Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130312e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3130312e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: c1kFMk6h4LZ1pf3pWJQfzg5OSu3GGTIy6zfQ7RZC3dU=
Subject key identifier: 79:A4:7A:3A:1D:6B:3A:23:4D:F9:0F:0B:22:64:8C:97:E5:32:FF:0D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 16D8C033E9DB163046E13820FEC413170B762416
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130312e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:38:20 +0000
ROA not before: Tue 20 Feb 2024 14:33:20 +0000
ROA not after: Tue 18 Feb 2025 14:38:20 +0000
asID: 6849
IP address blocks: 37.52.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d8:c0:33:e9:db:16:30:46:e1:38:20:fe:c4:13:17:0b:76:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:33:20 2024 GMT
Not After : Feb 18 14:38:20 2025 GMT
Subject: CN=79A47A3A1D6B3A234DF90F0B22648C97E532FF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:26:35:47:ab:5d:c8:82:64:b9:78:7d:7e:
af:c7:dd:69:11:8a:a2:e4:29:dd:92:63:df:d8:0c:
c9:99:4b:1f:84:c7:c2:18:17:4e:b0:53:f3:b9:18:
4f:2e:1c:0f:9e:cf:65:7e:c6:26:5b:bd:70:14:a1:
d6:3c:62:3d:57:00:47:ec:49:92:15:72:97:d9:b9:
d6:98:99:aa:be:f9:39:64:39:26:e8:92:de:a9:17:
53:32:76:81:f4:f1:ce:e7:46:bd:ba:00:83:fc:74:
88:46:d0:c1:24:8f:3f:ce:48:1a:90:75:2b:8b:65:
85:16:41:74:72:4c:2a:1f:ec:ad:42:0d:5f:ac:b8:
3e:bd:f1:24:cc:c9:14:6f:4a:85:62:c8:f7:9a:34:
2c:8c:74:08:2b:05:60:97:4b:98:99:23:60:d1:41:
9e:5d:d8:0c:2d:6b:f8:f2:d5:ba:7d:8f:9b:6b:ad:
fb:71:b0:97:db:b1:cb:fe:fa:01:7e:a7:8f:c3:8a:
4f:8f:07:16:e3:e3:13:2b:b4:47:c1:ec:65:99:f9:
27:a3:a7:98:31:94:d9:38:a8:95:03:03:c3:6f:ce:
34:68:ac:12:fd:e9:ab:a8:b0:0c:50:42:b7:89:fb:
27:64:1d:07:09:cd:80:37:7b:1f:21:54:29:9f:ef:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:7A:3A:1D:6B:3A:23:4D:F9:0F:0B:22:64:8C:97:E5:32:FF:0D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130312e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d3:5e:50:06:c9:89:09:e8:61:6f:b4:d0:6b:55:ae:e2:e5:
e1:a3:68:b6:a3:32:81:5d:c9:c6:bf:8c:1c:aa:1d:98:76:e8:
c1:65:38:66:d6:05:73:ce:bc:16:af:c0:fa:66:a8:66:35:6a:
6a:e0:37:b8:42:41:64:a0:27:e3:a8:94:39:29:c4:f4:c6:ca:
87:b1:03:c6:2f:12:ad:01:02:c3:d9:3d:cd:fd:9e:ad:d1:b0:
68:6b:75:fe:94:72:75:eb:9d:b4:c4:e3:09:a3:33:5c:a7:5b:
a3:08:82:8c:c3:8a:2d:cf:bb:67:2e:8e:c5:49:45:18:cf:44:
66:2c:95:ac:f9:21:19:e8:15:c7:5b:7f:2c:0f:8f:20:34:59:
f4:0f:39:fd:69:4e:75:f8:e0:06:88:23:c8:b6:70:20:fe:9c:
5b:1d:39:8f:24:bd:e9:06:8c:d8:d4:0e:e6:d7:b2:2e:7a:b8:
3f:f6:4c:55:68:fd:82:ad:93:8a:28:35:44:97:f1:86:10:7e:
2c:48:b2:ad:d8:3d:17:4d:7b:9e:41:9a:c9:5e:5d:e8:bb:ca:
dc:ce:71:88:28:50:75:b0:81:b4:db:1c:33:8a:97:b3:48:8e:
f0:06:47:cd:7f:93:ce:5a:36:bd:87:e9:ad:ba:65:55:73:e9:
91:1d:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:12 2025 by rpki-client