Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20383334.roa
File: 37372e38332e3235322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: INm4YFewmQ7XI30Dd0wKAwb+uXjILabVq49IxDcD2iA=
Subject key identifier: 82:6E:B6:A0:6F:18:1E:98:5C:B7:1F:16:32:1E:BD:2E:08:B2:0B:17
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 41DC38DECD306B78C0B7178B0093B998DDBAD3F2
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20383334.roa
Signing time: Mon 13 Nov 2023 10:00:06 +0000
ROA not before: Mon 13 Nov 2023 09:55:06 +0000
ROA not after: Mon 11 Nov 2024 10:00:06 +0000
asID: 834
IP address blocks: 77.83.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:dc:38:de:cd:30:6b:78:c0:b7:17:8b:00:93:b9:98:dd:ba:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Nov 13 09:55:06 2023 GMT
Not After : Nov 11 10:00:06 2024 GMT
Subject: CN=826EB6A06F181E985CB71F16321EBD2E08B20B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:29:7c:58:00:49:16:89:7d:d8:50:39:ec:
e8:e8:bf:99:9b:ba:55:fd:ec:cf:f1:1a:26:e7:52:
9a:f9:cf:77:62:a6:36:ae:fd:8f:12:b7:7a:8f:5b:
55:69:b7:3e:12:05:de:ee:b6:71:8c:7e:16:05:68:
a8:b4:29:0e:28:b0:2d:d1:96:ab:2b:83:33:ef:57:
71:2d:1a:34:40:17:2b:86:6e:cc:ed:59:34:52:2f:
5c:58:ff:c6:db:f7:9f:17:76:f3:13:11:14:03:39:
b1:39:e3:f3:f3:90:fa:45:0a:9a:52:a1:da:a0:44:
4f:b8:63:5a:c6:61:8a:00:75:00:6f:18:f3:72:04:
a5:a4:fe:a1:9a:95:3f:62:33:a7:0d:9d:6f:5a:8e:
9d:09:5f:0d:bf:e7:88:60:76:13:f8:fd:28:cd:68:
15:fb:cc:6d:a3:99:8a:7a:56:82:a2:f4:5c:47:5e:
88:72:f6:e9:79:0f:14:54:02:5e:e8:e4:de:cd:a5:
17:cf:74:1a:33:dc:36:68:fc:47:6e:7e:23:9e:41:
c2:43:46:b7:26:cf:0e:52:d5:e7:6d:6a:c5:e0:c4:
da:8e:c2:61:84:97:ed:94:3e:cf:6b:36:f1:2f:89:
93:a8:0a:07:c6:ff:e1:ca:ed:ce:86:51:08:54:bf:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:B6:A0:6F:18:1E:98:5C:B7:1F:16:32:1E:BD:2E:08:B2:0B:17
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:83:fe:a5:e9:a3:28:1f:e2:17:c5:62:b1:10:29:1f:fc:01:
f1:4b:38:7a:41:0f:18:3c:ec:ce:b0:e9:07:68:74:42:44:89:
3e:21:70:51:00:f5:18:d6:70:e7:a9:3e:3f:26:da:9f:a1:a6:
99:83:6e:89:2d:37:72:b9:1b:3c:b6:f7:5a:8c:0a:be:ee:4b:
d8:fa:28:cb:a3:da:3a:0c:28:f0:81:95:25:9a:32:66:cf:e6:
f1:77:aa:6f:cd:83:a0:1e:8f:f8:9d:36:eb:38:83:f5:79:66:
28:5a:a8:a6:0f:27:ca:15:99:e0:f3:ee:56:f8:ff:b0:13:27:
2c:56:8b:3e:0a:cd:af:11:88:50:b4:fc:f5:a9:a6:28:49:f1:
af:0e:eb:09:36:75:f9:ed:d9:94:d3:dc:05:6f:37:fe:0e:f1:
5a:27:e0:b7:e7:4a:7b:6b:10:1d:78:bd:86:b7:ad:54:dc:5a:
eb:8b:f0:f6:e2:10:dc:cc:2f:fb:cf:9f:46:89:ae:10:1f:6e:
6d:fc:6a:7e:de:65:49:29:36:27:5c:3c:ea:a9:d3:88:d0:0d:
fe:50:97:40:01:1a:03:f2:75:a9:e0:07:f8:c9:1f:2e:58:64:
b4:de:9c:74:42:d9:d8:ef:7d:3a:58:da:f0:27:62:69:a1:52:
0b:e7:bb:6f
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 13 12:40:26 2023 by rpki-client on console-ams.rpki-client.org