Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
File: 34352e38382e31302e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: DY7vJct1o4Q+gdjoHbrP6oljp6WsVj49kZbUzE9jJNs=
Subject key identifier: 23:0D:B0:39:46:C1:95:5C:6F:51:29:94:C2:B6:7A:60:99:72:F9:D1
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4F084D92FA1135FECDB4A2BA5589B36C88DFC666
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
Signing time: Mon 23 Oct 2023 09:41:38 +0000
ROA not before: Mon 23 Oct 2023 09:36:38 +0000
ROA not after: Mon 21 Oct 2024 09:41:38 +0000
asID: 396982
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:08:4d:92:fa:11:35:fe:cd:b4:a2:ba:55:89:b3:6c:88:df:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:38 2023 GMT
Not After : Oct 21 09:41:38 2024 GMT
Subject: CN=230DB03946C1955C6F512994C2B67A609972F9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:39:2a:9a:4d:e8:42:58:8a:93:fc:f6:53:
15:84:06:d3:ea:be:d7:3b:52:a3:b3:f6:f6:46:f2:
06:91:09:78:ff:37:28:07:90:83:eb:7f:a8:3d:a5:
fe:39:73:ec:3e:02:72:bd:e5:6b:49:cc:54:58:c6:
35:05:b3:6a:fc:fc:03:77:f3:96:6b:dd:f6:e0:6f:
4b:5b:26:02:8b:b8:80:52:92:8b:31:45:56:27:13:
f7:0a:e3:7e:4f:c5:0d:26:50:ac:4b:d8:cd:63:56:
1b:00:ac:35:39:3b:d8:a0:5c:c9:11:7a:46:d8:ad:
f4:8e:4f:72:b7:51:1f:4b:14:5f:c4:d0:31:b6:5d:
01:0d:2e:df:2c:3d:3f:ea:03:43:ab:18:3f:68:ac:
f0:16:5b:ae:20:57:4d:07:22:e0:e3:8d:30:71:46:
ec:be:a2:63:1e:51:c4:58:24:33:62:89:7d:01:57:
64:ac:7b:c7:b2:f0:3b:f3:6d:1d:92:7a:e7:8c:97:
3b:da:bd:eb:92:6b:1d:21:16:ce:aa:fe:26:fe:57:
2c:2e:75:b7:fd:10:6a:34:d6:a5:09:47:a3:e4:83:
f0:9c:2d:e3:e6:9a:db:90:9e:ea:bb:18:9c:9e:bd:
07:b9:33:c2:9b:23:c7:08:b8:17:54:96:97:ff:08:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0D:B0:39:46:C1:95:5C:6F:51:29:94:C2:B6:7A:60:99:72:F9:D1
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:54:57:1f:bd:23:6e:42:0c:4f:1c:15:40:2a:ab:1a:8a:ed:
01:2f:f3:37:07:f0:f9:3b:59:36:a8:54:89:7f:36:d6:ea:9e:
ad:71:7f:c9:3a:c3:a2:1b:c0:cb:b3:22:a3:71:14:ad:d4:0c:
b4:5e:c6:13:85:92:32:cf:57:33:c2:a0:bd:05:77:07:a6:11:
f9:35:b9:fc:63:a5:8c:a9:f3:35:bc:d5:23:4e:b8:ff:e8:9d:
86:f7:bc:78:c3:9e:e6:64:68:c5:42:32:08:ed:ef:a5:2e:65:
d4:1e:b0:0d:1c:e0:41:01:df:d5:20:be:a9:51:7d:1f:ae:ef:
53:fd:c3:92:fa:bf:38:78:a5:b6:16:a7:c8:97:9e:50:63:b2:
d3:1c:fa:62:fe:7f:d8:c1:f9:d0:a6:25:34:e1:d5:32:58:bf:
c1:56:ea:ed:61:f7:94:25:88:88:dc:7c:71:0f:f6:9e:9a:51:
8c:5d:e1:f5:c5:c8:2c:43:7e:42:a2:90:1d:cc:45:c1:ea:f3:
29:95:3b:03:17:df:74:bb:19:b2:d4:33:69:7b:1c:30:eb:1d:
8a:5c:71:a4:a2:5f:7d:cb:38:3a:67:cf:28:b4:5c:89:be:79:
7b:6c:18:d4:18:dd:52:6a:70:ba:4f:a5:24:70:c5:7f:e4:e7:
11:d3:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org