Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130382e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3130382e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: LFJIJS6RDpbDweFvZwnb3Xgar/lbmu0N/DxaYCRMi+s=
Subject key identifier: 03:C4:7E:46:EE:51:03:86:B3:4E:5B:28:60:AD:4B:EB:10:8A:06:32
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2D1E4055AFC98D1EC62A7E741CCE7C80BE81C8C6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130382e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:38:37 +0000
ROA not before: Tue 20 Feb 2024 14:33:37 +0000
ROA not after: Tue 18 Feb 2025 14:38:37 +0000
asID: 6849
IP address blocks: 37.52.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1e:40:55:af:c9:8d:1e:c6:2a:7e:74:1c:ce:7c:80:be:81:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:33:37 2024 GMT
Not After : Feb 18 14:38:37 2025 GMT
Subject: CN=03C47E46EE510386B34E5B2860AD4BEB108A0632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:95:ef:55:75:d8:1c:26:ca:1a:8f:e2:cb:
16:88:64:56:8a:4b:5a:b9:21:e0:64:8d:8b:cc:6b:
a7:6a:df:d0:05:6d:74:9d:4a:de:76:e0:d9:15:70:
d1:74:aa:8b:62:28:a2:50:ad:fb:ac:f3:9b:2d:ff:
e4:c7:cd:da:f0:95:f9:df:db:ce:8e:d1:6e:b1:46:
c2:ef:a4:83:b0:9e:48:a9:8c:cd:30:c9:35:6d:72:
cc:26:b7:38:e4:cc:df:b1:00:f9:4f:ba:d1:cf:9f:
60:a7:c7:c0:ef:37:1f:73:7d:92:bb:fd:c6:f0:d5:
42:0b:3d:4f:6c:35:36:b4:02:7a:bc:5d:2a:51:3c:
6e:00:73:52:56:75:b4:b9:d9:14:f2:7e:90:0d:e8:
f5:52:57:82:fd:45:b9:fa:c7:5c:81:62:14:35:04:
93:ad:d4:88:41:53:c3:8e:c4:70:ee:8d:19:f1:ca:
d8:c5:c2:f9:81:d5:a4:79:31:52:0e:43:3d:c1:b8:
09:28:65:c5:a5:43:90:71:9e:31:18:a6:3b:19:38:
d0:a6:8f:4d:83:94:d4:e5:43:1f:80:f0:d6:73:45:
36:4c:3a:21:ba:5a:79:77:b1:6d:04:a6:8a:a4:da:
d9:2e:5d:a8:64:e0:a9:05:99:03:c2:1d:36:1d:c4:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:7E:46:EE:51:03:86:B3:4E:5B:28:60:AD:4B:EB:10:8A:06:32
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3130382e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:99:fe:a3:5f:a2:47:9d:4f:85:83:bb:af:c7:e3:18:41:35:
1d:82:2f:59:69:0d:18:79:d2:c4:a8:59:d0:f9:c5:6e:25:b7:
51:b8:37:d5:e8:68:b1:cb:f8:25:5e:64:f0:08:65:bd:f8:15:
b9:41:e6:51:98:38:e7:89:80:b5:52:ad:95:94:7f:2a:79:34:
b4:d4:f3:86:12:32:06:ce:06:13:e0:d5:f2:14:11:91:22:fa:
34:e5:ea:6f:65:14:2b:38:31:1c:aa:af:93:7e:1c:2b:05:12:
bc:38:1c:46:49:16:cb:be:93:d1:fb:fe:fd:92:4a:5a:50:f5:
fe:74:20:89:ff:54:ee:18:45:ed:09:3d:2e:e5:21:65:39:14:
51:f8:14:2a:65:68:e5:ab:be:77:16:ce:e5:d0:91:ec:17:88:
e8:da:eb:14:a6:05:cb:17:60:5e:4e:0d:e2:ad:bb:b6:ad:ec:
35:99:84:f2:b0:ae:b3:84:28:18:a6:fc:d9:da:19:56:8c:a7:
c3:e3:68:75:a4:81:a7:d9:cd:d8:50:02:6d:8c:bb:32:ce:a2:
34:64:0c:37:d4:b3:84:03:06:60:5a:10:26:de:b5:f0:4f:5f:
7a:f0:09:1b:83:28:a7:7b:c5:e7:ff:f2:24:77:c1:ef:c4:78:
43:34:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org