Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313937383432.roa
File: 34352e39352e3231322e302f32342d3234203d3e20313937383432.roa (raw, json)
Hash identifier: i/RlJfo5DUYDX+QaScrtR4DkwJXElurY15F3XN+5GXY=
Subject key identifier: 2C:A9:F9:77:A6:9F:6A:FE:2C:77:68:D1:3E:CF:01:74:F8:77:2C:D1
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 534542219293A60C38E8995043357A7A48EB8BE0
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313937383432.roa
Signing time: Tue 15 Aug 2023 10:06:26 +0000
ROA not before: Tue 15 Aug 2023 10:01:26 +0000
ROA not after: Tue 13 Aug 2024 10:06:26 +0000
asID: 197842
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:45:42:21:92:93:a6:0c:38:e8:99:50:43:35:7a:7a:48:eb:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 15 10:01:26 2023 GMT
Not After : Aug 13 10:06:26 2024 GMT
Subject: CN=2CA9F977A69F6AFE2C7768D13ECF0174F8772CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:89:34:cd:65:db:79:6d:9a:20:cf:b2:f5:
9f:9c:57:e0:e2:37:b8:91:cc:6c:09:58:ba:47:7b:
d5:5d:e1:f5:62:16:e2:49:3c:58:8f:60:24:ef:da:
b6:87:8b:83:93:49:58:d1:20:9e:be:59:52:ee:13:
38:3b:4e:d5:cc:23:a4:5f:3f:37:47:29:47:2d:1f:
a0:cf:bd:1a:ec:99:bd:24:fa:2f:31:c8:73:68:e1:
8a:7a:cf:62:aa:1d:20:78:94:d0:cf:0b:79:81:95:
59:91:63:21:ba:8a:f1:b8:3a:c3:e2:b0:0a:9c:b6:
8b:ed:90:79:cc:f8:61:dd:d4:dc:a2:46:21:2a:6c:
a4:81:cb:c6:7a:bb:2a:e3:2a:3e:c5:4c:a2:b4:65:
51:a3:ad:93:a4:43:15:3a:bb:9c:ce:50:f7:8c:f1:
2b:7d:86:79:18:c3:57:3c:02:61:41:c1:e3:41:26:
a0:1e:82:21:db:12:22:4a:0d:52:ee:fa:49:d9:d5:
ac:79:6b:c6:94:b7:d8:7a:1c:6d:7d:ec:b8:ee:2a:
b6:a5:aa:1f:25:30:e4:a7:1b:6e:a9:e4:4e:75:70:
52:0b:91:59:a8:cf:44:42:ff:92:08:54:27:a3:f8:
04:b6:95:00:f3:c0:48:89:ae:9b:2e:0e:22:6e:f6:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:F9:77:A6:9F:6A:FE:2C:77:68:D1:3E:CF:01:74:F8:77:2C:D1
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20313937383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7a:b4:5d:ed:84:b7:0c:64:7c:9f:47:d6:89:ca:e1:45:49:
0d:b0:bf:48:8b:c2:8a:27:cc:fb:ac:32:11:ce:c8:3a:f4:59:
12:f4:ca:c6:9b:11:bf:13:b5:40:23:d7:ba:04:e6:71:98:35:
97:20:46:f0:8b:c6:50:9a:a8:a7:d1:5d:1d:10:3f:8c:1f:4c:
d9:39:65:87:69:83:7c:e0:87:8f:89:21:cf:c1:3f:22:eb:a5:
cb:01:16:29:76:96:6e:2d:17:60:14:9e:31:f6:cb:2f:75:e7:
35:01:7d:5b:0f:4c:93:94:cc:15:be:e4:5f:bd:4f:45:6e:ef:
00:74:5b:e5:df:62:ce:17:c0:ed:5f:d7:09:24:a3:6b:68:82:
a9:3c:15:e6:23:c7:8d:51:ce:90:92:23:b0:42:d8:0a:6c:3e:
f4:38:29:0e:89:f7:33:15:7e:85:77:b4:24:98:d7:25:dc:e9:
cc:a5:70:69:25:6c:2a:14:56:5c:89:39:1a:75:20:49:b2:b3:
d6:67:47:57:53:24:cf:8d:d7:42:92:f2:a8:1e:ae:5b:50:f1:
ba:b7:96:8b:a7:c5:ae:f4:47:f8:f4:e4:df:94:f1:cc:71:19:
48:cd:02:a0:2b:5d:89:03:31:22:61:3a:d0:ed:3e:43:f8:a6:
45:47:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org