Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vkGfUCpHmDSFfH6JN44JdSC/2sHgrjDTbLbrZhjD2yQ=
Subject key identifier: 5F:D9:14:2A:71:47:83:14:7D:AC:82:DA:F8:A0:DD:73:3C:B5:5F:80
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 5403A171EDAECC0346ABD2A8AF3FB7D1C475D29E
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20383334.roa
Signing time: Mon 06 May 2024 14:16:23 +0000
ROA not before: Mon 06 May 2024 14:11:23 +0000
ROA not after: Mon 05 May 2025 14:16:23 +0000
asID: 834
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 14:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:03:a1:71:ed:ae:cc:03:46:ab:d2:a8:af:3f:b7:d1:c4:75:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: May 6 14:11:23 2024 GMT
Not After : May 5 14:16:23 2025 GMT
Subject: CN=5FD9142A714783147DAC82DAF8A0DD733CB55F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:36:e0:7d:2a:f3:22:51:85:68:b4:d9:b6:
c6:e2:05:8c:34:81:e8:c7:47:aa:d0:6d:7e:37:58:
01:a4:0f:1c:0e:ed:7b:55:f2:7a:3c:db:3c:9a:5d:
42:58:44:72:de:9f:e9:7d:93:3b:be:c2:1a:a7:5d:
04:c4:e0:f5:d0:1d:3f:8f:76:cf:51:32:c7:45:ca:
ee:b6:f2:8c:1e:75:90:ef:57:21:d6:17:6a:ac:bd:
90:ff:da:06:65:04:ad:eb:06:af:af:15:87:f1:88:
c1:8b:5d:b1:3c:d7:bb:a5:95:98:ca:66:7b:55:f1:
96:d5:2e:3d:5b:1b:c2:7b:e5:c3:2b:77:a3:9d:e1:
66:e4:ca:07:0e:5d:5f:dc:fa:7a:2a:5c:fd:69:57:
5b:c0:f6:ad:95:dd:25:10:ef:c2:e8:66:29:e0:6f:
ea:ba:91:fa:16:ee:11:a3:df:90:a5:15:40:a2:e1:
e3:77:f1:1d:53:45:d3:db:df:7f:c7:0e:ed:ea:83:
5b:24:c2:8b:48:1d:9d:32:30:30:19:98:4a:03:4c:
93:22:1d:07:3e:87:fb:0c:cf:ed:90:6d:d7:41:d5:
46:a7:47:d4:0e:de:d1:38:7e:5f:1c:43:eb:3c:28:
59:80:74:ed:8d:53:22:41:0e:b6:3f:3e:76:73:97:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:14:2A:71:47:83:14:7D:AC:82:DA:F8:A0:DD:73:3C:B5:5F:80
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:10:1e:52:f1:e1:fc:8a:6d:68:de:de:45:03:f5:7a:61:9c:
39:33:a5:bd:11:73:70:f4:a5:eb:77:88:50:f1:3c:39:7c:73:
0b:58:cb:d8:35:7e:1d:da:5c:c4:4e:78:4c:9f:74:bc:aa:d6:
2f:a0:43:42:9c:8d:68:09:ee:3a:c2:ed:b7:8e:9c:ac:dc:2e:
64:06:6a:85:9b:d0:93:25:10:85:03:70:87:0d:cc:50:19:dd:
39:09:c6:18:cd:ad:4b:22:8b:af:12:de:12:06:58:53:b6:15:
c0:90:49:ca:dd:75:d1:9d:f3:65:b2:79:27:c3:06:f7:7b:50:
3a:1b:64:c7:32:a0:dc:9f:42:50:59:54:9b:3c:e0:3d:a4:7a:
49:55:98:e9:6e:36:66:40:de:67:c2:46:16:6b:15:d9:cd:73:
01:7c:23:cd:49:08:a4:f7:ff:8e:a5:0d:72:2b:e9:54:ec:12:
f9:44:07:0c:b6:f6:fb:64:a2:3d:2e:e3:5e:f8:b2:4d:fc:af:
53:da:ac:c4:78:18:f4:9f:c3:64:31:c4:71:8c:65:fe:fc:9c:
d8:07:c4:c9:31:83:72:4a:d5:4a:d0:71:f8:77:ed:28:a9:30:
a8:bd:50:f5:ee:ac:f3:2a:36:77:cd:5f:e0:25:61:3f:9a:50:
9a:0a:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org