Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3234203d3e20383334.roa
File: 34352e3134362e3136302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: +ZPCv+3m9ySkKjPSOkHCnt1gT+2RRrPOTmYj0T3OQ8U=
Subject key identifier: 0F:8F:F0:A4:06:2D:29:08:6B:2F:F6:D2:72:94:5D:20:A4:35:19:91
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 6DF4D69A7DBF34D93A9A31D39E16EBF377AA2D1E
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3234203d3e20383334.roa
Signing time: Tue 26 Nov 2024 00:00:55 +0000
ROA not before: Mon 25 Nov 2024 23:55:55 +0000
ROA not after: Tue 25 Nov 2025 00:00:55 +0000
asID: 834
IP address blocks: 45.146.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 12:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f4:d6:9a:7d:bf:34:d9:3a:9a:31:d3:9e:16:eb:f3:77:aa:2d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Nov 25 23:55:55 2024 GMT
Not After : Nov 25 00:00:55 2025 GMT
Subject: CN=0F8FF0A4062D29086B2FF6D272945D20A4351991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:54:3e:df:e4:5c:b7:6f:9f:bc:06:3f:e7:
c4:ad:fd:13:5a:87:2d:42:10:59:29:a2:07:32:0a:
87:de:4c:a4:9e:e8:29:a9:97:7b:cb:e0:32:8a:50:
7d:62:a9:5e:7a:4f:ab:1f:fb:e5:fb:f5:dc:54:51:
ed:f9:94:ca:4b:4f:32:34:66:4d:7c:c3:50:e7:e9:
70:77:e8:82:cd:e4:4d:2b:bd:e2:bb:9b:a3:ec:ae:
65:f0:ec:e6:cb:73:76:3f:4a:35:7c:21:a1:ae:58:
48:c5:1c:b2:53:80:e9:7d:11:27:5f:12:33:68:72:
aa:46:03:f6:5e:2f:5e:25:35:d7:f1:79:4e:74:b7:
85:a1:ed:8b:0d:46:94:0d:41:c0:1f:0b:69:fd:df:
d0:e0:87:65:a8:68:0f:ea:7a:a7:e7:f5:2b:4a:13:
6b:41:6a:bb:79:12:f2:3b:82:4e:33:c6:21:14:ee:
72:8e:e4:b5:3f:00:4d:31:2c:ef:6e:43:ce:c1:f7:
8f:fc:8f:27:b1:b4:19:3c:b8:db:c9:45:08:5b:1c:
79:64:72:af:5e:c1:d2:ee:c9:a0:b5:c0:87:22:84:
38:d8:72:34:7e:2e:ad:94:84:f9:46:db:2a:e8:b4:
a8:54:01:d6:a3:07:01:5b:a5:80:2f:18:e7:d4:11:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:F0:A4:06:2D:29:08:6B:2F:F6:D2:72:94:5D:20:A4:35:19:91
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:fe:e5:e9:db:da:d9:1d:3a:e8:29:1f:3a:12:24:70:a6:fe:
a2:de:e5:0a:11:f8:4f:53:8b:1a:59:98:17:5f:d8:e4:59:2f:
ed:9b:7f:2f:98:33:ef:47:d3:76:b1:ff:d6:e1:dd:e9:91:45:
ea:71:f8:b6:cb:e7:e3:78:f1:94:10:7f:e7:fd:5f:2f:84:bf:
aa:08:b7:57:51:cd:f1:eb:53:d2:ef:fc:f9:50:e4:db:89:d0:
fe:dc:0c:fc:0c:1d:39:41:22:55:8c:c5:1a:c4:b4:32:1b:05:
72:40:af:b5:c5:25:08:e4:f2:b7:ca:49:92:17:71:11:0a:10:
43:0c:5c:29:06:ac:50:93:30:fe:79:42:10:12:f3:2a:12:78:
96:f5:8b:c4:aa:cd:5e:db:20:2a:d9:3f:0f:bc:0b:9a:9b:3b:
aa:1d:65:0d:7b:b2:92:55:85:43:a8:53:6d:be:ee:bf:ce:86:
e4:b7:7e:f0:d9:ec:c5:14:44:5c:b5:8b:42:a0:01:77:3b:cc:
45:bf:20:4b:c9:98:da:25:0b:5b:f3:cf:d6:bb:d3:f8:90:de:
72:64:8d:51:60:59:36:6c:d5:d8:74:95:2f:06:98:6c:41:a1:
29:02:73:9b:fc:33:3e:3a:be:7f:dc:a8:bc:2c:02:0d:8a:6b:
02:7f:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:52 2025 by rpki-client