Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32332d3234203d3e203339363030.roa
File: 34352e3134362e3136322e302f32332d3234203d3e203339363030.roa (raw, json)
Hash identifier: a3jwfOYxtw2ns9bYYfcEwijNmuEBHXX8Kr0qUpB9+U8=
Subject key identifier: BD:34:9F:4B:1E:D4:28:30:DD:04:AD:27:B4:99:B7:34:E7:19:D7:AF
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 068C046635D46345BF5E7BF313746A1F56928CA4
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32332d3234203d3e203339363030.roa
Signing time: Wed 11 Oct 2023 06:50:16 +0000
ROA not before: Wed 11 Oct 2023 06:45:16 +0000
ROA not after: Wed 09 Oct 2024 06:50:16 +0000
asID: 39600
IP address blocks: 45.146.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8c:04:66:35:d4:63:45:bf:5e:7b:f3:13:74:6a:1f:56:92:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Oct 11 06:45:16 2023 GMT
Not After : Oct 9 06:50:16 2024 GMT
Subject: CN=BD349F4B1ED42830DD04AD27B499B734E719D7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:8b:16:fe:cb:11:79:a8:23:7e:09:43:54:
d2:82:18:9d:e3:70:a9:77:99:5d:b7:0b:29:c2:19:
1a:42:66:dd:ed:cc:db:de:4b:43:2f:5f:58:39:f9:
3f:af:a7:03:ea:f4:5e:7c:54:50:a4:6e:45:12:89:
0d:73:a3:52:bb:e7:a3:81:99:b6:34:eb:b3:14:18:
3f:ba:83:c4:9b:b5:d8:97:fa:95:62:3d:aa:65:24:
66:11:1b:18:78:da:78:75:f0:75:4d:d3:d3:fe:88:
28:10:ef:08:f2:42:17:59:8c:e0:c9:b5:fd:f3:91:
cb:bf:f0:38:5f:96:73:b0:28:2c:14:ac:95:c3:32:
bf:26:f8:8e:0b:65:9a:6f:17:e3:bb:6e:e4:31:5e:
d9:22:a2:5d:78:a7:af:b4:06:fc:e7:51:79:db:f5:
83:22:3e:ae:61:bd:7f:44:66:89:50:d0:cd:d7:f7:
dc:28:0d:b2:67:41:4a:a3:cc:6f:7c:9e:61:01:24:
4e:53:8f:13:b3:01:14:91:8f:42:d6:db:70:4e:19:
dd:5a:c2:74:64:34:79:ef:2a:5b:b0:bf:6b:61:4c:
cf:0c:ae:5a:b5:6a:83:37:e9:a3:c3:0d:bf:b1:c6:
72:d8:83:8c:12:9e:c2:c1:2f:04:80:66:6d:e9:54:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:9F:4B:1E:D4:28:30:DD:04:AD:27:B4:99:B7:34:E7:19:D7:AF
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32332d3234203d3e203339363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:4e:87:6d:b5:0b:39:04:4d:37:d3:10:b2:7e:7c:7d:49:41:
be:2f:96:db:94:93:53:40:01:90:bb:24:fd:c6:26:89:fc:0a:
36:56:22:2f:95:16:5a:11:a8:f2:29:a4:98:07:ec:51:f9:be:
c8:9e:8f:26:cd:91:94:ba:e6:c7:04:1d:94:5e:09:ce:8c:bb:
29:6b:8c:ff:62:a2:20:a4:ee:ef:58:95:99:f5:cd:0a:0e:e3:
f0:34:5c:c7:a7:47:0c:96:08:e3:f3:a8:02:a8:b4:09:42:d3:
58:1a:8c:bf:3d:bd:b1:c7:3a:07:9c:1c:d5:72:4c:d0:0d:bf:
3a:cc:ad:55:75:b1:d6:ae:dd:8e:90:0a:21:ad:9a:a7:22:be:
af:be:ad:17:a8:6f:a0:1c:b1:2b:70:1a:91:f6:0f:b3:07:1b:
1f:87:0d:fd:d0:9d:4f:8a:75:d9:2f:ec:e6:fd:ff:a0:e4:11:
48:4e:ef:07:0c:4e:c7:81:ce:76:38:ec:2c:00:63:bd:5c:22:
17:5c:0d:b9:9b:89:7b:55:a8:8c:19:bb:aa:6c:a5:b4:ee:61:
ca:5c:47:9c:a9:fd:9e:cd:c8:73:87:d2:33:d3:20:eb:49:b6:
7d:e6:f8:b6:ae:a8:33:99:dd:f4:ac:ca:2b:3f:fa:35:e5:5f:
a4:35:bb:b3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBowEZjXUY0W/XnvzE3RqH1aSjKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm
MjYwNzNjMzAeFw0yMzEwMTEwNjQ1MTZaFw0yNDEwMDkwNjUwMTZaMDMxMTAvBgNV
BAMTKEJEMzQ5RjRCMUVENDI4MzBERDA0QUQyN0I0OTlCNzM0RTcxOUQ3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3IsW/ssReagjfglDVNKCGJ3j
cKl3mV23CynCGRpCZt3tzNveS0MvX1g5+T+vpwPq9F58VFCkbkUSiQ1zo1K756OB
mbY067MUGD+6g8SbtdiX+pViPaplJGYRGxh42nh18HVN09P+iCgQ7wjyQhdZjODJ
tf3zkcu/8DhflnOwKCwUrJXDMr8m+I4LZZpvF+O7buQxXtkiol14p6+0BvznUXnb
9YMiPq5hvX9EZolQ0M3X99woDbJnQUqjzG98nmEBJE5TjxOzARSRj0LW23BOGd1a
wnRkNHnvKluwv2thTM8Mrlq1aoM36aPDDb+xxnLYg4wSnsLBLwSAZm3pVNZ7AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvTSfSx7UKDDdBK0ntJm3NOcZ168wHwYDVR0j
BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz
NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K
Z2M4TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et
MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2
MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzM5MzYzMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LZKiMA0GCSqGSIb3DQEBCwUAA4IBAQALTodttQs5BE030xCyfnx9SUG+L5bblJNT
QAGQuyT9xiaJ/Ao2ViIvlRZaEajyKaSYB+xR+b7Ino8mzZGUuubHBB2UXgnOjLsp
a4z/YqIgpO7vWJWZ9c0KDuPwNFzHp0cMlgjj86gCqLQJQtNYGoy/Pb2xxzoHnBzV
ckzQDb86zK1VdbHWrt2OkAohrZqnIr6vvq0XqG+gHLErcBqR9g+zBxsfhw390J1P
inXZL+zm/f+g5BFITu8HDE7Hgc52OOwsAGO9XCIXXA25m4l7VaiMGbuqbKW07mHK
XEecqf2ezchzh9Iz0yDrSbZ95vi2rqgzmd30rMorP/o15V+kNbuz
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org