Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /BEkqJq75iUeb/2cMcOmQW+iRsIL+KtXlGkDnvsLt3U=
Subject key identifier: AC:68:C6:02:A5:20:1B:6A:0F:01:00:DD:FB:81:F1:78:84:7F:32:AC
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 19379E03AE446565825774F01BC49AA2FAAFD58C
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Oct 2024 19:45:48 +0000
ROA not before: Thu 17 Oct 2024 19:40:48 +0000
ROA not after: Thu 16 Oct 2025 19:45:48 +0000
asID: 834
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 00:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:37:9e:03:ae:44:65:65:82:57:74:f0:1b:c4:9a:a2:fa:af:d5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Oct 17 19:40:48 2024 GMT
Not After : Oct 16 19:45:48 2025 GMT
Subject: CN=AC68C602A5201B6A0F0100DDFB81F178847F32AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:ac:32:c6:0e:b3:95:d9:b8:21:7e:f3:a7:
3d:87:30:b7:ab:97:2f:3e:c9:e5:f2:a5:0e:ba:51:
fa:52:9b:b4:5e:f2:6e:a7:55:e3:9d:c8:38:0a:17:
6a:ea:34:76:1e:fd:94:4f:1f:de:57:39:9a:21:41:
9b:28:2b:f1:6b:c7:b5:81:10:28:22:02:48:33:b6:
7e:35:03:d3:22:94:13:39:d3:09:29:21:79:71:23:
f0:59:d9:d7:d3:b0:3f:40:9f:7f:4d:94:f6:3d:15:
82:f7:2a:6e:58:d1:44:67:7d:2b:50:5f:e9:76:93:
a3:39:16:74:ec:60:04:d9:33:21:e5:05:05:81:63:
5d:85:9a:6b:63:90:cb:e1:8f:d7:f6:31:86:72:8b:
a6:05:03:ca:67:93:19:34:5e:03:f8:a8:f2:76:f6:
98:be:de:a6:e6:ac:82:dc:3b:3e:e8:a9:d1:a0:b4:
0f:bd:c4:fd:fc:b4:33:b1:70:c9:ac:07:ea:94:bb:
fa:6e:4c:00:85:44:ad:f8:57:82:d7:59:4b:8a:d6:
9e:6c:20:af:31:7f:e6:47:c2:5a:eb:24:7d:77:48:
ee:19:cb:ba:c1:d0:86:a6:36:32:72:a9:e1:cd:0e:
f4:c3:dc:0b:bb:6a:71:55:72:54:23:7f:e0:56:aa:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:C6:02:A5:20:1B:6A:0F:01:00:DD:FB:81:F1:78:84:7F:32:AC
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
66:06:ac:32:4a:7f:bc:ec:22:57:3e:d1:ca:e6:08:39:bf:b1:
b8:ce:88:81:bb:19:77:63:c2:5f:cd:a9:8e:73:15:8e:38:48:
45:61:a1:14:71:f2:96:24:eb:09:c0:27:bf:b3:fb:e8:5a:d3:
4c:7f:64:06:84:74:11:ab:39:11:bd:82:03:2f:7c:44:52:61:
33:d0:88:06:80:96:6f:b3:4b:ff:26:5d:e7:20:14:93:3e:8e:
81:4c:7d:7d:9c:bd:e9:8f:38:4a:1f:5b:c6:f3:bf:d2:b1:1a:
60:4c:5d:c3:60:ec:b2:b7:94:19:1a:9e:06:4f:45:d3:bc:f3:
42:a9:d5:26:fb:18:ef:16:9f:fb:35:df:b9:50:8d:a5:f2:fc:
9b:18:e6:47:b8:b4:42:e0:e8:0b:fc:40:84:98:a0:a4:42:5c:
a8:9f:fa:fd:67:32:60:88:27:62:f3:b7:55:0e:81:0b:cf:1c:
e6:5f:a1:4a:39:7f:78:4b:68:1e:3b:46:75:ff:0c:a4:d2:2f:
b5:7f:25:a1:39:88:2f:3f:83:68:88:8f:3c:9e:28:e2:00:07:
8a:93:ec:f0:09:3f:7a:df:2c:a4:fa:47:c5:4b:90:a0:e7:48:
d0:81:a7:92:99:60:8c:b5:a0:5b:f1:06:1f:c2:8b:fd:2c:4d:
bc:0d:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:30 2025 by rpki-client