Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203231383539.roa
File: 37372e38332e3130372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 12Vjf9U6IKnQroooSmnpfA7G7hpy2qGic4GVZEXWz7Q=
Subject key identifier: 0F:3E:92:5F:AB:12:24:7B:D1:25:D1:CB:B6:41:98:02:DF:97:CA:2C
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 681A7C1ACFD07707F177657D39C91E28658A54F7
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203231383539.roa
Signing time: Mon 22 Jan 2024 14:35:19 +0000
ROA not before: Mon 22 Jan 2024 14:30:19 +0000
ROA not after: Mon 20 Jan 2025 14:35:19 +0000
asID: 21859
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:7c:1a:cf:d0:77:07:f1:77:65:7d:39:c9:1e:28:65:8a:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 22 14:30:19 2024 GMT
Not After : Jan 20 14:35:19 2025 GMT
Subject: CN=0F3E925FAB12247BD125D1CBB6419802DF97CA2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:09:f3:70:ea:eb:76:d4:43:59:48:51:4b:
95:04:69:cf:b9:6f:22:d4:a3:51:63:97:32:72:d9:
43:df:fd:2c:0b:36:c2:e4:72:b5:fd:ea:0f:48:93:
dd:8e:58:a1:f7:e2:23:39:7e:6f:5e:da:14:94:fe:
9d:c1:d6:20:72:7f:2f:df:ad:f6:66:91:87:46:a1:
b8:de:54:11:22:d8:cc:6e:0d:b2:03:83:8d:f8:c2:
ce:b1:ed:fb:67:0f:e7:3f:50:8a:50:a4:44:79:e2:
0c:c9:60:28:2f:08:b3:8d:bb:ed:b4:7e:73:4d:9a:
e7:fd:3d:f4:68:76:91:3c:ea:47:c9:1f:27:81:36:
40:46:27:8a:89:d3:3c:e2:da:84:d7:ce:69:9c:89:
68:42:49:23:45:85:9a:97:40:9d:43:bc:1a:0a:bc:
66:8f:7f:6c:ea:a4:57:d2:f2:2b:44:9d:6c:87:aa:
f9:45:4c:ce:da:2d:1a:b9:95:00:0d:49:c9:2b:80:
81:f2:b2:2e:03:0e:93:c7:41:4a:ef:91:45:58:05:
80:7e:de:46:43:06:2a:10:23:a9:4e:44:f0:29:41:
69:01:6d:23:f2:db:3a:92:d4:23:dc:42:65:f2:7d:
41:22:e1:e1:3c:96:78:9d:82:db:70:18:dd:bb:d6:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:92:5F:AB:12:24:7B:D1:25:D1:CB:B6:41:98:02:DF:97:CA:2C
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:16:c1:73:c2:d8:ba:9f:c4:bc:c0:f8:25:0a:b5:67:5f:e5:
e3:0b:16:05:b7:b8:27:43:43:0f:40:7c:3f:fa:94:d5:00:6c:
d4:bb:4f:c3:9e:14:19:67:43:f6:fe:fa:6e:03:ea:1b:46:c5:
c6:75:b5:83:11:88:bf:fe:da:dd:b4:ff:33:2c:53:8a:d4:5c:
37:91:7a:e2:ce:4a:c4:cc:c3:42:ae:61:99:63:67:73:39:70:
41:5d:29:d1:28:d1:7e:84:f0:14:7b:16:8b:9e:dc:6e:69:61:
14:e6:89:cf:94:ad:48:ea:cc:c5:d6:5a:95:4f:e3:34:a6:33:
71:42:7e:c4:23:6b:b4:c5:c2:e6:5e:6f:52:8e:24:01:88:51:
03:c3:14:48:04:69:e5:9e:bb:07:c6:ca:a8:d2:c1:e5:07:dc:
8e:e5:95:dd:96:98:7c:45:95:53:16:68:8a:12:59:fa:7f:46:
66:f2:65:f6:f3:80:28:9c:a3:69:95:45:7f:12:f0:66:cb:c5:
57:89:df:69:2a:db:e8:fa:ce:ca:03:c2:4f:b6:5a:55:d4:2b:
a3:12:24:8f:68:2e:e2:e1:ae:0c:3c:ee:43:2b:86:ef:93:1e:
d4:1a:81:a2:04:d9:21:8b:85:d6:93:44:54:5d:de:6c:0a:c6:
d7:2e:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org