Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e203134363138.roa
File: 34352e382e3231372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: 0Rx4/e5WLnmwVQi86Gqj70rERs0EGZEpOD0aCBs6yUA=
Subject key identifier: B0:2B:6E:A3:D2:B3:03:24:03:81:F2:6A:EF:55:20:D0:08:84:D0:06
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4CA746E76009E2812FE5EE05FBDC2EDDB484AF64
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e203134363138.roa
Signing time: Thu 18 Jul 2024 21:12:08 +0000
ROA not before: Thu 18 Jul 2024 21:07:08 +0000
ROA not after: Thu 17 Jul 2025 21:12:08 +0000
asID: 14618
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a7:46:e7:60:09:e2:81:2f:e5:ee:05:fb:dc:2e:dd:b4:84:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 18 21:07:08 2024 GMT
Not After : Jul 17 21:12:08 2025 GMT
Subject: CN=B02B6EA3D2B303240381F26AEF5520D00884D006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:d1:e0:54:e8:0a:af:b9:68:ad:09:1d:93:
41:c4:06:aa:5a:74:21:c6:53:bc:c6:b6:1c:49:9e:
61:81:7c:1f:d7:d1:4b:be:ac:c2:67:71:3d:ae:a1:
37:bc:a3:e7:4e:25:e1:0f:c2:48:c1:76:19:86:74:
ef:cf:bf:2b:8c:4b:f2:14:5f:97:58:e5:e9:e6:b2:
1e:18:3f:a2:33:03:28:9d:b3:e2:51:72:04:22:12:
6c:21:f7:4b:c4:cd:b2:3a:84:cf:ba:7b:e6:ea:40:
ef:e5:5d:56:d8:dc:49:c4:b0:27:e6:aa:0d:27:25:
4c:d5:0e:fa:2b:7c:d6:c5:e8:de:a9:ce:4c:d3:77:
ad:7d:f1:de:94:4b:e2:2c:21:3e:8b:e7:ad:49:c0:
aa:ee:b4:6b:bd:e3:e1:e5:48:d4:dc:87:cb:a2:58:
1f:ab:a4:87:0f:e4:df:56:e1:6b:9d:a7:38:06:1d:
fa:c3:76:9c:84:d4:e5:8f:87:b5:8e:33:cd:2d:56:
a2:f8:30:24:32:fe:c8:e1:b5:45:9d:5d:c3:c6:55:
55:3d:38:cd:b9:49:e2:b3:01:5f:ee:3e:07:d5:da:
16:f8:34:a7:44:d5:52:b1:4e:fc:f5:a4:35:b5:87:
55:30:92:78:9e:f6:bc:a0:5d:2d:de:50:fc:18:57:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:6E:A3:D2:B3:03:24:03:81:F2:6A:EF:55:20:D0:08:84:D0:06
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:94:a3:fb:05:24:91:3e:b0:dd:c3:d7:27:1d:6d:c3:76:ac:
da:09:28:2e:39:b9:55:01:ba:77:4a:7d:3a:4a:fc:e5:ee:3d:
b9:aa:9e:2f:6e:3a:c4:05:06:ea:16:6d:32:4a:2b:fc:65:bb:
6e:96:ef:77:e5:eb:c9:28:42:e5:f8:6e:37:2a:5f:93:75:f6:
7c:0a:12:76:ba:65:ff:f9:51:ea:b0:1b:6a:4b:94:d3:66:a9:
45:d7:7f:b3:14:6d:f1:c8:90:b1:e5:41:9e:38:34:4f:5b:83:
d9:64:2f:8a:3e:e6:44:ce:a1:24:dd:26:19:2e:d7:3e:43:57:
38:17:15:c4:e4:d8:03:f3:34:51:f8:88:56:10:a7:9f:55:6e:
ab:3b:de:60:af:3b:7c:4e:35:42:5d:cb:63:7a:a6:bc:26:33:
30:13:68:f9:36:7f:e1:eb:a4:6a:eb:58:be:2f:14:65:7e:fe:
e5:b9:63:0b:ce:58:76:6b:a9:3c:a2:8d:00:1e:ed:8e:01:06:
63:61:f9:4b:c9:03:61:13:a2:69:17:b7:d8:a0:fc:02:b4:8a:
94:7f:4e:90:8f:ef:50:69:97:47:af:00:39:9c:75:bc:c6:5a:
54:07:1f:11:81:de:15:fb:b8:e6:70:76:90:83:01:4d:a4:66:
05:93:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 02:49:54 2024 by rpki-client on console-ams.rpki-client.org