Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20313432313436.roa
File: 34352e3134362e3136302e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: y2HlUQE13fAw9FnErgcugrsA09WH5wbCrO5r9daUuGk=
Subject key identifier: 53:C5:BF:AB:63:FE:1F:06:C4:67:F7:28:E1:3A:2A:81:6A:4A:0A:D1
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 50B4D48193442E4CEC841090B43004243392FA84
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20313432313436.roa
Signing time: Wed 19 Jun 2024 10:52:05 +0000
ROA not before: Wed 19 Jun 2024 10:47:05 +0000
ROA not after: Wed 18 Jun 2025 10:52:05 +0000
asID: 142146
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b4:d4:81:93:44:2e:4c:ec:84:10:90:b4:30:04:24:33:92:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jun 19 10:47:05 2024 GMT
Not After : Jun 18 10:52:05 2025 GMT
Subject: CN=53C5BFAB63FE1F06C467F728E13A2A816A4A0AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:44:ee:5f:24:09:57:65:8c:ae:ba:f8:d5:
3f:60:90:b3:42:8f:b6:41:97:f9:24:3f:9f:f3:1b:
bf:e2:33:64:78:30:f0:7a:c3:a3:43:9c:07:b3:f8:
ee:f6:b7:30:25:4e:a7:21:8e:32:4b:83:c0:7c:fa:
98:71:65:15:3f:bd:00:c1:46:7a:d8:13:14:4e:91:
69:2f:0d:b3:23:c9:fd:6a:7a:35:95:37:1e:11:17:
83:d0:1c:2c:b6:c6:93:66:32:fd:56:81:6c:0a:9e:
6e:cc:43:5c:3f:15:82:83:49:53:69:c2:53:a3:ee:
ef:05:e4:1b:2e:39:31:d7:d8:3d:00:ed:f0:28:29:
eb:11:39:9d:84:5f:30:e8:60:cc:a8:2d:d6:6d:87:
48:d5:60:3b:60:ce:39:57:21:85:d4:28:56:7b:cf:
45:08:4c:48:8c:3b:65:84:fc:39:47:f0:79:72:13:
2b:2c:88:26:09:91:46:98:b8:a5:88:51:c1:b5:66:
68:61:35:68:95:fc:47:77:f3:9e:cf:0a:bb:4f:13:
ad:f6:81:20:a4:95:9c:b8:0a:cd:f5:b5:6c:f9:cf:
d8:f0:ac:aa:5e:cb:90:66:c8:10:f7:9b:c4:65:1b:
e3:ca:f0:80:d8:5c:30:b0:20:91:0a:f1:2f:49:c5:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:BF:AB:63:FE:1F:06:C4:67:F7:28:E1:3A:2A:81:6A:4A:0A:D1
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
86:58:7b:40:2d:2e:5a:0f:1f:ad:d3:f9:c5:ad:a4:9f:48:20:
e0:98:a6:38:02:89:63:83:34:44:06:eb:c7:5d:3b:d3:09:a3:
12:ac:b1:0e:6b:5a:ad:36:4e:d8:1f:6e:8d:ad:e3:90:0a:7e:
6c:40:81:26:a7:a5:ee:91:73:d3:e2:b6:b4:ea:b0:56:8e:bf:
da:44:72:b9:d4:bd:93:07:8f:97:56:f3:e0:6d:c8:51:2d:e8:
6b:fb:5f:70:ed:c7:71:f8:c4:02:1c:18:fa:78:b4:1c:bf:c4:
27:65:da:57:ca:d6:9a:40:66:63:3d:6f:7b:75:63:39:29:bf:
fb:04:28:8c:d8:cb:15:31:96:d6:cd:f6:6e:6a:9c:a6:e9:29:
42:a4:f0:c7:ef:e7:ff:f1:06:f1:6d:27:2e:8d:e9:e9:d9:34:
6d:1a:ec:87:c5:34:4c:08:a5:91:67:6f:80:75:ef:a0:04:7c:
fe:8a:21:39:40:7a:94:82:77:43:26:3c:43:e0:ef:41:2c:0e:
d1:1e:66:e2:e6:d7:4d:31:66:24:d0:04:bd:25:7c:68:d7:a4:
0b:2b:eb:b8:ad:a9:ff:00:32:93:05:d1:3b:52:fc:53:61:dd:
1e:f9:2b:25:53:b0:7a:9c:87:67:0b:e2:24:f8:7d:cf:e3:f4:
6c:cc:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:27:08 2024 by rpki-client on console-ams.rpki-client.org