Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33332e302f32342d3234203d3e2036383439.roa
File: 33372e35322e33332e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: lnq49VjJrAgyidITrUKcXMJJV+55IRr1GQdK7he6Mhw=
Subject key identifier: 35:FC:49:E6:EA:F2:05:84:29:A2:6F:B9:88:94:0E:59:BC:3E:4A:61
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 25E6ADDE391F159A908E0630259B4E5F4C6D0450
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33332e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:36:37 +0000
ROA not before: Tue 20 Feb 2024 14:31:37 +0000
ROA not after: Tue 18 Feb 2025 14:36:37 +0000
asID: 6849
IP address blocks: 37.52.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e6:ad:de:39:1f:15:9a:90:8e:06:30:25:9b:4e:5f:4c:6d:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:31:37 2024 GMT
Not After : Feb 18 14:36:37 2025 GMT
Subject: CN=35FC49E6EAF2058429A26FB988940E59BC3E4A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:86:54:1c:d7:31:62:82:27:95:1c:62:51:
51:15:f7:4a:5d:6b:07:8a:83:69:b6:a7:2a:19:db:
63:fd:ea:d3:3e:f3:96:43:f6:37:13:6d:95:9e:38:
33:12:63:5d:ac:04:f7:31:8b:3c:94:a8:70:36:26:
2f:c1:ea:b2:2f:38:a9:ff:61:eb:ac:83:6c:65:ef:
32:31:da:55:8a:e5:a4:c7:73:43:fe:ed:f6:93:68:
ac:b6:2c:aa:ef:5c:34:ea:83:81:76:6b:2c:1c:d9:
b5:9d:b1:6c:30:33:db:ad:4f:ec:c3:85:61:b4:32:
e7:3e:07:dc:af:55:b1:2a:b0:e0:3e:50:0e:4f:c4:
88:85:a3:48:9b:53:5a:2b:d8:64:b7:45:6f:52:4d:
d1:f6:fd:90:83:d4:85:23:2f:fc:d2:2f:a4:10:93:
00:49:18:f8:2a:f3:53:cc:1a:85:1f:c5:f9:03:ac:
70:cb:39:9a:58:d3:42:45:33:93:e3:dc:6f:1d:28:
d1:91:35:35:82:fa:4b:6d:c4:73:a2:5d:d4:37:f5:
84:dc:8d:b6:9b:67:cc:2a:f2:a9:92:84:2b:1e:4f:
d8:58:d0:2c:bc:08:50:f7:52:da:ed:04:d8:be:8b:
2a:52:d7:83:72:f7:bf:0d:7d:2b:f2:b2:91:d7:04:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:49:E6:EA:F2:05:84:29:A2:6F:B9:88:94:0E:59:BC:3E:4A:61
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33332e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1d:48:0c:b5:d6:a8:e6:9f:e0:15:23:20:4a:1c:49:49:99:
28:da:d1:39:80:f2:60:bb:33:89:cb:42:32:5b:4c:46:6e:83:
30:1a:ba:d5:55:8e:28:00:03:15:07:1a:cb:ab:54:0c:22:05:
52:cd:86:64:ff:6b:fc:85:2f:0a:cd:fe:87:a4:ae:4f:9d:34:
6c:e4:3d:70:ee:e8:92:21:21:d5:71:06:50:3a:d3:f8:27:32:
8b:25:f7:bc:f0:09:aa:ff:be:d0:b3:81:59:47:50:13:b7:fd:
64:fc:49:2c:84:6b:c6:56:60:ae:1e:5a:ab:63:b8:e8:4e:cd:
64:50:91:df:74:7d:46:40:52:44:c0:10:9c:7d:f8:c3:32:92:
fd:38:7f:28:83:f3:2d:f1:48:38:68:07:e1:8f:e3:9e:8b:3b:
16:9c:3f:6f:10:21:14:71:9c:7c:58:21:13:99:f7:1d:29:7a:
4f:d1:cb:5c:38:0b:09:28:28:24:14:24:89:05:36:ae:30:bb:
e6:81:34:c4:47:82:07:79:95:31:b8:2e:7e:44:e3:b2:5b:84:
7b:6f:6c:32:3f:f6:f7:79:98:5e:0d:64:95:f9:3d:9a:58:bd:
fc:48:ec:f9:c0:37:94:ea:b2:9b:70:4e:c4:aa:3d:34:06:d2:
96:87:bf:8f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUJeat3jkfFZqQjgYwJZtOX0xtBFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDMxMzdaFw0yNTAyMTgxNDM2MzdaMDMxMTAvBgNV
BAMTKDM1RkM0OUU2RUFGMjA1ODQyOUEyNkZCOTg4OTQwRTU5QkMzRTRBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUNYZUHNcxYoInlRxiUVEV90pd
aweKg2m2pyoZ22P96tM+85ZD9jcTbZWeODMSY12sBPcxizyUqHA2Ji/B6rIvOKn/
Yeusg2xl7zIx2lWK5aTHc0P+7faTaKy2LKrvXDTqg4F2aywc2bWdsWwwM9utT+zD
hWG0Muc+B9yvVbEqsOA+UA5PxIiFo0ibU1or2GS3RW9STdH2/ZCD1IUjL/zSL6QQ
kwBJGPgq81PMGoUfxfkDrHDLOZpY00JFM5Pj3G8dKNGRNTWC+kttxHOiXdQ39YTc
jbabZ8wq8qmShCseT9hY0Cy8CFD3UtrtBNi+iypS14Ny978NfSvyspHXBACZAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUNfxJ5uryBYQpom+5iJQOWbw+SmEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzMzNzJlMzUzMjJlMzMzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzgzNDM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTQhMA0G
CSqGSIb3DQEBCwUAA4IBAQCeHUgMtdao5p/gFSMgShxJSZko2tE5gPJguzOJy0Iy
W0xGboMwGrrVVY4oAAMVBxrLq1QMIgVSzYZk/2v8hS8Kzf6HpK5PnTRs5D1w7uiS
ISHVcQZQOtP4JzKLJfe88Amq/77Qs4FZR1ATt/1k/EkshGvGVmCuHlqrY7joTs1k
UJHfdH1GQFJEwBCcffjDMpL9OH8og/Mt8Ug4aAfhj+OeizsWnD9vECEUcZx8WCET
mfcdKXpP0ctcOAsJKCgkFCSJBTauMLvmgTTER4IHeZUxuC5+ROOyW4R7b2wyP/b3
eZheDWSV+T2aWL38SOz5wDeU6rKbcE7Eqj00BtKWh7+P
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org