:c1:ed:e4:7a:58:65:a4:37:15:29:
79:81:88:6b:34:57:27:4b:83:22:1e:b8:26:55:88:
a2:02:ef:84:57:37:24:1e:a4:a1:90:ce:48:7c:7c:
d6:13:e4:1a:4a:6a:b7:66:4c:a8:38:b1:19:a1:80:
95:89:14:d4:0b:4a:cb:86:24:0a:06:c7:3e:97:dd:
e6:88:5a:e3:1a:14:6e:88:87:9b:94:d2:8d:6b:ba:
ac:43:e6:e5:8e:8e:28:52:40:90:1c:c2:4b:ef:f1:
51:32:38:fc:a2:49:72:ab:de:9d:60:cb:ac:d8:fd:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:1E:D5:1D:5F:94:F1:CE:B2:5F:C0:A9:2A:01:F6:3F:06:09:B5
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.37.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d8:17:58:2d:b3:50:c0:52:e4:4d:44:05:6e:ba:27:21:2f:
cb:91:b1:c9:38:8b:1a:b3:f8:d2:74:8b:c9:8c:91:11:43:a2:
71:cd:cb:b2:97:3d:26:c2:63:91:dd:d8:33:b5:74:27:e9:fc:
4f:36:3f:c8:77:60:21:7d:eb:13:19:45:b1:bb:e5:c6:07:e9:
ef:72:dd:f6:43:f1:76:a8:39:28:f2:a5:48:51:9b:a7:b1:c6:
4b:02:9f:e3:38:21:1c:4f:3b:3c:6d:2c:7c:fd:2b:e4:70:2d:
1c:94:03:67:65:7a:3e:d9:e3:bd:0c:98:04:0e:31:5e:f9:91:
a0:d5:37:8e:b9:6f:dc:af:dc:50:8e:9f:65:66:39:5e:16:c0:
71:84:3f:a5:5d:76:3b:11:c1:65:3e:54:cd:10:21:d4:29:a4:
5d:0d:5c:39:7e:19:8e:d7:70:ec:17:c0:1a:37:60:c4:6c:6d:
63:38:a9:43:66:12:26:14:05:83:04:6b:cf:7e:9a:0c:29:56:
5b:b3:6f:47:76:fc:f4:db:6b:36:fc:b2:5b:25:57:e1:b4:22:
c5:81:41:15:06:fc:b5:bd:b7:64:29:15:2c:0a:62:36:dd:52:
d1:ad:c4:26:a1:77:9a:a6:a0:08:46:fb:5b:88:7e:9d:b6:99:
86:2f:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-fra.rpki-client.org