Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Q4JvaYtiXvj2UZ98D5XWx4SuPQ+0LEf7pN4Au/l8qJw=
Subject key identifier: AB:3C:02:AD:17:BD:5F:93:87:92:54:F1:32:32:58:75:40:6A:B8:73
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7E0EA77124CB915BEE64010E0674B5CA3AF69CDA
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Oct 2024 00:04:33 +0000
ROA not before: Wed 02 Oct 2024 23:59:33 +0000
ROA not after: Thu 02 Oct 2025 00:04:33 +0000
asID: 834
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 13:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0e:a7:71:24:cb:91:5b:ee:64:01:0e:06:74:b5:ca:3a:f6:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 2 23:59:33 2024 GMT
Not After : Oct 2 00:04:33 2025 GMT
Subject: CN=AB3C02AD17BD5F93879254F132325875406AB873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:9c:f8:fd:13:b7:9c:e9:e8:61:be:7a:ef:
45:c0:eb:2d:f6:99:35:a4:b5:12:83:bf:47:05:b6:
c8:ba:d3:8b:47:2e:2e:67:e4:82:22:77:08:87:48:
51:1e:0b:f7:15:b7:7c:91:3c:40:19:1c:13:c9:71:
27:e8:c9:1c:8c:26:cd:f8:21:0d:0f:b2:c6:7e:69:
bf:3d:4e:10:f2:8d:92:f7:71:09:0f:c1:6e:c8:d1:
38:cb:fa:5e:b5:75:80:09:e0:55:ee:d2:12:12:c1:
d6:43:ba:cc:64:ec:74:21:d3:e4:6b:d6:00:43:cd:
a5:fb:fe:53:a4:c1:8b:e6:ca:b4:d6:2d:2d:81:36:
c9:77:90:51:84:1c:38:31:a7:f5:7b:58:15:9a:2f:
5b:45:38:ac:8e:67:65:99:58:f2:59:b8:1d:7a:cf:
ce:ff:d6:71:e4:89:d8:ba:e4:a2:13:58:a6:66:02:
03:bc:b5:c4:86:ea:86:a3:32:21:a3:b7:1b:42:6f:
aa:c3:e8:d8:dd:3d:1e:d4:7a:6a:94:97:52:f0:2f:
3f:38:28:ee:de:5a:41:cb:a5:63:e9:38:0f:f2:66:
6e:b4:1f:9a:fb:d2:10:ae:57:25:33:4a:f5:cd:a0:
31:3c:20:ab:92:8a:d7:a2:2c:8b:4c:cc:f1:db:a3:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:02:AD:17:BD:5F:93:87:92:54:F1:32:32:58:75:40:6A:B8:73
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e2:be:1e:a9:d2:c7:22:49:35:96:ab:ee:12:f9:04:99:b4:
01:34:c9:6d:79:ed:71:2d:40:c4:7d:98:60:d2:96:f8:b6:0c:
f8:60:7a:cf:05:e1:c4:09:dd:44:a1:fe:9e:a9:a5:a8:a1:49:
8d:04:d3:b4:21:4e:1e:60:0b:d9:43:d2:cd:60:63:4f:2a:04:
fd:1a:a0:85:96:c1:e5:18:87:f9:79:62:05:38:6a:3b:95:ab:
53:12:66:43:65:bf:3f:b7:8c:22:78:69:f8:6d:b2:95:ac:3a:
c6:bf:2b:98:bd:83:a7:16:49:bc:72:1b:21:44:3a:c7:08:77:
b8:22:03:59:32:3c:9f:76:db:23:76:56:fa:93:49:d5:86:22:
8f:0f:d4:0f:da:79:e4:62:da:ff:d2:ef:fa:1f:0b:de:53:59:
43:d9:2f:17:d5:70:80:02:85:66:cf:a6:9d:54:9a:fb:fd:c5:
12:e0:59:56:d0:81:f4:d0:76:c1:37:6a:2e:cc:2b:41:8b:81:
d4:5b:26:79:b6:e4:e3:35:4f:33:22:05:07:97:89:61:c1:5c:
9b:11:43:6b:e5:6f:eb:b0:0e:68:fd:cf:8d:87:6b:e6:76:27:
e8:0c:a0:82:db:d8:9e:db:d4:6d:f8:66:36:c8:33:c1:ab:b0:
a5:d1:ff:e1
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 14 17:29:55 2024 by rpki-client on console-ams.rpki-client.org