Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e2039383438.roa
File: 37372e38312e3133382e302f32342d3234203d3e2039383438.roa (raw, json)
Hash identifier: 5WjJzsQuQXS1MQxDSL7LrVqGpjW2+eDC0+zreudNouM=
Subject key identifier: E4:E6:7D:74:58:87:CF:7C:88:B0:FF:DF:A4:6E:E0:ED:2C:57:8A:58
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4A30AD0D8BB1E0650232F60F6E85AD291228FB8E
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e2039383438.roa
Signing time: Sat 04 Nov 2023 03:23:43 +0000
ROA not before: Sat 04 Nov 2023 03:18:43 +0000
ROA not after: Sat 02 Nov 2024 03:23:43 +0000
asID: 9848
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 08:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:30:ad:0d:8b:b1:e0:65:02:32:f6:0f:6e:85:ad:29:12:28:fb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Nov 4 03:18:43 2023 GMT
Not After : Nov 2 03:23:43 2024 GMT
Subject: CN=E4E67D745887CF7C88B0FFDFA46EE0ED2C578A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:9f:8a:2b:d4:95:25:dc:3e:c9:07:9c:a3:
00:9d:8d:5b:2a:0a:25:f9:8f:91:66:13:59:8b:b6:
c3:53:03:b7:dd:d3:95:4c:85:37:6a:ef:d3:6c:52:
24:8c:c5:ab:fe:f6:bd:d1:68:d6:2a:5b:cf:fe:00:
9a:a1:bc:a5:05:8f:50:04:04:93:eb:a9:00:4b:ba:
17:63:c9:b1:0d:99:6e:67:e4:06:51:a3:94:31:36:
6c:50:cd:a8:69:d2:ff:ec:0f:77:16:ab:12:1d:ed:
99:bc:96:b2:0e:57:89:3e:77:5e:79:ab:8a:9e:dd:
1c:49:05:13:2f:50:bb:e7:6b:bd:23:fd:86:16:27:
6f:e8:a2:4f:e8:36:d8:fd:24:0b:5f:e0:08:2d:9a:
83:46:b9:1e:c7:e3:3d:55:17:ea:c3:de:2d:b9:35:
40:1d:5c:99:66:69:bf:44:03:ee:98:1a:0b:56:be:
c3:2b:97:d7:0e:13:22:d2:a1:c9:fe:db:61:c8:51:
74:58:9f:fa:81:d8:6e:8a:76:06:c6:05:d9:36:be:
74:ad:3a:09:7e:f4:88:db:16:87:b5:64:b1:7f:33:
0c:3d:91:2a:9c:47:ee:df:7f:0b:87:ae:6c:b1:da:
71:8a:cb:76:cc:ae:25:80:46:73:59:03:5d:f8:38:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:7D:74:58:87:CF:7C:88:B0:FF:DF:A4:6E:E0:ED:2C:57:8A:58
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e2039383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e3:ad:c2:96:33:4d:07:4a:ed:51:3d:0d:d1:14:61:be:da:
6b:98:3a:d8:a1:dc:f4:fb:60:82:f7:e1:19:ff:75:83:ba:1b:
28:3b:5b:e2:0a:b4:d3:2b:6b:57:70:c8:21:49:e1:a9:cd:5e:
72:e1:5a:ad:0e:50:ee:0d:bc:dd:4a:36:9b:4f:f9:99:b3:5e:
9f:42:35:64:ee:d3:27:6c:9e:01:14:d5:0a:16:40:79:43:9f:
b2:d0:6f:4a:d0:3e:17:d6:83:1a:2f:2e:ae:3f:b3:dc:cd:7d:
b6:ee:bd:90:df:63:52:64:f4:f0:16:64:bb:d4:aa:03:55:4e:
8a:2b:0e:3c:ec:9a:0f:e3:fa:20:d7:5b:81:14:09:34:7a:f8:
5d:a3:7f:2e:04:de:2c:a5:10:e8:54:72:6a:0a:da:20:9b:c4:
45:db:2d:37:f7:17:db:b4:7d:d4:81:07:82:ac:5c:6d:db:f2:
fd:52:84:8e:c2:2e:70:da:c0:da:90:20:07:82:b8:a6:2c:7f:
2e:c2:e5:51:59:7a:a5:3a:2f:c1:37:70:4b:31:0b:b1:97:56:
67:f5:55:57:70:5f:3b:9a:f2:3d:f0:df:f4:87:8c:f3:f5:38:
e6:93:ea:47:a8:e5:b6:90:17:78:64:7c:f4:e0:6a:cb:90:5c:
b0:0c:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org