Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20323135383137.roa
File: 34352e3134362e3136302e302f32342d3234203d3e20323135383137.roa (raw, json)
Hash identifier: ob8XZEqFNbUboRO0eIktawgdKQgDNILjVV0XfvUH48I=
Subject key identifier: 8D:1F:27:0A:39:F0:58:16:12:DC:46:A8:47:7B:39:5C:2B:B5:65:6D
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 1DDB51BD2E233AEBE1F9B115E07BCC9EBFCBD439
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20323135383137.roa
Signing time: Tue 25 Jun 2024 06:33:30 +0000
ROA not before: Tue 25 Jun 2024 06:28:30 +0000
ROA not after: Tue 24 Jun 2025 06:33:30 +0000
asID: 215817
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:db:51:bd:2e:23:3a:eb:e1:f9:b1:15:e0:7b:cc:9e:bf:cb:d4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jun 25 06:28:30 2024 GMT
Not After : Jun 24 06:33:30 2025 GMT
Subject: CN=8D1F270A39F0581612DC46A8477B395C2BB5656D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:fa:78:04:00:fa:d4:c6:69:ec:33:b3:63:
54:62:bb:ea:01:e7:5b:81:d6:ba:f6:68:6a:d2:ce:
d4:03:1c:31:9f:ca:65:83:a9:22:2e:e9:3e:6d:cc:
7a:0b:74:d6:92:52:33:bb:89:9a:07:b1:79:fc:e5:
51:e2:27:91:64:39:70:ac:05:06:33:7d:76:14:46:
79:a9:00:78:b4:a5:7e:96:e8:60:26:82:5f:61:01:
5e:4b:f5:45:14:0c:57:a3:8b:58:89:36:6c:aa:28:
f4:37:92:f3:d3:ab:63:61:0c:c1:ce:4f:12:79:a3:
b1:ca:cf:37:ab:61:93:f0:66:df:dc:3b:ba:ab:ca:
90:3c:b8:b8:c3:7f:be:07:85:27:c4:30:1c:4d:79:
97:d1:42:73:eb:48:79:74:8b:a8:c5:b1:7d:92:48:
98:0c:d0:30:07:6d:2f:e5:56:06:0a:76:d9:59:14:
a8:3d:67:6a:3a:49:a3:1a:bc:36:f5:9a:4c:63:1b:
ea:7e:45:1d:97:8e:55:b3:25:cc:4b:4f:e4:8a:06:
c8:c6:9d:9f:64:aa:db:06:8b:34:f3:99:6f:95:44:
f1:29:c9:36:31:b5:7f:2c:ab:b7:63:0d:42:91:88:
bc:50:cc:2c:75:2e:8b:a2:41:10:65:36:55:be:fc:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:27:0A:39:F0:58:16:12:DC:46:A8:47:7B:39:5C:2B:B5:65:6D
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20323135383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cf:9b:48:cd:eb:11:d1:93:e9:09:88:e9:e8:34:b5:04:98:
5e:48:76:15:3c:40:a8:8f:49:06:2c:b2:f5:10:25:4c:12:54:
87:bb:28:bb:c5:62:41:21:5c:02:36:62:9b:99:7a:30:db:bc:
2c:34:af:f1:96:91:40:be:27:13:3f:97:d0:0a:2f:b6:e9:e4:
a1:60:01:78:48:41:5e:bc:f1:c1:ac:b8:54:64:2d:5b:d0:ed:
b8:df:1d:d3:73:f4:37:42:70:e4:29:27:e4:c0:62:a8:99:96:
3c:5c:d9:bc:64:e3:41:80:5c:2f:2e:1e:e3:cb:7f:fb:0d:80:
d0:08:d5:a0:ba:ee:9f:7f:67:12:ee:75:ec:57:8c:e6:9a:69:
c4:3c:cd:2a:0c:e0:1c:8c:31:4a:f2:fe:de:27:b1:5f:fc:f1:
1c:76:61:b7:3c:48:e5:37:95:6e:09:d3:22:04:5d:a3:f9:c4:
52:e7:32:cb:66:d5:58:bf:6e:ab:6e:af:85:04:de:bc:f0:83:
5c:16:84:cd:6f:b5:13:11:5d:95:fe:6c:c0:af:22:ae:37:b1:
9b:97:3e:53:3f:82:87:01:e4:bc:3b:7d:34:f0:c0:3f:d5:f9:
34:34:95:f8:45:26:b2:6e:c4:a9:27:69:0f:e4:8d:18:bb:9c:
2c:69:c4:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHdtRvS4jOuvh+bEV4HvMnr/L1DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm
MjYwNzNjMzAeFw0yNDA2MjUwNjI4MzBaFw0yNTA2MjQwNjMzMzBaMDMxMTAvBgNV
BAMTKDhEMUYyNzBBMzlGMDU4MTYxMkRDNDZBODQ3N0IzOTVDMkJCNTY1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDci/p4BAD61MZp7DOzY1Riu+oB
51uB1rr2aGrSztQDHDGfymWDqSIu6T5tzHoLdNaSUjO7iZoHsXn85VHiJ5FkOXCs
BQYzfXYURnmpAHi0pX6W6GAmgl9hAV5L9UUUDFeji1iJNmyqKPQ3kvPTq2NhDMHO
TxJ5o7HKzzerYZPwZt/cO7qrypA8uLjDf74HhSfEMBxNeZfRQnPrSHl0i6jFsX2S
SJgM0DAHbS/lVgYKdtlZFKg9Z2o6SaMavDb1mkxjG+p+RR2XjlWzJcxLT+SKBsjG
nZ9kqtsGizTzmW+VRPEpyTYxtX8sq7djDUKRiLxQzCx1LouiQRBlNlW+/HjvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUjR8nCjnwWBYS3EaoR3s5XCu1ZW0wHwYDVR0j
BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz
NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K
Z2M4TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et
MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzODMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtkqAwDQYJKoZIhvcNAQELBQADggEBAF7Pm0jN6xHRk+kJiOnoNLUEmF5IdhU8
QKiPSQYssvUQJUwSVIe7KLvFYkEhXAI2YpuZejDbvCw0r/GWkUC+JxM/l9AKL7bp
5KFgAXhIQV688cGsuFRkLVvQ7bjfHdNz9DdCcOQpJ+TAYqiZljxc2bxk40GAXC8u
HuPLf/sNgNAI1aC67p9/ZxLudexXjOaaacQ8zSoM4ByMMUry/t4nsV/88Rx2Ybc8
SOU3lW4J0yIEXaP5xFLnMstm1Vi/bqtur4UE3rzwg1wWhM1vtRMRXZX+bMCvIq43
sZuXPlM/gocB5Lw7fTTwwD/V+TQ0lfhFJrJuxKknaQ/kjRi7nCxpxAg=
-----END CERTIFICATE-----
Generated at Mon Aug 19 02:19:45 2024 by rpki-client on console-fra.rpki-client.org