Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130332e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3130332e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: mQF/cKlzSudqM71cHa0LS1zHee6Sc2GcmnSSggomh5I=
Subject key identifier: 03:91:57:8B:8F:C9:5D:EB:EF:4B:C1:AF:3C:62:27:EE:70:74:1A:A4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 690DFD4716366B4DDC3A3D7232A3173630A4AD89
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130332e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:38:27 +0000
ROA not before: Tue 20 Feb 2024 14:33:27 +0000
ROA not after: Tue 18 Feb 2025 14:38:27 +0000
asID: 6849
IP address blocks: 37.52.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0d:fd:47:16:36:6b:4d:dc:3a:3d:72:32:a3:17:36:30:a4:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:33:27 2024 GMT
Not After : Feb 18 14:38:27 2025 GMT
Subject: CN=0391578B8FC95DEBEF4BC1AF3C6227EE70741AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:80:4f:9c:c4:07:a0:8c:a7:b1:2e:08:a3:
d7:e5:2d:4c:2b:e1:90:fc:e9:57:e5:59:84:b0:e7:
41:4a:59:aa:f8:41:34:39:9d:6c:08:48:ac:5c:b5:
b2:3f:5d:cb:ed:7a:c2:60:ed:7d:5e:22:8c:b7:bb:
98:1e:39:02:d8:3c:84:d5:01:a5:c8:8a:92:29:34:
fc:90:ee:4c:75:b5:aa:0a:70:7c:70:4a:4c:eb:98:
2e:31:0d:68:75:75:06:fc:70:a6:52:31:4d:dd:d8:
90:51:00:f0:41:29:2f:d3:3b:e0:b2:6f:25:11:9d:
9b:ae:ce:1e:63:fb:91:b0:4c:84:c5:90:2d:74:1e:
82:e5:5b:04:7b:ca:13:b3:10:75:04:4c:90:28:b3:
a2:bb:12:72:1a:54:a0:cb:6c:59:5b:34:d5:dc:2a:
66:d8:aa:b8:0d:49:24:d2:b7:0f:a5:64:fe:a8:a4:
fe:c1:9b:9b:01:22:ed:f3:ef:97:73:a2:a8:d2:aa:
20:3d:3e:0b:12:59:27:80:09:40:0c:50:d5:dc:f6:
80:0d:26:f6:6f:91:a0:21:c9:0a:54:38:da:a3:bd:
56:83:74:a6:fc:76:a4:cc:6d:c4:ec:e2:64:75:ea:
26:ac:f0:51:01:ce:cf:51:9b:a8:79:34:ca:6d:9d:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:91:57:8B:8F:C9:5D:EB:EF:4B:C1:AF:3C:62:27:EE:70:74:1A:A4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130332e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:52:c0:97:7d:94:24:32:13:bf:83:bc:8e:10:31:46:b1:
02:90:16:05:86:97:c1:57:38:d3:fa:57:a0:c9:37:a4:6a:90:
cf:fb:06:34:ef:6c:7e:4f:b7:0f:7f:dd:6a:71:3b:ad:44:c8:
ad:09:22:a0:7b:dc:ec:e9:6b:65:e1:12:75:fa:b4:9d:5e:16:
26:2d:f1:16:fd:7b:2d:a2:47:cd:8d:0d:8a:15:0b:75:13:a6:
70:6e:e4:6a:b4:bb:6a:73:c5:cf:36:5b:4e:74:ab:29:3a:68:
f4:eb:da:11:91:70:b0:04:75:7e:a5:c6:e9:68:b2:f8:57:fb:
20:82:5e:07:6e:8c:05:23:2e:97:9c:95:85:7e:21:f1:f7:f1:
e9:3c:4a:13:e8:f1:2a:50:4b:3c:c2:54:1b:3a:c7:cb:b0:2d:
96:59:74:1a:51:e7:27:2d:83:75:13:c3:6e:7a:ec:c1:d7:78:
b4:c5:86:5f:c9:b9:d8:78:93:d3:23:cd:14:87:57:74:28:29:
74:46:6e:3b:34:65:67:fd:48:61:b1:96:e8:1d:6a:5c:8c:ab:
09:f5:be:72:b9:ae:90:90:d5:8f:83:ca:92:86:b1:20:2e:33:
ff:b3:90:e4:f3:46:17:6b:c2:8c:a0:b9:77:a9:11:09:94:03:
85:bd:ff:11
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUaQ39RxY2a03cOj1yMqMXNjCkrYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDMzMjdaFw0yNTAyMTgxNDM4MjdaMDMxMTAvBgNV
BAMTKDAzOTE1NzhCOEZDOTVERUJFRjRCQzFBRjNDNjIyN0VFNzA3NDFBQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIoBPnMQHoIynsS4Io9flLUwr
4ZD86VflWYSw50FKWar4QTQ5nWwISKxctbI/XcvtesJg7X1eIoy3u5geOQLYPITV
AaXIipIpNPyQ7kx1taoKcHxwSkzrmC4xDWh1dQb8cKZSMU3d2JBRAPBBKS/TO+Cy
byURnZuuzh5j+5GwTITFkC10HoLlWwR7yhOzEHUETJAos6K7EnIaVKDLbFlbNNXc
KmbYqrgNSSTStw+lZP6opP7Bm5sBIu3z75dzoqjSqiA9PgsSWSeACUAMUNXc9oAN
JvZvkaAhyQpUONqjvVaDdKb8dqTMbcTs4mR16ias8FEBzs9Rm6h5NMptnasVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUA5FXi4/JXevvS8GvPGIn7nB0GqQwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzMzNzJlMzUzMjJlMzEzMDMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzODM0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlNGcw
DQYJKoZIhvcNAQELBQADggEBAKFVUsCXfZQkMhO/g7yOEDFGsQKQFgWGl8FXONP6
V6DJN6RqkM/7BjTvbH5Ptw9/3WpxO61EyK0JIqB73Ozpa2XhEnX6tJ1eFiYt8Rb9
ey2iR82NDYoVC3UTpnBu5Gq0u2pzxc82W050qyk6aPTr2hGRcLAEdX6lxulosvhX
+yCCXgdujAUjLpeclYV+IfH38ek8ShPo8SpQSzzCVBs6x8uwLZZZdBpR5yctg3UT
w2567MHXeLTFhl/Judh4k9MjzRSHV3QoKXRGbjs0ZWf9SGGxlugdalyMqwn1vnK5
rpCQ1Y+DypKGsSAuM/+zkOTzRhdrwoyguXepEQmUA4W9/xE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org