Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20383334.roa
File: 37372e38312e3133372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zz2DX1AzEn/dzOO2FD17GzGa1HdqhA+mE4kBZ4j21rU=
Subject key identifier: 14:7F:31:82:B3:E9:36:01:2E:EF:52:77:53:12:98:19:9B:8E:97:70
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 0ECDB21F6C93573F19AEBF8C02895E31FE065610
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Oct 2023 00:00:07 +0000
ROA not before: Wed 11 Oct 2023 23:55:07 +0000
ROA not after: Thu 10 Oct 2024 00:00:07 +0000
asID: 834
IP address blocks: 77.81.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:cd:b2:1f:6c:93:57:3f:19:ae:bf:8c:02:89:5e:31:fe:06:56:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 11 23:55:07 2023 GMT
Not After : Oct 10 00:00:07 2024 GMT
Subject: CN=147F3182B3E936012EEF5277531298199B8E9770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:6b:20:c6:f4:79:05:b4:a1:4f:c4:01:c3:
a0:54:81:26:2b:bc:90:43:bf:78:b1:57:c8:9e:59:
43:7d:7c:0d:3b:f1:7e:2b:97:f7:ae:94:37:86:f4:
18:07:95:43:b4:36:39:fb:52:12:6b:ab:b0:dd:2e:
54:58:e7:78:50:a8:26:67:ab:c0:15:2e:b7:94:0d:
6c:c7:fa:fb:6c:22:ba:af:86:cc:93:d2:73:2b:af:
fd:2c:7a:3d:a6:09:d4:38:49:20:53:81:c0:c2:74:
20:ae:c0:8b:36:60:0d:7f:10:fa:34:5f:c5:1f:9a:
ca:28:a1:09:50:fe:65:18:7a:28:16:df:ed:51:a4:
7f:d0:43:21:2d:9f:3b:a9:34:17:8f:20:81:6b:8b:
18:e3:56:e4:91:4e:f4:96:12:23:87:0d:47:15:da:
ea:c3:3b:1d:be:4b:39:27:07:90:8f:ab:d8:10:7c:
b1:84:5c:6d:80:90:76:ca:e0:de:a8:39:a8:7c:fa:
ae:8c:0a:53:30:7b:e3:68:a9:3b:37:1a:e0:bf:da:
2a:59:27:78:03:d6:08:66:27:3a:02:f3:fc:67:c5:
e6:03:80:ae:d7:de:40:74:8f:cc:a3:33:fb:66:5e:
3e:32:76:1d:13:95:7c:11:86:5d:54:e5:1d:2d:be:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:31:82:B3:E9:36:01:2E:EF:52:77:53:12:98:19:9B:8E:97:70
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d9:33:b5:d9:e6:ff:7a:f6:c5:33:ea:e5:8d:fb:f5:2e:eb:
6b:e4:c1:82:d8:04:8f:11:f4:91:7d:b0:5f:50:0a:10:30:37:
83:bf:e9:30:2e:43:5b:37:31:78:0e:81:51:de:e2:da:24:e3:
03:cd:0d:32:40:c0:fe:d9:82:37:04:09:a8:4c:4f:24:07:91:
5c:ff:7a:43:d7:e1:81:b3:09:50:ad:ab:d9:d8:fe:91:3a:da:
4c:be:74:d6:af:c5:52:74:7b:fb:2d:9d:ab:a6:33:89:82:95:
fc:b1:a7:d7:6c:ff:68:bb:9e:78:54:9c:73:c1:55:d2:3b:c0:
7a:ba:62:86:a5:74:c4:8e:3a:87:ed:c1:c9:d6:7d:de:98:9d:
61:d2:c4:68:14:9c:8c:b0:4f:cd:19:d1:58:22:3d:ce:0a:b5:
81:46:fa:28:52:c7:df:f8:5f:d8:94:06:60:b1:c0:ab:27:63:
51:81:72:d2:a5:f3:4c:ab:d6:95:de:21:f9:97:cc:1b:2b:e8:
7a:d7:5b:8e:89:d5:0f:84:cb:93:05:33:c7:9b:4c:4b:f3:de:
c7:34:8e:88:50:95:20:44:06:51:6c:bc:cd:6f:ce:4f:97:b3:
d7:72:0e:ea:e9:c1:f0:1a:1e:23:81:6d:8e:d6:28:7e:d8:a1:
36:6b:ae:1d
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 3 20:32:01 2023 by rpki-client on console-ams.rpki-client.org