Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e203231383539.roa
File: 34352e3134382e3134332e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: zuCbdbv/v8RR2rljaoymLlqNpzX9ppZoeVG5zlwUpyI=
Subject key identifier: 0D:42:66:B1:52:66:94:66:64:7E:1E:35:B3:A3:B2:FC:68:F3:5B:67
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 57023C53F2E7E9A406114F64740E5078A878DEDD
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e203231383539.roa
Signing time: Tue 03 Sep 2024 16:11:39 +0000
ROA not before: Tue 03 Sep 2024 16:06:39 +0000
ROA not after: Tue 02 Sep 2025 16:11:39 +0000
asID: 21859
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:02:3c:53:f2:e7:e9:a4:06:11:4f:64:74:0e:50:78:a8:78:de:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 3 16:06:39 2024 GMT
Not After : Sep 2 16:11:39 2025 GMT
Subject: CN=0D4266B152669466647E1E35B3A3B2FC68F35B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:8a:d3:84:0e:8a:c4:24:35:71:51:d5:67:
58:91:83:f0:70:85:ea:00:7a:26:6d:60:55:c4:ce:
11:2a:21:ee:02:dd:f1:8d:76:39:f5:ba:98:b0:2c:
ab:02:99:ee:cb:9e:d7:a8:0b:b2:16:77:6a:44:08:
5f:0a:3e:0c:99:6a:2a:43:ce:a1:f4:35:67:73:9e:
49:d5:19:f8:e4:c1:d4:b5:0b:ba:ce:0c:90:32:6a:
bc:d8:39:58:7a:c1:87:52:5b:18:d2:ec:5b:a9:64:
40:35:e0:61:cc:00:83:bd:58:da:88:a2:7f:a1:a8:
84:5a:42:11:08:9a:89:6e:b1:77:d4:75:2c:4a:b3:
70:f0:2e:3e:cd:6d:a9:41:88:48:86:2b:b0:81:6d:
ad:1d:eb:b8:ec:00:44:a7:63:af:83:26:f0:c4:88:
69:6f:78:30:19:85:35:a0:e9:81:35:de:9f:4a:d4:
d9:72:ff:b4:9d:a6:2b:7b:b3:cc:2d:3f:77:ef:5c:
42:61:59:aa:2e:a6:4a:2b:cb:9b:40:c4:dd:0b:5f:
c6:6d:0a:29:2c:da:75:ac:72:9b:9f:df:d1:c9:fb:
75:c2:5f:2a:09:40:55:a5:14:fc:00:9a:b5:e2:14:
4c:f4:29:ac:bc:4a:85:e6:eb:a8:6d:66:9c:29:1f:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:66:B1:52:66:94:66:64:7E:1E:35:B3:A3:B2:FC:68:F3:5B:67
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c0:d5:9e:26:a6:4e:46:99:59:9f:3f:28:2f:c4:21:a3:5a:
5c:e5:ad:02:84:1c:6e:fa:9e:78:b3:6a:79:94:48:f7:eb:c6:
d8:be:25:fc:e5:41:12:25:a1:a7:c4:66:4b:c6:60:d8:94:2c:
2d:46:38:12:50:cc:68:d5:5b:2a:83:7f:24:8e:92:90:76:bd:
4c:2f:9a:b9:43:1c:9c:63:41:e5:42:ac:72:f9:b2:a5:98:96:
c3:fe:0f:fe:06:4c:09:28:9a:dc:cb:9a:ab:1e:71:3d:2e:bc:
fa:61:56:43:72:aa:5c:d9:6e:5d:8d:72:ef:ef:08:c3:b6:54:
7c:1e:6d:10:7a:1a:38:d0:e8:1e:de:ba:a4:31:7e:9a:84:13:
24:ab:6f:a0:1a:b1:e5:e0:37:ec:29:21:6f:b9:cf:66:27:a2:
80:ef:92:64:39:73:71:a2:19:25:ab:ad:36:e9:60:e4:c3:bc:
16:d1:c3:e1:73:fb:65:db:36:04:cb:68:46:5a:05:26:89:d1:
23:b4:a5:e4:91:b4:a4:21:b8:ab:5b:f6:0f:ef:84:f6:20:47:
b8:c9:51:13:cb:ee:a2:7e:8e:d7:d0:a2:08:93:c6:49:85:66:
48:34:fb:8d:e4:f4:b3:f6:87:be:55:b4:04:06:02:10:53:d2:
dc:75:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:17 2025 by rpki-client