Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3133342e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3133342e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: qy1YkfvLAGztnEhxSA40NCU9dq5HA8WELJQMm2EJX3o=
Subject key identifier: 8D:B9:08:64:98:DB:FB:E8:9C:E7:02:ED:B0:62:7F:03:1E:A8:46:C6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 490E1BB9314C75CFDF11A9EE4C6AA298639FD76C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3133342e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:38:58 +0000
ROA not before: Tue 20 Feb 2024 14:33:58 +0000
ROA not after: Tue 18 Feb 2025 14:38:58 +0000
asID: 6849
IP address blocks: 37.52.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0e:1b:b9:31:4c:75:cf:df:11:a9:ee:4c:6a:a2:98:63:9f:d7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:33:58 2024 GMT
Not After : Feb 18 14:38:58 2025 GMT
Subject: CN=8DB9086498DBFBE89CE702EDB0627F031EA846C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:88:9f:4f:e0:9b:0b:cb:c0:98:3f:ab:27:
18:21:5b:13:de:d1:fd:b1:bf:b0:40:9d:49:42:6c:
3a:44:27:b6:c6:9c:a0:d6:30:72:47:98:19:1f:c3:
b4:0f:f2:55:5e:f3:28:cc:fd:00:f1:7f:a2:b8:4c:
7f:ed:07:46:cd:20:54:af:ab:1b:cd:d2:07:85:39:
ab:7d:a3:2d:91:ea:f9:d3:8d:59:e0:57:a6:6f:38:
cc:3a:a0:c4:6c:e7:db:5c:48:29:00:8c:b6:dd:ca:
5f:ef:12:e1:05:9b:64:da:cb:ad:d5:92:54:6f:12:
1c:08:05:af:63:da:46:04:b2:6e:63:ca:7b:6a:e2:
13:52:df:68:64:21:d9:54:7b:9d:a7:1e:78:d9:3f:
90:7e:de:3f:4b:3d:08:b4:4d:03:57:3a:83:e6:0e:
77:84:c5:53:b0:36:9f:bc:49:4a:3a:0e:a2:fd:b1:
35:89:90:06:a8:3b:0d:89:be:25:2d:e5:fc:25:b5:
32:33:9a:fb:48:82:73:56:98:09:28:7f:ff:e4:9e:
6e:69:68:57:fc:8e:18:40:34:84:3b:2e:41:24:56:
f7:ea:c8:25:b1:3d:48:8f:5b:56:4b:84:bd:46:36:
9b:75:a9:48:83:d6:93:d3:92:56:27:06:61:30:41:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:08:64:98:DB:FB:E8:9C:E7:02:ED:B0:62:7F:03:1E:A8:46:C6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3133342e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.134.0/24
Signature Algorithm: sha256WithRSAEncryption
43:37:50:05:76:60:61:03:eb:16:a0:e5:63:d7:57:0d:96:8b:
79:b8:85:79:3d:09:90:80:09:c9:17:64:ba:c3:f6:d2:12:e4:
e7:b5:2f:1b:01:63:31:79:33:65:81:6c:fa:ac:c8:9c:04:4e:
6a:df:5f:b0:b9:4d:2a:e6:58:a7:7d:0d:2d:e6:a7:8a:28:66:
1d:7e:f2:cb:92:d8:44:e5:43:fe:00:15:8d:14:ac:cb:1f:65:
7a:b4:17:82:3d:88:2a:1a:dc:c4:6a:3e:9c:82:1d:a2:39:b6:
88:80:f5:bb:46:c7:3a:5e:c7:c5:60:9a:ea:04:a3:e2:2c:a5:
d2:42:a1:4b:60:2b:cb:60:b2:04:0d:c2:bc:33:80:4b:d6:06:
65:e2:3a:27:85:14:b4:fc:e2:32:0f:d4:85:7d:d2:a3:e3:fc:
57:52:89:9d:5f:d8:ad:3d:fb:0c:46:b4:f8:a1:08:eb:11:5e:
dc:2f:e3:10:35:5e:76:4a:ce:77:43:a1:3f:eb:03:2b:e7:f0:
c5:1a:4d:8b:77:9f:c2:50:c2:9d:92:a3:8f:5a:19:0e:e0:53:
bf:39:89:e0:98:0b:fb:30:99:d0:52:50:18:f5:ea:c6:c1:03:
8d:44:db:7b:1b:c7:8e:80:c9:47:fb:5e:0f:3e:ab:d2:86:be:
16:2f:3c:d3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSQ4buTFMdc/fEanuTGqimGOf12wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDMzNThaFw0yNTAyMTgxNDM4NThaMDMxMTAvBgNV
BAMTKDhEQjkwODY0OThEQkZCRTg5Q0U3MDJFREIwNjI3RjAzMUVBODQ2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W4ifT+CbC8vAmD+rJxghWxPe
0f2xv7BAnUlCbDpEJ7bGnKDWMHJHmBkfw7QP8lVe8yjM/QDxf6K4TH/tB0bNIFSv
qxvN0geFOat9oy2R6vnTjVngV6ZvOMw6oMRs59tcSCkAjLbdyl/vEuEFm2Tay63V
klRvEhwIBa9j2kYEsm5jyntq4hNS32hkIdlUe52nHnjZP5B+3j9LPQi0TQNXOoPm
DneExVOwNp+8SUo6DqL9sTWJkAaoOw2JviUt5fwltTIzmvtIgnNWmAkof//knm5p
aFf8jhhANIQ7LkEkVvfqyCWxPUiPW1ZLhL1GNpt1qUiD1pPTklYnBmEwQe0NAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUjbkIZJjb++ic5wLtsGJ/Ax6oRsYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzMzNzJlMzUzMjJlMzEzMzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzODM0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlNIYw
DQYJKoZIhvcNAQELBQADggEBAEM3UAV2YGED6xag5WPXVw2Wi3m4hXk9CZCACckX
ZLrD9tIS5Oe1LxsBYzF5M2WBbPqsyJwETmrfX7C5TSrmWKd9DS3mp4ooZh1+8suS
2ETlQ/4AFY0UrMsfZXq0F4I9iCoa3MRqPpyCHaI5toiA9btGxzpex8VgmuoEo+Is
pdJCoUtgK8tgsgQNwrwzgEvWBmXiOieFFLT84jIP1IV90qPj/FdSiZ1f2K09+wxG
tPihCOsRXtwv4xA1XnZKzndDoT/rAyvn8MUaTYt3n8JQwp2So49aGQ7gU785ieCY
C/swmdBSUBj16sbBA41E23sbx46AyUf7Xg8+q9KGvhYvPNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org