Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313734.roa
File: 34352e39352e3231322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: GiB+zVnnpQ1OD0BjFLEGoj9GzTrOPTeor+bC5bh+KkU=
Subject key identifier: 41:09:98:0C:FD:EF:65:8B:A0:FA:CD:D7:34:36:D2:49:06:03:F2:CE
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 44F4723CC1CAECB532F5B1400707F065C8A82CA7
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313734.roa
Signing time: Sun 11 Jun 2023 21:29:44 +0000
ROA not before: Sun 11 Jun 2023 21:24:44 +0000
ROA not after: Sun 09 Jun 2024 21:29:44 +0000
asID: 174
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f4:72:3c:c1:ca:ec:b5:32:f5:b1:40:07:07:f0:65:c8:a8:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 11 21:24:44 2023 GMT
Not After : Jun 9 21:29:44 2024 GMT
Subject: CN=4109980CFDEF658BA0FACDD73436D2490603F2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:52:63:3f:d4:81:f5:e0:7f:b4:63:a6:50:
90:e6:e7:b0:36:3f:d5:c0:a3:cf:a8:71:05:c2:f3:
52:9e:c8:f4:91:0a:10:4a:ed:05:f6:de:86:26:e2:
5d:6e:ba:d9:5f:e0:3f:db:36:1e:db:f6:fe:b9:92:
7a:e9:ab:04:31:22:33:00:5e:71:f6:e1:cc:31:f0:
50:67:eb:14:98:00:74:7a:af:ed:e4:6a:15:91:9c:
21:f4:a1:d7:d4:1a:30:a0:e9:63:6a:3c:db:92:71:
f8:c0:48:93:bd:dd:80:05:af:42:3e:1e:59:0a:95:
9a:93:3e:a9:b0:d9:15:52:ce:92:87:06:8e:de:ae:
f8:c4:a9:82:58:ea:09:f1:3f:ab:c6:42:c8:6d:85:
dc:83:20:46:45:a8:ec:1b:e2:89:15:2b:97:6d:c3:
fd:06:2c:a1:31:ce:70:ee:35:47:71:6c:db:00:4c:
bd:f4:53:ca:b7:8d:6e:7e:4c:23:d7:c5:9f:8a:b6:
1e:82:09:26:28:33:5c:f3:03:6e:da:bf:a9:86:61:
d3:47:65:e7:a4:43:c7:4e:26:08:ad:c9:9d:c6:9c:
25:81:30:ab:aa:5e:65:a1:c7:10:ee:ae:04:55:15:
da:c8:92:05:c2:34:ed:2a:0b:f8:85:1b:c7:7b:1b:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:98:0C:FD:EF:65:8B:A0:FA:CD:D7:34:36:D2:49:06:03:F2:CE
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
60:df:3f:a7:1c:59:68:f3:c9:d4:ef:e1:56:28:dc:0e:17:f1:
15:04:2b:f8:6c:63:04:32:e6:62:81:1e:fa:3e:fc:06:d4:9b:
26:fb:f9:fa:a2:88:f2:4a:87:20:82:9a:24:13:90:a9:c0:15:
b4:d0:21:49:e2:13:dc:7a:5a:3c:25:77:5e:6f:89:e1:e7:3f:
f1:25:ed:e0:e0:1d:ae:d9:0d:a6:e2:92:16:a3:c8:61:7b:53:
6f:44:30:93:a4:db:94:49:d3:52:9c:49:17:ac:2d:fb:77:74:
71:b6:ab:76:27:c5:57:ed:21:fb:23:ba:8f:b1:e3:00:73:5f:
10:07:46:73:e0:0a:b1:63:72:63:17:82:0f:cc:1a:e6:29:1a:
5f:5a:17:67:8b:52:ad:e0:73:90:d6:6a:cd:eb:2e:29:9c:96:
2b:92:f7:08:06:62:c7:84:5d:c8:7e:65:bc:2f:d2:e3:a3:41:
98:bd:ea:f7:79:e6:9e:31:c1:9d:aa:b9:af:7e:20:f3:50:f1:
01:3c:79:95:ce:9a:b7:ea:11:48:da:a6:75:15:c0:b4:d4:63:
05:cc:bb:84:78:4e:19:61:9f:48:81:31:7d:d7:c3:78:40:a2:
a3:0a:55:f1:a3:e2:3e:20:4c:e9:1d:61:2e:51:c6:8e:65:4e:
4c:8f:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org