Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9x1gwcGAm7zkGOQ/765W9h4Guze51+jxyaLIC5cPBJs=
Subject key identifier: 25:9D:FE:6F:8E:51:16:87:9E:60:CE:1A:0B:F4:86:F8:F2:5A:F9:00
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 441A2BDEE6375A20D7115870519C27C0B43A3285
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:36 +0000
ROA not before: Mon 23 Oct 2023 09:36:36 +0000
ROA not after: Mon 21 Oct 2024 09:41:36 +0000
asID: 834
IP address blocks: 77.83.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 14:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1a:2b:de:e6:37:5a:20:d7:11:58:70:51:9c:27:c0:b4:3a:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:36 2023 GMT
Not After : Oct 21 09:41:36 2024 GMT
Subject: CN=259DFE6F8E5116879E60CE1A0BF486F8F25AF900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:bf:58:20:14:b1:7d:18:c5:3e:7f:ed:81:
a0:e3:1c:51:cc:1c:35:61:80:b7:4f:9d:52:49:c9:
10:cc:b8:86:b5:bf:45:c1:19:e8:c7:3d:94:fe:86:
5e:de:dd:cd:51:0a:67:78:79:fa:1c:6f:1c:00:09:
36:ba:fa:d9:b5:93:a4:8b:9a:d8:e2:ef:c3:3f:43:
4e:a4:a7:73:d5:d3:cc:e5:d3:13:79:35:4f:2c:c7:
33:d4:aa:51:eb:93:70:30:0b:11:ef:e6:a7:ec:8e:
61:37:6a:79:cf:ac:1e:c6:f9:86:8e:d5:c9:56:6e:
d6:4b:97:39:82:23:ff:96:f0:e8:67:21:e4:b2:ff:
8a:19:7e:26:45:10:f6:e1:2d:d8:7a:11:30:9b:87:
52:4c:82:e3:d9:53:25:49:70:f7:00:ff:59:93:37:
26:1f:cd:29:8c:95:88:b2:64:e5:b4:5e:53:01:14:
0c:c1:63:ac:14:9a:27:f3:43:07:be:34:8c:0f:4a:
49:d0:a3:50:78:86:49:11:38:d7:b0:f0:30:6c:7b:
d2:f1:28:84:d4:3c:e9:df:b4:13:03:67:87:8e:4f:
94:36:27:6e:f9:9e:2e:45:5a:dc:a3:f0:be:c2:98:
a3:a1:c5:d3:30:79:3f:f0:6b:fa:f3:59:6c:8e:4b:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9D:FE:6F:8E:51:16:87:9E:60:CE:1A:0B:F4:86:F8:F2:5A:F9:00
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f2:05:65:90:bc:99:03:33:a3:b0:4c:2f:b7:0b:54:a1:3a:
39:32:95:fc:e3:2e:a8:01:71:7e:f4:43:62:f5:29:7e:91:23:
f8:fc:98:ec:85:4b:2d:7a:6c:6c:38:95:45:1f:4e:b5:cb:3b:
33:20:a5:bd:88:da:c9:84:0d:4a:3d:e3:17:d0:59:ad:49:a5:
45:a7:b5:43:22:fc:04:38:7e:38:ac:1c:ca:a7:49:38:77:5b:
46:60:50:0d:03:40:24:07:c4:17:c5:19:12:ef:12:04:4c:ea:
72:51:aa:60:f5:50:8e:c6:fd:23:fb:90:d0:3b:fa:e9:a4:58:
90:54:b6:23:64:8e:f3:c9:bc:25:45:00:6d:5f:c7:5e:89:f8:
74:d6:a5:53:f6:2b:a8:9f:db:58:20:ae:63:c6:2a:9e:7b:2e:
68:bc:4a:2e:37:d3:8c:0f:6a:c0:9f:aa:15:91:22:30:65:33:
0b:de:79:2e:86:2a:ee:c0:96:ff:2a:3b:da:80:91:8f:b2:c8:
aa:58:d1:57:6e:40:43:8a:45:fc:d1:64:bb:61:ee:d0:59:bf:
f6:43:a2:95:31:f0:08:f7:e4:55:cf:00:a6:49:ce:c2:45:5a:
67:03:a6:f4:ca:e6:55:55:8c:40:a4:3e:26:f9:1c:a8:7f:f1:
d8:7d:23:1b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIURBor3uY3WiDXEVhwUZwnwLQ6MoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEwMjMwOTM2MzZaFw0yNDEwMjEwOTQxMzZaMDMxMTAvBgNV
BAMTKDI1OURGRTZGOEU1MTE2ODc5RTYwQ0UxQTBCRjQ4NkY4RjI1QUY5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9L9YIBSxfRjFPn/tgaDjHFHM
HDVhgLdPnVJJyRDMuIa1v0XBGejHPZT+hl7e3c1RCmd4efocbxwACTa6+tm1k6SL
mtji78M/Q06kp3PV08zl0xN5NU8sxzPUqlHrk3AwCxHv5qfsjmE3annPrB7G+YaO
1clWbtZLlzmCI/+W8OhnIeSy/4oZfiZFEPbhLdh6ETCbh1JMguPZUyVJcPcA/1mT
NyYfzSmMlYiyZOW0XlMBFAzBY6wUmifzQwe+NIwPSknQo1B4hkkRONew8DBse9Lx
KITUPOnftBMDZ4eOT5Q2J275ni5FWtyj8L7CmKOhxdMweT/wa/rzWWyOSw5tAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUJZ3+b45RFoeeYM4aC/SG+PJa+QAwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVNpMA0G
CSqGSIb3DQEBCwUAA4IBAQC38gVlkLyZAzOjsEwvtwtUoTo5MpX84y6oAXF+9ENi
9Sl+kSP4/JjshUstemxsOJVFH061yzszIKW9iNrJhA1KPeMX0FmtSaVFp7VDIvwE
OH44rBzKp0k4d1tGYFANA0AkB8QXxRkS7xIETOpyUapg9VCOxv0j+5DQO/rppFiQ
VLYjZI7zybwlRQBtX8deifh01qVT9iuon9tYIK5jxiqeey5ovEouN9OMD2rAn6oV
kSIwZTML3nkuhiruwJb/KjvagJGPssiqWNFXbkBDikX80WS7Ye7QWb/2Q6KVMfAI
9+RVzwCmSc7CRVpnA6b0yuZVVYxApD4m+Ryof/HYfSMb
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org