Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
File: 37372e38312e3133382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5bC2cajOPsVtQd5Knpz/4b2LobXG4bSM75tr+ryB/kI=
Subject key identifier: 4B:3E:78:38:DB:D5:71:11:6D:29:2D:D3:F9:8E:A6:E9:ED:B1:7A:0C
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 74B96AC503DC5128D0DC5DDD395CEA3AD4B04191
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Oct 2024 00:04:35 +0000
ROA not before: Wed 02 Oct 2024 23:59:35 +0000
ROA not after: Thu 02 Oct 2025 00:04:35 +0000
asID: 834
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 23:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b9:6a:c5:03:dc:51:28:d0:dc:5d:dd:39:5c:ea:3a:d4:b0:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 2 23:59:35 2024 GMT
Not After : Oct 2 00:04:35 2025 GMT
Subject: CN=4B3E7838DBD571116D292DD3F98EA6E9EDB17A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:f8:ab:02:08:8e:84:0f:bf:bd:6c:37:9d:
1f:d3:eb:55:04:ad:4b:ab:3b:39:8b:0c:62:eb:df:
80:fe:b9:39:68:29:6f:76:a3:d4:45:07:72:be:28:
71:e1:99:d2:0b:ed:1b:f7:e0:21:70:b5:da:19:18:
1b:25:c9:f9:fe:61:61:38:50:4a:cc:5b:ae:37:5a:
b0:98:88:e4:27:8b:64:a1:e7:10:ab:e2:74:a8:e7:
2f:19:fb:66:77:7c:39:58:b2:9b:b2:23:54:5c:fb:
d8:a0:4f:33:fb:b0:48:c4:d6:f6:09:81:2d:2a:ef:
ca:83:1e:ee:3f:02:fd:f9:28:ba:70:da:06:e9:0e:
18:b6:97:76:05:07:92:3b:64:98:ee:66:2c:1b:51:
45:97:97:7a:92:6b:44:86:c7:02:b2:7e:4d:89:e8:
de:ed:6d:4d:ce:61:da:75:77:af:bf:ae:5c:6a:f0:
94:af:b4:f9:dc:39:b0:8f:22:5a:ff:e1:73:94:9b:
8f:02:84:f8:63:8a:29:7d:27:52:8d:5f:62:d7:9f:
ec:b1:cc:eb:2b:e2:1d:6b:fd:34:24:e3:e7:46:0a:
48:dd:37:4b:41:1f:2d:5a:cf:e4:39:6a:78:bf:39:
2a:71:23:49:16:ed:2f:ae:b9:02:57:ce:60:e4:4e:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:78:38:DB:D5:71:11:6D:29:2D:D3:F9:8E:A6:E9:ED:B1:7A:0C
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ef:79:4a:3d:22:ca:a8:39:0f:98:fd:8e:7a:94:12:98:db:
02:1d:97:21:f1:3d:fc:fd:2f:1c:b3:28:50:4c:bc:19:52:5c:
10:d1:06:5a:3a:e8:69:4f:c2:3f:00:a6:6d:7d:af:fa:36:26:
0c:3e:f5:89:14:0e:62:8c:58:8d:38:17:e8:28:1c:78:e8:ba:
a8:49:0b:95:0d:fc:6c:25:df:65:8f:e8:88:ae:de:b9:24:21:
45:19:61:83:53:fe:09:c6:20:4f:b2:9a:3e:71:3d:bc:bb:71:
88:2c:76:77:9a:f0:6e:32:72:2f:d2:71:95:8d:5e:1f:15:5a:
96:21:38:3a:05:bd:e7:a9:26:0e:df:0f:a8:2c:bf:5f:4b:69:
a7:7a:8c:14:e5:23:29:dd:d2:3a:59:91:69:22:b6:3e:40:2c:
8d:6a:21:8b:56:cc:1f:0a:46:5c:a5:2f:12:79:53:ab:d6:a3:
6e:f6:b7:85:40:7e:7f:c4:48:b0:40:74:cb:e0:38:82:67:c0:
bd:f0:2c:2c:2c:ed:78:89:8e:a7:1b:42:06:0d:8e:18:35:6f:
7d:5d:a7:d2:c1:da:a3:d9:55:78:52:80:8c:3d:72:8f:a6:27:
47:b8:c9:e9:fd:08:4a:ef:d7:7a:96:e4:cd:e2:46:88:10:c5:
a3:91:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 03:35:37 2024 by rpki-client on console-ams.rpki-client.org