Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: xTj9E5zov7+S/h/gEbZFoq8tvIlpykQCpwv30Hm6MG0=
Subject key identifier: 6A:3A:7C:3B:F5:03:02:F5:7F:9E:C6:2B:17:BA:65:C7:EE:3C:FE:7D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0FE04336B98D1A8F86A843B4AF962936C87DDAFB
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 23 Oct 2023 09:41:49 +0000
ROA not before: Mon 23 Oct 2023 09:36:49 +0000
ROA not after: Mon 21 Oct 2024 09:41:49 +0000
asID: 400866
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e0:43:36:b9:8d:1a:8f:86:a8:43:b4:af:96:29:36:c8:7d:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:49 2023 GMT
Not After : Oct 21 09:41:49 2024 GMT
Subject: CN=6A3A7C3BF50302F57F9EC62B17BA65C7EE3CFE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:c3:21:fb:e8:ac:d2:2a:e1:00:a8:cd:d4:
c4:54:6c:47:7a:c8:d9:24:80:06:ea:47:26:f8:c8:
76:a9:38:a4:a7:01:23:ac:53:ae:05:e0:7c:6b:5a:
35:12:ee:9f:47:4e:7e:7d:bc:8c:c1:a3:a7:3d:0e:
06:79:79:28:37:ad:ce:63:19:a5:63:90:3d:29:4b:
29:6f:01:19:80:c8:7c:a9:7c:b3:e9:07:8f:34:62:
77:b2:e1:93:d5:74:b3:36:28:4c:cc:ab:7a:0a:48:
34:ab:64:c4:4c:33:97:67:a9:2a:0e:8d:45:41:5a:
2a:78:73:b8:2a:d1:df:ea:ed:4e:cc:48:37:88:84:
78:ff:bb:5b:69:02:5e:b0:ef:d3:ff:d4:01:4f:9e:
00:78:bd:43:f2:d8:39:5b:a5:b5:c6:82:a8:90:36:
a3:a1:e9:75:d1:b6:34:75:5b:b1:78:f5:2c:60:b6:
33:03:7d:9e:59:ce:7b:49:66:4f:20:e4:c2:95:fc:
94:49:37:4c:5e:55:ef:82:01:65:8c:59:a8:d1:06:
92:a5:4a:cf:48:c0:f7:31:85:dc:02:d3:9d:1e:72:
9d:5b:00:71:fc:4d:6a:72:ef:98:ee:84:c3:75:85:
72:37:c9:bc:60:0f:b0:c8:a8:aa:03:59:03:5a:3b:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:7C:3B:F5:03:02:F5:7F:9E:C6:2B:17:BA:65:C7:EE:3C:FE:7D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:03:f2:aa:e7:e7:a2:86:08:2a:3c:ea:73:a9:9d:19:27:8e:
0a:5a:ab:a8:7f:fb:e3:d1:7c:c7:39:f5:05:8c:c7:c1:22:e0:
39:59:a7:ae:82:32:3b:fa:c2:bd:90:22:8d:be:49:30:ec:19:
07:03:cc:31:6d:7f:96:aa:cc:75:3d:69:56:09:9c:4e:64:93:
5a:03:48:0e:7e:be:2e:02:a2:85:ad:31:a1:54:df:7b:87:48:
16:7e:15:2d:fe:c6:9e:cf:c8:e7:98:71:86:4c:42:7d:20:a0:
81:ab:12:7b:77:b8:d1:cd:f2:65:ef:21:f2:1b:7d:bb:0d:a5:
dc:d0:28:ce:04:b2:f8:74:83:ee:c5:27:98:04:42:84:5e:ea:
82:52:0f:2d:2f:98:74:26:0f:ea:2b:47:63:11:a7:12:00:55:
a8:cb:61:84:25:8d:cc:f3:dc:06:aa:12:38:a8:a7:31:92:65:
6e:26:4b:cf:40:ac:75:47:88:1b:e5:43:1a:0f:6a:45:05:2e:
1f:09:d0:98:9f:13:e1:b5:83:88:68:8d:40:c2:92:12:53:f2:
c8:30:25:30:b1:34:c4:94:2a:9b:15:08:a6:bb:c3:47:46:a8:
9e:9e:6f:98:ee:93:f1:3c:de:59:e4:8e:96:7c:14:35:3f:1f:
7e:54:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org