Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33392e302f32342d3234203d3e2036383439.roa
File: 33372e35322e33392e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: jOiuYOj+g/FfJ5Na2Li1it9bQlPljcg1E/wgg2mNK6w=
Subject key identifier: 66:66:22:1E:E4:1C:DD:9B:15:75:90:9B:8B:29:DF:20:9F:4D:8F:35
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7318AA4D2C2C4619F1227F3892F839657C08BD27
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33392e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:36:48 +0000
ROA not before: Tue 20 Feb 2024 14:31:48 +0000
ROA not after: Tue 18 Feb 2025 14:36:48 +0000
asID: 6849
IP address blocks: 37.52.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:18:aa:4d:2c:2c:46:19:f1:22:7f:38:92:f8:39:65:7c:08:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:31:48 2024 GMT
Not After : Feb 18 14:36:48 2025 GMT
Subject: CN=6666221EE41CDD9B1575909B8B29DF209F4D8F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:30:59:73:2e:61:b6:b1:94:62:96:80:67:
77:6c:03:a2:61:2c:a4:9e:76:79:7f:fb:b7:47:c3:
4e:b1:40:50:5d:32:06:0e:42:44:29:60:01:66:a8:
c6:22:86:82:b4:79:7e:2a:df:72:fa:84:a5:d6:69:
b4:6a:e1:07:89:cb:dc:f5:9b:e5:53:4a:f6:20:11:
54:04:4b:2f:da:72:41:54:1a:7e:fd:f0:b1:b6:31:
30:9f:60:e1:c3:ae:38:01:cb:48:c1:5a:8b:ea:07:
be:99:0d:ae:16:55:82:eb:cb:da:9e:41:87:0b:16:
e7:f1:50:43:20:df:52:af:39:c9:b5:7d:0d:7a:e1:
c2:31:bb:f0:d5:29:ba:d4:62:db:a8:c8:b5:c1:e3:
e6:68:0d:53:e4:a6:5a:f5:06:29:8c:59:81:89:dc:
03:58:0e:4d:83:6c:39:32:af:2c:8c:44:a2:fd:82:
31:48:79:b0:b8:3f:18:e8:1e:d4:c5:0c:f5:57:38:
e2:43:70:27:6f:56:c0:4f:b3:c8:f7:a2:56:81:93:
c5:d9:5e:7c:e2:79:92:67:d5:b4:49:71:b0:1a:d1:
61:f2:3a:c0:a4:49:88:1e:e1:a7:4d:53:66:a6:e3:
4c:a3:09:6c:5a:84:62:51:eb:35:2f:d3:9d:11:da:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:66:22:1E:E4:1C:DD:9B:15:75:90:9B:8B:29:DF:20:9F:4D:8F:35
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e33392e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.39.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bf:89:d5:30:2f:bf:1c:d7:5f:b1:20:02:73:07:f9:74:7f:
2e:4a:5c:97:c3:13:04:98:75:2b:65:8f:6e:36:05:38:42:55:
a0:6c:21:e8:6e:cf:cb:a8:b9:6c:bd:99:35:34:ed:3d:52:a8:
3b:41:91:93:6c:28:c9:49:4f:07:de:13:b3:9e:c0:26:4d:2a:
fd:30:50:70:85:76:b9:11:ee:4b:7a:91:30:2b:27:00:1f:5c:
6c:65:e6:59:58:63:b3:7e:3c:3e:c5:61:34:53:94:60:5c:61:
4d:bf:1d:e4:9d:e7:22:a1:1c:75:e2:e3:1a:09:da:09:f4:af:
2b:0a:ad:9d:4c:89:8d:dd:13:b1:83:fa:25:62:b1:c3:57:9a:
14:e2:02:d4:92:08:d1:d9:ad:a3:e3:8f:d6:8d:10:d8:6f:f9:
0a:92:e9:3c:7b:b7:88:70:27:95:9c:32:9d:5b:97:9c:3b:62:
78:27:ca:ea:18:62:2a:d6:4c:b3:2c:72:c3:ae:50:ea:5b:6b:
cc:16:e6:59:9c:38:62:b4:d3:ff:d1:6d:32:1b:1e:e4:0b:a9:
96:c7:f7:59:0a:ed:26:b5:01:b7:12:a2:46:ec:49:84:a9:de:
ce:38:6f:86:a0:88:f3:78:2e:64:99:6f:67:dd:53:3e:70:98:
96:d4:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:27 2025 by rpki-client