Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323135323837.roa
File: 37372e38312e3133382e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: uyhcA0gIG7AKMtRbAD8Swq9FGpKqOIRwua5hIWUZy3M=
Subject key identifier: BA:7E:D1:7E:06:D3:7C:71:EE:5F:CC:19:37:9A:B9:F4:3D:1D:9C:1A
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 2D004D5F692F125BAE36706A2D560EBA0F6C3004
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323135323837.roa
Signing time: Thu 01 Aug 2024 19:14:08 +0000
ROA not before: Thu 01 Aug 2024 19:09:08 +0000
ROA not after: Thu 31 Jul 2025 19:14:08 +0000
asID: 215287
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:00:4d:5f:69:2f:12:5b:ae:36:70:6a:2d:56:0e:ba:0f:6c:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 1 19:09:08 2024 GMT
Not After : Jul 31 19:14:08 2025 GMT
Subject: CN=BA7ED17E06D37C71EE5FCC19379AB9F43D1D9C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:a0:00:d2:0e:24:10:52:be:f5:4a:fe:2f:
c7:d8:a5:81:2c:1d:2e:a8:15:a0:6b:a6:0c:09:2e:
0b:d1:99:99:20:0a:40:47:9b:d4:59:5f:18:58:fe:
bf:38:94:e5:7b:d2:79:90:01:90:95:46:38:d5:27:
07:cb:f7:bb:80:7d:29:38:16:f0:05:09:bd:04:67:
29:73:c5:c6:4c:8c:7d:df:fd:bc:e8:77:1f:85:40:
18:78:de:51:7b:54:48:21:ea:6a:3a:c8:1c:28:63:
c3:f7:48:dc:a3:4d:0d:79:79:d6:47:8f:87:ff:2a:
3d:fe:86:5b:29:ea:45:07:23:96:d0:4d:87:9d:db:
4a:8e:70:3c:94:7c:e4:49:c9:f2:78:44:21:0b:98:
cf:22:8d:2e:0e:49:8e:81:7f:55:e2:ba:1f:32:71:
0d:7b:d8:fe:77:6a:35:0d:2a:6a:9b:80:4c:1b:5b:
0d:65:74:68:c5:f0:2b:00:d6:27:f6:1d:17:e0:a5:
e4:b6:7b:73:c3:4e:3d:ad:a2:d3:71:e4:a3:0b:59:
73:a1:c4:f3:80:dd:e1:1c:f7:da:11:be:db:93:bc:
97:a2:90:96:2a:73:3d:c1:73:9a:5a:8e:46:0f:16:
0a:ff:8e:30:e2:c6:0c:8b:e3:65:c2:6b:1f:b3:1b:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:D1:7E:06:D3:7C:71:EE:5F:CC:19:37:9A:B9:F4:3D:1D:9C:1A
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bb:7f:3d:c1:12:35:a6:43:7e:8d:80:cb:f8:15:17:39:7d:
6b:da:d5:24:f9:03:f1:d1:13:66:52:ca:61:af:01:3f:31:b0:
66:7a:ac:ac:f3:92:f2:f1:2a:bd:d0:05:47:3a:04:ed:e1:3b:
b1:3b:74:29:a6:86:60:2b:1c:1b:a9:ab:41:85:59:bb:7e:ca:
a4:b6:ae:e0:d6:74:75:69:45:73:ef:fd:f5:b7:f2:ea:ef:c5:
4d:5d:0d:d0:f9:11:3b:14:6b:ba:8e:6e:ae:0a:59:97:83:03:
b8:5b:b0:0c:4f:9b:94:b0:21:0c:90:76:ad:dd:eb:e6:c5:9a:
2e:dd:0d:73:a6:99:c4:d4:c8:21:9d:92:a0:0b:98:20:b3:41:
7d:a3:36:ab:00:ed:8b:e4:1c:e9:cf:8f:91:0f:36:b8:82:45:
14:12:22:97:54:43:db:c4:73:9f:55:67:d8:eb:50:46:18:c2:
2f:f5:86:61:69:9d:20:ab:f8:93:ab:d6:5d:56:b9:39:a7:d0:
d7:5b:0f:f6:34:f2:dc:3f:fc:87:24:81:07:18:e6:72:6b:5f:
70:33:a1:db:30:cb:3b:7a:a5:d7:ae:09:39:77:34:c2:e0:eb:
08:88:7b:df:c7:19:da:af:57:2b:51:78:02:bc:43:cf:1e:da:
21:cc:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 03:31:15 2024 by rpki-client on console-ams.rpki-client.org