Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134362e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3134362e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: 7IlulrTrpLWyIVExPoRGQnVOKdklBS+qwmxeQGYqzLc=
Subject key identifier: 6A:C7:5A:43:40:A7:11:6E:1C:C5:4E:26:E3:47:A4:16:D3:9A:FC:DD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19A33F4BA1CCA1D29949C941F5BB2700DCE4DF08
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134362e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:39:17 +0000
ROA not before: Tue 20 Feb 2024 14:34:17 +0000
ROA not after: Tue 18 Feb 2025 14:39:17 +0000
asID: 6849
IP address blocks: 37.52.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a3:3f:4b:a1:cc:a1:d2:99:49:c9:41:f5:bb:27:00:dc:e4:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:34:17 2024 GMT
Not After : Feb 18 14:39:17 2025 GMT
Subject: CN=6AC75A4340A7116E1CC54E26E347A416D39AFCDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:8d:f4:3c:ff:74:1c:d2:bb:67:59:ea:84:
d1:e6:75:67:57:aa:5c:62:0d:c2:08:9c:27:7f:27:
17:6b:d3:e9:5a:3e:ed:52:bc:b7:f0:9e:a4:1c:2d:
02:ab:f8:09:3c:02:7e:f3:d2:33:e0:50:41:8a:f0:
a5:25:07:b3:31:93:be:37:f1:48:bd:cc:5d:a6:62:
8e:46:f5:ba:75:40:88:21:7c:19:61:ec:c1:01:91:
df:64:6b:dc:29:65:e3:5c:71:a0:67:60:82:20:81:
da:ca:f6:52:42:41:a8:70:e2:0d:50:6b:ab:5b:fa:
63:13:35:f1:78:78:45:24:49:b1:f5:6d:6d:64:98:
b0:72:f1:59:38:5a:6f:ee:ec:d6:92:0d:0f:45:ff:
49:ce:1b:5b:4d:f3:57:09:bd:e3:e0:cb:14:5a:9b:
13:37:a0:19:12:4d:96:1d:ef:01:8e:59:12:d8:04:
2f:81:f5:9d:27:08:6a:32:f0:4e:e8:0d:60:c4:e0:
02:57:92:99:5c:3a:b1:47:66:76:1b:97:b1:f9:de:
4a:ad:c8:a1:84:9f:2f:df:5a:d0:af:ca:d4:6c:ff:
62:a1:5f:a2:4c:ae:80:ea:2c:6c:2e:5c:14:3d:5a:
2f:a7:54:dd:83:e3:56:11:51:c9:7c:ae:a8:13:21:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:5A:43:40:A7:11:6E:1C:C5:4E:26:E3:47:A4:16:D3:9A:FC:DD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134362e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.146.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fc:78:96:09:6d:d6:f0:8a:d3:bc:5d:51:67:aa:e5:c9:6e:
e2:1b:89:3f:8b:52:3f:35:38:a9:7d:41:72:9b:0c:a6:b2:7d:
d1:34:6d:6a:57:a8:fa:4e:18:97:68:b1:86:e4:f9:80:cd:c9:
68:b0:8f:5a:e4:08:5b:d9:e2:58:67:ae:0b:5e:e3:ad:0d:b5:
81:f1:b6:03:94:8e:37:37:74:8e:17:f2:42:73:68:7c:8c:71:
92:12:4f:e2:49:bf:3e:21:13:8d:24:19:cc:8b:f9:d2:13:5f:
25:05:d3:c2:ab:1a:df:c2:ca:e9:d1:18:40:4a:07:d3:9a:0a:
76:9d:aa:ab:b2:45:3b:a0:5b:0e:8f:19:5d:bf:4c:1e:14:f7:
3e:a0:4b:03:90:a2:56:b9:3c:73:46:9e:16:2e:29:4e:a7:86:
c3:85:13:f0:fd:20:7f:77:65:2c:50:3a:47:b1:54:61:04:45:
e2:37:02:16:5b:2c:78:79:74:fd:e1:6d:df:17:d5:9d:30:24:
ce:f2:fe:a3:1f:2d:80:bd:2f:8c:c3:44:ec:db:c0:d2:5a:03:
27:ec:b4:db:47:95:da:87:7a:e0:ba:3f:d1:da:4f:25:5e:41:
48:d7:11:d4:94:08:38:d7:9c:e2:d0:10:52:f2:f0:16:7e:8c:
63:e0:86:ad
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGaM/S6HModKZSclB9bsnANzk3wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDM0MTdaFw0yNTAyMTgxNDM5MTdaMDMxMTAvBgNV
BAMTKDZBQzc1QTQzNDBBNzExNkUxQ0M1NEUyNkUzNDdBNDE2RDM5QUZDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinI30PP90HNK7Z1nqhNHmdWdX
qlxiDcIInCd/Jxdr0+laPu1SvLfwnqQcLQKr+Ak8An7z0jPgUEGK8KUlB7Mxk743
8Ui9zF2mYo5G9bp1QIghfBlh7MEBkd9ka9wpZeNccaBnYIIggdrK9lJCQahw4g1Q
a6tb+mMTNfF4eEUkSbH1bW1kmLBy8Vk4Wm/u7NaSDQ9F/0nOG1tN81cJvePgyxRa
mxM3oBkSTZYd7wGOWRLYBC+B9Z0nCGoy8E7oDWDE4AJXkplcOrFHZnYbl7H53kqt
yKGEny/fWtCvytRs/2KhX6JMroDqLGwuXBQ9Wi+nVN2D41YRUcl8rqgTIbcPAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUasdaQ0CnEW4cxU4m40ekFtOa/N0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzMzNzJlMzUzMjJlMzEzNDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzODM0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlNJIw
DQYJKoZIhvcNAQELBQADggEBAIj8eJYJbdbwitO8XVFnquXJbuIbiT+LUj81OKl9
QXKbDKayfdE0bWpXqPpOGJdosYbk+YDNyWiwj1rkCFvZ4lhnrgte460NtYHxtgOU
jjc3dI4X8kJzaHyMcZIST+JJvz4hE40kGcyL+dITXyUF08KrGt/CyunRGEBKB9Oa
CnadqquyRTugWw6PGV2/TB4U9z6gSwOQola5PHNGnhYuKU6nhsOFE/D9IH93ZSxQ
OkexVGEEReI3AhZbLHh5dP3hbd8X1Z0wJM7y/qMfLYC9L4zDROzbwNJaAyfstNtH
ldqHeuC6P9HaTyVeQUjXEdSUCDjXnOLQEFLy8BZ+jGPghq0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:50 2025 by rpki-client