Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32332d3234203d3e20383334.roa
File: 37372e38332e3130342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: yOUMV2t/Ub45RX3CemmADrL428sJB3NUIsnJpmAE0Mg=
Subject key identifier: 97:9E:25:AF:D2:ED:87:A6:C4:88:D1:E4:F3:7D:78:BA:F1:A0:F2:12
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 14C3DA836CCF21CF1043C0B64BBCB495180F76F8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32332d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:40 +0000
ROA not before: Mon 23 Oct 2023 09:36:40 +0000
ROA not after: Mon 21 Oct 2024 09:41:40 +0000
asID: 834
IP address blocks: 77.83.104.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 02:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c3:da:83:6c:cf:21:cf:10:43:c0:b6:4b:bc:b4:95:18:0f:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:40 2023 GMT
Not After : Oct 21 09:41:40 2024 GMT
Subject: CN=979E25AFD2ED87A6C488D1E4F37D78BAF1A0F212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:17:e8:80:f7:cb:44:dd:ca:97:3e:de:37:
5b:55:e4:af:0e:ae:00:c8:eb:69:d6:28:fd:3c:0f:
a3:36:7f:d4:8f:a0:43:0c:d6:6c:71:98:0f:ec:40:
63:e7:ff:4c:68:0d:3b:c5:07:97:91:82:0f:75:43:
eb:2b:23:55:c5:a6:5d:5f:40:96:26:6a:bd:f6:b4:
9d:85:a9:fd:d8:15:4c:c6:ed:3e:31:14:c0:77:69:
b6:83:28:21:23:b4:5f:41:a7:63:7b:19:4c:c6:48:
f2:c9:cf:d8:67:07:e8:07:e1:41:ce:d4:dd:ab:a1:
52:3e:8f:44:e4:de:bd:75:fe:c5:77:63:92:ab:69:
45:9e:03:28:36:29:18:93:4f:7b:ca:2f:2b:e3:6b:
e5:1b:7a:9e:09:63:b9:40:56:a3:0b:6c:7e:97:b0:
ab:dc:d6:c5:b6:24:9b:85:86:7d:18:f4:d0:ba:42:
77:2b:d1:52:b3:23:37:3e:f3:5c:52:45:45:74:5f:
c8:e0:29:b4:cf:f9:d0:81:e5:79:78:b6:f5:dc:89:
1e:31:24:bd:3c:0c:63:b9:1d:69:ec:70:cb:35:4f:
9b:c4:67:37:38:80:58:98:61:2c:41:f5:46:22:4c:
11:54:72:84:f4:42:1f:16:4f:1d:9e:78:5d:88:55:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:25:AF:D2:ED:87:A6:C4:88:D1:E4:F3:7D:78:BA:F1:A0:F2:12
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:27:d5:63:24:b0:2e:ea:78:51:76:bf:2e:d7:ad:6c:76:64:
e9:3a:a2:49:d7:e5:6b:82:b2:eb:6f:72:bd:9b:d3:52:08:04:
5a:b3:3c:2c:0c:a7:89:0a:75:89:da:15:23:e9:47:fd:b3:9d:
6a:92:2c:9b:f9:ae:a6:98:0f:9f:6b:ed:50:d3:dd:8e:e0:6f:
c2:38:d2:43:31:52:bb:2d:6c:f3:f1:45:a5:c7:08:b9:b0:ee:
e1:d0:e0:63:39:1e:c7:f5:32:b3:bf:2a:9d:98:62:90:74:ad:
0a:ce:91:ae:7f:2e:ff:2c:95:7e:2f:2f:c9:0c:44:28:21:ad:
1f:f8:21:2a:f3:5b:29:bd:5d:a2:ac:4b:09:8b:19:0b:b5:0d:
ec:10:d0:cd:6b:68:b0:fa:a0:a7:ea:d5:11:f5:5d:7f:1f:46:
80:45:84:56:c6:89:74:ae:ce:c7:72:71:62:16:61:b7:c4:c7:
83:9f:ae:1b:80:b1:0e:8d:26:81:79:ee:30:93:ca:3c:90:f0:
44:e7:e9:8c:62:e8:f6:a9:66:d8:82:3e:e6:2d:fe:cd:3a:7e:
30:3b:ab:46:db:ba:97:89:9b:2b:7d:f8:13:08:c6:a5:9f:39:
77:75:44:4a:3c:ff:94:6b:26:4f:4d:6e:f6:6a:d5:f4:35:75:
6b:be:46:84
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUFMPag2zPIc8QQ8C2S7y0lRgPdvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEwMjMwOTM2NDBaFw0yNDEwMjEwOTQxNDBaMDMxMTAvBgNV
BAMTKDk3OUUyNUFGRDJFRDg3QTZDNDg4RDFFNEYzN0Q3OEJBRjFBMEYyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0BfogPfLRN3Klz7eN1tV5K8O
rgDI62nWKP08D6M2f9SPoEMM1mxxmA/sQGPn/0xoDTvFB5eRgg91Q+srI1XFpl1f
QJYmar32tJ2Fqf3YFUzG7T4xFMB3abaDKCEjtF9Bp2N7GUzGSPLJz9hnB+gH4UHO
1N2roVI+j0Tk3r11/sV3Y5KraUWeAyg2KRiTT3vKLyvja+Ubep4JY7lAVqMLbH6X
sKvc1sW2JJuFhn0Y9NC6Qncr0VKzIzc+81xSRUV0X8jgKbTP+dCB5Xl4tvXciR4x
JL08DGO5HWnscMs1T5vEZzc4gFiYYSxB9UYiTBFUcoT0Qh8WTx2eeF2IVXefAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUl54lr9Lth6bEiNHk8314uvGg8hIwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVNoMA0G
CSqGSIb3DQEBCwUAA4IBAQDGJ9VjJLAu6nhRdr8u161sdmTpOqJJ1+VrgrLrb3K9
m9NSCARaszwsDKeJCnWJ2hUj6Uf9s51qkiyb+a6mmA+fa+1Q092O4G/CONJDMVK7
LWzz8UWlxwi5sO7h0OBjOR7H9TKzvyqdmGKQdK0KzpGufy7/LJV+Ly/JDEQoIa0f
+CEq81spvV2irEsJixkLtQ3sENDNa2iw+qCn6tUR9V1/H0aARYRWxol0rs7HcnFi
FmG3xMeDn64bgLEOjSaBee4wk8o8kPBE5+mMYuj2qWbYgj7mLf7NOn4wO6tG27qX
iZsrffgTCMalnzl3dURKPP+UayZPTW72atX0NXVrvkaE
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org