Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20333938343635.roa
File: 37372e38332e3130372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: i8YBwcT3DocXUe3CtxjeLkMs/gru5iwhitPe/EHdAvY=
Subject key identifier: 6E:96:65:BB:B8:1A:C7:56:B2:22:59:5F:6E:0F:72:63:83:FB:B0:67
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 1D439397229F1F633F5CB4EAE647DD964C734DDA
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20333938343635.roa
Signing time: Sun 10 Dec 2023 05:23:03 +0000
ROA not before: Sun 10 Dec 2023 05:18:03 +0000
ROA not after: Sun 08 Dec 2024 05:23:03 +0000
asID: 398465
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:43:93:97:22:9f:1f:63:3f:5c:b4:ea:e6:47:dd:96:4c:73:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Dec 10 05:18:03 2023 GMT
Not After : Dec 8 05:23:03 2024 GMT
Subject: CN=6E9665BBB81AC756B222595F6E0F726383FBB067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:79:a7:7f:56:b1:29:c1:bd:31:38:c3:b1:
2c:a4:96:f3:c5:5b:32:f4:9d:7c:f1:13:2e:a9:45:
a7:c7:60:52:0e:3e:b9:c2:8e:3d:0c:ee:76:0c:e9:
46:c4:80:2f:01:4c:ce:92:c2:93:88:3e:74:79:b2:
50:ee:15:7c:7f:f5:c3:53:b7:25:59:17:d7:4b:5b:
fc:7a:4b:f0:0e:ec:37:82:20:55:ab:2c:9e:06:d7:
82:51:38:7c:c9:0b:68:57:b2:e4:49:a6:38:56:73:
16:d2:38:0e:97:47:67:55:ab:2a:37:40:6c:5c:cf:
03:41:da:90:26:b7:f5:ed:94:a2:3e:a5:8d:23:66:
ae:af:7c:af:4e:6d:7f:be:66:d2:25:e8:f3:5e:86:
28:b5:bb:87:80:31:da:b5:eb:7e:c9:66:c4:1f:8c:
7e:90:79:06:d7:be:a0:9a:50:52:70:8c:58:d2:bb:
76:61:b9:1d:82:ee:1a:da:1b:b8:44:c6:64:4f:9d:
1e:0f:c4:0b:e9:56:37:92:b1:2f:2f:9a:78:7d:40:
60:4b:f4:7f:b9:29:1c:81:85:4d:40:3b:c0:ce:ac:
90:b2:7b:8c:69:41:b7:88:90:30:53:a2:0e:14:31:
db:6f:e8:ca:ae:97:54:04:96:af:39:3b:db:99:ad:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:65:BB:B8:1A:C7:56:B2:22:59:5F:6E:0F:72:63:83:FB:B0:67
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9b:22:47:5f:dd:7b:80:a6:af:bc:48:84:83:57:5b:80:1d:
c7:39:ed:d2:fc:45:ec:85:f6:3c:ee:b6:8f:f8:4c:cc:c9:8f:
c5:47:bc:dd:0d:70:6d:15:e6:2b:c6:fa:31:83:02:c0:6c:0b:
27:3a:ac:1b:f9:ce:b0:12:13:74:76:3f:90:05:fe:dc:5f:49:
ef:4e:5d:41:cd:32:2b:23:a5:79:98:2b:2c:23:86:c9:6e:f7:
24:55:2f:d0:28:ce:c0:15:f2:5a:de:dd:b1:3b:3c:2d:bc:bf:
df:1b:e5:76:ed:9f:61:f2:e0:68:f0:3e:73:d3:80:da:56:2f:
f4:c6:35:dc:f5:1a:56:db:45:52:a0:e3:45:1d:ae:ff:e3:45:
67:31:7b:8f:90:db:74:03:a5:08:7f:e0:ca:90:5e:14:93:bb:
3e:fc:89:8c:66:93:5f:f5:86:0e:52:e2:a0:7a:69:3c:1b:77:
21:12:4f:e6:12:2c:8f:87:f9:c7:88:07:5a:a2:61:27:3b:4f:
d4:2c:f5:5d:7e:30:ae:db:e9:44:da:97:f0:ce:e3:bd:88:26:
ce:1a:be:6d:2b:c7:16:28:f1:56:b9:0d:c8:3a:f6:9e:ce:c9:
93:32:7a:f6:55:b2:0e:54:d1:22:7a:3d:5b:17:9f:12:0d:9f:
35:aa:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org