Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e20383334.roa
File: 34352e3135352e3135382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6Mj5QkRIDoWlsCuC9/kQV3sWU8gR89fdRnM94We8qVw=
Subject key identifier: DE:2F:A5:C1:FD:00:86:CA:10:2A:AD:A0:7B:AC:DB:4E:7B:1F:CB:61
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7A001B80661BDBE1A2CE360E760709C71A539D60
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Oct 2023 00:00:06 +0000
ROA not before: Mon 23 Oct 2023 23:55:06 +0000
ROA not after: Tue 22 Oct 2024 00:00:06 +0000
asID: 834
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:00:1b:80:66:1b:db:e1:a2:ce:36:0e:76:07:09:c7:1a:53:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 23:55:06 2023 GMT
Not After : Oct 22 00:00:06 2024 GMT
Subject: CN=DE2FA5C1FD0086CA102AADA07BACDB4E7B1FCB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:52:b7:cb:0a:0d:50:0a:e9:dc:c9:73:61:
d9:91:52:8d:19:ad:7b:e1:f3:93:19:a4:37:22:f5:
8e:27:45:af:4b:1e:e3:2f:fb:55:a5:58:d2:a3:9a:
df:1f:b9:45:23:a0:46:a3:69:cb:ff:1d:f5:e2:3d:
63:c5:dc:cd:4c:7e:9b:1d:28:6c:2b:42:82:be:53:
a5:26:e6:49:dd:1e:65:d2:ce:1c:fb:55:53:ee:4e:
1d:99:c1:69:6c:86:ee:c8:63:3a:51:5a:93:2a:8c:
80:a5:5e:c7:93:bd:06:1d:10:b7:b9:2e:cf:55:e3:
aa:63:fa:82:99:50:c8:c1:8c:3b:09:20:32:d6:77:
18:f4:63:5d:82:34:9e:2f:0f:b0:ca:0b:77:e5:3a:
7b:10:a9:14:e0:d6:12:3e:ce:2e:de:93:16:8c:82:
35:9e:8b:c1:f2:19:f8:db:7b:1b:74:01:85:40:7c:
14:6b:9b:e3:7c:6b:37:b2:28:ca:a1:43:99:4f:f1:
94:00:b8:b3:e8:47:b8:3f:37:62:96:4e:82:8a:1b:
d1:2c:31:1b:42:8f:ed:cc:fc:d2:08:de:8b:f0:26:
c0:c8:9b:99:bf:f4:7e:f0:c5:4d:3a:84:e6:e5:9b:
f7:18:31:f3:a2:f3:f9:71:2c:f7:43:a5:cb:72:3e:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:A5:C1:FD:00:86:CA:10:2A:AD:A0:7B:AC:DB:4E:7B:1F:CB:61
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
90:46:e4:92:f9:ba:3d:8c:ca:25:5e:e3:cc:76:b5:26:94:df:
29:ea:9f:03:04:d8:7c:57:c6:c4:e5:a3:10:db:f8:39:d6:a5:
a4:53:94:93:4a:1e:b3:5f:93:4f:82:62:cd:b9:37:3e:93:a3:
2a:da:00:7b:c5:b4:c5:a3:6f:ac:2c:a9:cf:b0:fb:c0:98:89:
28:13:7b:9b:b3:8c:69:83:2f:0e:fa:84:84:de:5c:fd:42:15:
24:65:ab:b5:55:5e:02:c4:cb:9e:5e:f3:ab:0d:3c:28:62:07:
f0:14:b2:b9:3a:44:d6:f6:54:48:e2:df:90:25:87:0f:98:cb:
ef:72:73:ce:de:3c:90:e1:d2:82:c5:f4:a4:89:6d:c1:68:fe:
05:88:18:06:35:f0:c1:76:58:1d:84:29:4f:c2:d4:1e:26:bd:
67:e1:72:71:8a:96:b6:57:e5:8d:3f:3f:37:15:07:2c:18:bf:
cf:6c:ac:cd:f1:b8:3d:d7:26:30:d9:ae:0a:24:5e:cf:82:10:
1a:c2:3b:81:da:9c:88:4b:2e:74:a2:ad:d9:c7:af:22:9c:0b:
61:c7:45:6e:99:a6:a4:e1:81:a7:6b:de:b2:f5:6e:ea:ec:be:
72:e5:d8:f2:25:b1:24:49:3e:7a:dc:3d:13:0a:ff:a9:d6:ca:
c9:7d:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org