Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33322e302f32342d3234203d3e2036383439.roa
File: 33372e35322e33322e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: RbqtV0VU61CIFz4jNwkeEGbhkcqaOGG5TcDqeGB/lgI=
Subject key identifier: B2:8A:5F:97:F3:3A:98:FA:87:42:A2:D2:0A:53:32:A9:D2:5E:9F:8B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 34788000E5FBF1665F49A6397EB4CED907CCC064
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33322e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:36:36 +0000
ROA not before: Tue 20 Feb 2024 14:31:36 +0000
ROA not after: Tue 18 Feb 2025 14:36:36 +0000
asID: 6849
IP address blocks: 37.52.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:78:80:00:e5:fb:f1:66:5f:49:a6:39:7e:b4:ce:d9:07:cc:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:31:36 2024 GMT
Not After : Feb 18 14:36:36 2025 GMT
Subject: CN=B28A5F97F33A98FA8742A2D20A5332A9D25E9F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:d7:26:56:7a:ec:eb:ee:92:63:9e:5f:6d:
e4:46:2c:0f:77:2a:77:33:b3:7d:60:81:52:0c:49:
95:c9:58:3f:75:cf:e1:d2:aa:33:76:7b:72:62:bb:
2d:e3:2f:00:6f:e2:4d:14:20:73:03:8b:25:a6:c4:
37:05:1c:fb:86:0b:8d:e6:d1:e9:08:e2:9f:17:2b:
97:e1:df:ac:a9:24:c1:a0:28:8a:24:09:94:d7:ba:
9d:cf:e6:4f:a0:8d:51:b8:e6:88:d2:6e:f5:a8:52:
08:7c:1d:63:f0:86:a9:f3:01:6c:3f:c4:91:0e:b9:
a2:15:72:fb:29:af:99:f6:1e:e2:6f:c4:03:f9:a5:
53:22:30:2e:d5:41:87:b8:1a:30:dc:f8:35:2b:92:
1e:86:4c:76:ee:6c:50:5b:9b:b4:22:3a:ba:4e:92:
d7:d3:15:e7:b7:e5:06:4d:9f:ed:62:25:4f:5e:bb:
22:7b:1b:e7:b9:87:7d:41:7d:fd:14:25:fd:21:cf:
76:d3:1a:a1:73:14:4b:1f:25:a7:96:9b:86:a5:84:
4c:0e:5f:17:1f:c0:01:9f:e7:61:49:cb:e5:b2:80:
7e:53:02:ab:85:af:c7:3e:1f:57:5a:3c:75:9a:65:
22:a1:06:44:8e:99:cd:35:48:92:d6:b4:74:41:cd:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:5F:97:F3:3A:98:FA:87:42:A2:D2:0A:53:32:A9:D2:5E:9F:8B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33322e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.32.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e9:d1:b9:a3:25:a0:ac:99:5d:01:d2:e0:5c:ba:a5:c4:14:
30:e8:d3:0c:16:db:a6:03:06:77:b9:44:15:9c:cf:ae:2d:3f:
0c:97:6d:e7:11:6c:7a:4e:58:75:b9:d8:ce:43:30:6a:43:79:
0f:8a:f4:42:f2:7e:c4:bc:27:c1:04:d9:69:ba:26:dc:0b:dc:
f5:71:e2:2e:56:68:68:56:b8:6e:2e:f7:8c:e6:be:e1:07:ef:
94:0e:5c:28:fb:85:a0:a3:7e:8d:83:34:b0:a2:08:52:17:13:
a9:42:23:4c:47:87:87:da:04:1f:d8:af:3b:16:19:d8:a0:01:
ea:a5:df:94:fb:36:25:c9:32:ef:60:69:62:5d:27:aa:62:f4:
92:18:08:52:02:7a:ab:20:23:6f:2f:41:07:f0:1d:9d:c9:5d:
5f:92:fe:86:2e:10:05:4f:25:07:f9:8c:83:b4:7a:a1:c8:4d:
db:95:33:3f:17:ac:8c:28:c0:4a:9d:1a:bf:68:10:01:49:a2:
52:5c:7d:2f:73:8d:b6:a1:d2:4f:7a:6b:e6:66:7b:9e:25:8e:
59:52:0c:d4:90:51:b0:cb:64:04:40:37:94:ac:f9:86:94:01:
b5:73:19:f9:64:11:02:75:c1:52:a1:8c:d0:16:42:2d:14:40:
75:38:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org