Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa (raw, json)
Hash identifier: BLg3uOm/3H1Ya7CevO6loVZN52MB/c9tYRyi6S5/M3g=
Subject key identifier: C0:42:25:32:DB:E0:BC:C4:60:69:BD:70:CB:C6:E9:85:E9:78:B3:93
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3FA44E01A082C081A2CC984086765AFBA7A0E48E
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
Signing time: Mon 23 Oct 2023 09:41:43 +0000
ROA not before: Mon 23 Oct 2023 09:36:43 +0000
ROA not after: Mon 21 Oct 2024 09:41:43 +0000
asID: 197075
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 10:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a4:4e:01:a0:82:c0:81:a2:cc:98:40:86:76:5a:fb:a7:a0:e4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:43 2023 GMT
Not After : Oct 21 09:41:43 2024 GMT
Subject: CN=C0422532DBE0BCC46069BD70CBC6E985E978B393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:11:0a:f1:d7:6d:ff:8c:5a:43:c6:ec:00:
8d:ed:a4:39:18:2f:84:2c:fc:dd:7b:7c:b0:6a:e1:
7d:19:70:e6:2d:3e:07:0b:ea:ac:cb:45:0a:ac:25:
d7:42:63:9a:dd:24:09:09:6a:bf:7f:9c:44:a7:a8:
04:96:6e:cc:ef:13:cb:40:59:81:b0:1b:9e:28:22:
8b:12:44:86:a7:05:33:d2:de:63:d6:1b:b4:8a:79:
fe:3b:f4:ed:29:f5:6c:57:21:85:3f:5d:a9:1f:fa:
eb:6e:73:b1:27:8e:5b:3e:49:f0:09:9a:0a:6c:cd:
9d:46:29:0e:06:e9:b5:e2:f3:cf:55:82:d7:66:b4:
e5:6a:bb:22:5c:7d:72:73:2e:3e:4d:d6:81:8d:d9:
6a:58:8b:32:3d:22:61:1b:a0:38:34:54:69:b9:27:
71:14:42:53:ad:52:72:b6:90:2a:44:7a:89:0b:11:
0b:de:55:7d:7b:16:63:80:3c:f9:41:f1:25:86:01:
0d:07:a2:26:31:d2:e1:69:5c:88:84:55:d5:fe:3e:
e2:7c:ad:b7:d2:ac:f1:32:e1:1d:a2:ba:d4:d6:c1:
f1:2a:de:13:04:03:3f:7a:8c:81:5b:54:f1:44:26:
2b:a4:36:6d:a9:b9:cd:a9:fb:a4:e1:99:93:65:b3:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:25:32:DB:E0:BC:C4:60:69:BD:70:CB:C6:E9:85:E9:78:B3:93
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d9:7c:2f:dc:79:9c:8d:e1:65:5e:ab:d2:6e:b8:b3:06:81:
cc:ad:f5:d7:a0:ca:db:e0:a4:81:51:5b:ab:6b:78:bf:6b:6d:
a2:9b:2f:9b:d0:08:76:7f:0e:e8:78:39:fb:c5:0a:aa:35:4d:
62:cc:91:37:fd:69:cd:58:bd:3f:e5:a1:d1:ad:23:d9:5a:ae:
d2:53:82:c8:de:78:b6:ea:aa:b8:19:49:8b:4f:96:f7:5f:18:
5c:f7:7a:30:34:b5:6e:82:96:3d:43:5f:5c:2a:2c:8b:f6:93:
86:26:c7:27:10:c1:6a:12:49:91:ce:65:4e:3e:2c:1d:45:5d:
02:6f:b4:ce:7d:63:f7:80:a1:9d:c2:20:52:4a:1f:56:f6:75:
1d:47:00:ab:84:6d:1c:fd:0e:f2:fe:48:92:b2:60:25:c9:fc:
de:d1:96:33:b5:4e:43:ed:cb:c7:6e:5e:39:0a:bf:e7:0b:41:
dd:82:e9:d0:cb:83:36:b1:c5:45:18:cc:7b:ce:ce:98:67:ab:
6f:ed:45:7f:4b:a5:2d:f6:85:b0:c7:99:bc:83:1d:b0:46:8a:
e6:b2:d2:6a:39:60:19:1a:cc:39:01:17:7b:ad:a5:fe:e8:28:
b2:75:01:7a:6a:c3:6c:bd:ea:43:36:35:ae:c3:53:dd:d9:07:
6f:cb:4a:50
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUP6ROAaCCwIGizJhAhnZa+6eg5I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEwMjMwOTM2NDNaFw0yNDEwMjEwOTQxNDNaMDMxMTAvBgNV
BAMTKEMwNDIyNTMyREJFMEJDQzQ2MDY5QkQ3MENCQzZFOTg1RTk3OEIzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bBEK8ddt/4xaQ8bsAI3tpDkY
L4Qs/N17fLBq4X0ZcOYtPgcL6qzLRQqsJddCY5rdJAkJar9/nESnqASWbszvE8tA
WYGwG54oIosSRIanBTPS3mPWG7SKef479O0p9WxXIYU/Xakf+utuc7Enjls+SfAJ
mgpszZ1GKQ4G6bXi889VgtdmtOVquyJcfXJzLj5N1oGN2WpYizI9ImEboDg0VGm5
J3EUQlOtUnK2kCpEeokLEQveVX17FmOAPPlB8SWGAQ0HoiYx0uFpXIiEVdX+PuJ8
rbfSrPEy4R2iutTWwfEq3hMEAz96jIFbVPFEJiukNm2puc2p+6ThmZNls9FLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwEIlMtvgvMRgab1wy8bphel4s5MwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzEzNDM4MmUzMTM0
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczMDM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtlI4wDQYJKoZIhvcNAQELBQADggEBACbZfC/ceZyN4WVeq9JuuLMGgcyt9deg
ytvgpIFRW6treL9rbaKbL5vQCHZ/Duh4OfvFCqo1TWLMkTf9ac1YvT/lodGtI9la
rtJTgsjeeLbqqrgZSYtPlvdfGFz3ejA0tW6Clj1DX1wqLIv2k4YmxycQwWoSSZHO
ZU4+LB1FXQJvtM59Y/eAoZ3CIFJKH1b2dR1HAKuEbRz9DvL+SJKyYCXJ/N7RljO1
TkPty8duXjkKv+cLQd2C6dDLgzaxxUUYzHvOzphnq2/tRX9LpS32hbDHmbyDHbBG
iuay0mo5YBkazDkBF3utpf7oKLJ1AXpqw2y96kM2Na7DU93ZB2/LSlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org