Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20313938393839.roa
File: 37372e38312e3133382e302f32342d3234203d3e20313938393839.roa (raw, json)
Hash identifier: AoTYzfnrw+4XiUY0DCofdRD0WRSaxMLVj3yWeuifVTE=
Subject key identifier: 4A:09:1C:F3:3A:2E:91:C2:27:5F:D1:7B:C7:15:39:7A:1F:E2:12:C7
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 49D9FFEA35BD2251ABD157E2BAEACD8A579D5B5F
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20313938393839.roa
Signing time: Sat 18 Nov 2023 13:27:03 +0000
ROA not before: Sat 18 Nov 2023 13:22:03 +0000
ROA not after: Sat 16 Nov 2024 13:27:03 +0000
asID: 198989
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:ff:ea:35:bd:22:51:ab:d1:57:e2:ba:ea:cd:8a:57:9d:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Nov 18 13:22:03 2023 GMT
Not After : Nov 16 13:27:03 2024 GMT
Subject: CN=4A091CF33A2E91C2275FD17BC715397A1FE212C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:50:d6:fd:68:9a:4c:95:31:96:f5:3e:81:
50:1f:e7:4c:92:ca:35:2c:e1:92:6e:0f:7c:21:61:
b1:d3:2a:3d:ec:7b:97:29:76:52:50:be:f7:cf:0d:
3c:67:bc:3f:15:7f:37:ae:9c:eb:67:79:ad:fc:f2:
62:6f:84:9d:29:ce:91:9b:a7:80:73:69:8c:93:dc:
4d:f0:10:39:b8:ab:cc:73:0c:6f:6c:05:91:1d:8b:
77:55:db:4c:2d:6e:a0:72:f2:ce:29:94:7d:7d:d4:
37:6e:37:94:8f:c7:44:6e:20:cf:ff:0d:0b:05:e6:
e0:54:54:61:f0:a4:85:d5:95:c3:8c:e6:74:e6:51:
08:cc:b0:88:56:82:64:03:27:d4:4e:9d:53:27:37:
6f:b4:e8:fe:50:f8:f6:72:ef:32:fb:5e:6a:33:f1:
db:c0:a1:90:00:71:a1:ba:cb:87:27:e5:42:e5:86:
38:65:f4:2f:65:7a:3e:92:95:c7:bf:38:88:73:73:
ca:77:78:b5:31:db:a7:83:cf:6f:0e:f2:70:f1:f9:
e3:3e:ad:af:f4:e1:95:4c:bb:a0:8d:e6:73:31:9c:
27:8c:7b:b6:a8:56:c4:95:e5:e5:3c:69:6f:82:8c:
7c:34:89:27:4b:cb:f2:e9:2e:5a:30:81:97:48:1e:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:1C:F3:3A:2E:91:C2:27:5F:D1:7B:C7:15:39:7A:1F:E2:12:C7
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20313938393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bc:83:81:f2:b9:1f:4c:a6:6c:19:d6:4f:9f:0a:64:56:f7:
a7:73:aa:aa:ad:54:bd:fa:ac:2b:24:b3:6a:89:48:e1:ad:43:
4a:3a:4e:60:3e:e1:af:9a:b6:75:f5:61:d4:42:32:dd:a0:47:
09:c5:7b:11:11:5b:93:f3:29:80:ea:59:7c:24:80:e2:34:b2:
ad:3e:b2:de:c8:db:62:02:1d:15:d7:b8:53:d8:59:8a:58:c2:
34:71:e6:15:f0:d2:8e:8b:11:e8:56:be:e2:ca:1a:93:ae:8d:
fb:ae:62:9f:ed:80:d5:7b:31:b8:c6:4c:6a:7f:c5:6d:1a:26:
64:44:f4:80:05:2d:da:5f:f5:7e:b7:83:b4:dc:a5:23:67:af:
e6:d2:87:2e:e8:7e:87:72:12:f7:c6:3b:af:ea:b7:6b:41:6e:
5d:1e:33:ba:c1:6a:3c:24:d2:92:89:f4:7c:41:f9:ad:f7:06:
df:fe:56:06:10:39:76:0d:9b:5d:db:50:9c:1d:c7:c6:ae:cd:
07:99:09:1b:73:0c:aa:ff:4b:91:8d:91:d5:a0:39:1a:d7:12:
28:eb:ad:c0:65:7f:dd:2e:ef:96:f1:7d:79:b1:7b:7a:86:33:
1f:30:63:b0:ce:fa:89:12:a7:59:3a:4c:d2:90:e0:4a:a8:a6:
d5:e3:9c:ab
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSdn/6jW9IlGr0VfiuurNiledW18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yMzExMTgxMzIyMDNaFw0yNDExMTYxMzI3MDNaMDMxMTAvBgNV
BAMTKDRBMDkxQ0YzM0EyRTkxQzIyNzVGRDE3QkM3MTUzOTdBMUZFMjEyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthFDW/WiaTJUxlvU+gVAf50yS
yjUs4ZJuD3whYbHTKj3se5cpdlJQvvfPDTxnvD8VfzeunOtnea388mJvhJ0pzpGb
p4BzaYyT3E3wEDm4q8xzDG9sBZEdi3dV20wtbqBy8s4plH191DduN5SPx0RuIM//
DQsF5uBUVGHwpIXVlcOM5nTmUQjMsIhWgmQDJ9ROnVMnN2+06P5Q+PZy7zL7Xmoz
8dvAoZAAcaG6y4cn5ULlhjhl9C9lej6Slce/OIhzc8p3eLUx26eDz28O8nDx+eM+
ra/04ZVMu6CN5nMxnCeMe7aoVsSV5eU8aW+CjHw0iSdLy/LpLlowgZdIHm0FAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUSgkc8zoukcInX9F7xxU5eh/iEscwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzczNzJlMzgzMTJlMzEzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzkzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
TVGKMA0GCSqGSIb3DQEBCwUAA4IBAQAUvIOB8rkfTKZsGdZPnwpkVvenc6qqrVS9
+qwrJLNqiUjhrUNKOk5gPuGvmrZ19WHUQjLdoEcJxXsREVuT8ymA6ll8JIDiNLKt
PrLeyNtiAh0V17hT2FmKWMI0ceYV8NKOixHoVr7iyhqTro37rmKf7YDVezG4xkxq
f8VtGiZkRPSABS3aX/V+t4O03KUjZ6/m0ocu6H6HchL3xjuv6rdrQW5dHjO6wWo8
JNKSifR8Qfmt9wbf/lYGEDl2DZtd21CcHcfGrs0HmQkbcwyq/0uRjZHVoDka1xIo
663AZX/dLu+W8X15sXt6hjMfMGOwzvqJEqdZOkzSkOBKqKbV45yr
-----END CERTIFICATE-----
Generated at Thu Nov 30 10:36:37 2023 by rpki-client on console-ams.rpki-client.org