Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20383334.roa
File: 34352e39352e36352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jrywj82ebzAUWtbi+c+LbEptWlPaiZyh9eQdQddNkPo=
Subject key identifier: CF:3A:C5:04:0D:9C:08:50:D9:27:F0:23:0B:CF:C4:BE:4C:9A:16:40
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4965B75088E40ED3A0AE997F57107E57C2F9EF59
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:36 +0000
ROA not before: Mon 23 Oct 2023 09:36:36 +0000
ROA not after: Mon 21 Oct 2024 09:41:36 +0000
asID: 834
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:65:b7:50:88:e4:0e:d3:a0:ae:99:7f:57:10:7e:57:c2:f9:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:36 2023 GMT
Not After : Oct 21 09:41:36 2024 GMT
Subject: CN=CF3AC5040D9C0850D927F0230BCFC4BE4C9A1640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:e0:47:fb:1d:d6:d4:99:c0:f0:34:bd:fe:
e9:d8:56:a8:fc:b5:11:59:09:0e:d3:43:a5:ed:33:
49:6d:d9:55:5a:9f:e0:9d:2d:18:c2:9d:5f:d2:fe:
11:b1:dd:5d:31:c9:f4:d0:f2:36:b0:20:db:fc:ea:
d6:10:33:6f:e3:53:a4:3b:88:d9:7c:ee:a0:33:2d:
43:69:47:ec:b7:53:95:48:c3:66:89:8f:d3:ca:35:
b9:cc:5d:1b:c2:03:5a:62:61:3a:0b:75:2b:13:5e:
40:2b:4c:71:9d:c8:6b:15:65:20:48:be:52:51:ed:
24:f0:f7:1b:64:5e:ab:9e:5e:83:d9:fb:c0:83:16:
6a:f1:78:4b:5b:ef:8b:18:81:a5:7f:b5:a8:0d:92:
8b:e1:59:01:5f:88:82:14:f2:53:50:39:ad:a1:26:
ee:47:7c:0d:12:f1:1c:c8:ca:c2:ef:ea:de:87:4b:
9d:47:0c:8d:ac:6b:53:1a:c5:d3:17:c5:51:37:a5:
2f:f5:be:cc:55:99:b8:e9:89:08:72:29:05:28:63:
13:1a:a4:52:5f:fa:d0:26:39:b8:4e:7e:4a:0f:1d:
d5:21:5f:a2:b7:b5:3f:0a:66:80:6d:cc:0d:58:a6:
d3:ff:5c:ec:67:61:32:33:af:1b:65:79:88:eb:1e:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:C5:04:0D:9C:08:50:D9:27:F0:23:0B:CF:C4:BE:4C:9A:16:40
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3a:f5:ee:43:83:cf:d1:82:4b:45:e6:5a:56:0a:5a:ff:f9:
7f:b0:3b:0f:01:86:96:6e:6a:ef:60:2f:59:62:a0:7e:4f:2c:
d3:45:60:36:7a:ca:3f:f1:00:fa:ef:e0:d5:63:b4:6b:77:37:
52:15:ff:62:7a:b5:e1:8d:cf:75:ce:b5:5d:94:d1:3e:6b:51:
be:45:53:46:fa:a6:ac:64:e1:f0:ae:ab:4d:a0:63:3e:c7:23:
f0:42:08:b1:4a:67:ef:7e:f5:14:85:10:de:78:8b:c4:9f:95:
c8:ba:8a:53:c0:ff:50:d3:d5:33:31:bd:76:5e:a0:43:c2:3a:
ee:d9:23:ab:d1:48:7b:a5:cf:40:6e:fc:69:53:98:cb:6d:14:
b0:03:10:e2:7b:7a:d2:34:72:ab:2a:c9:84:15:59:67:f5:01:
20:34:87:f7:09:de:e2:4c:0d:03:f9:dd:bd:86:5e:1c:24:a3:
3b:e7:d4:b2:f1:d7:0f:ec:63:74:20:a6:0a:b8:52:e4:5f:96:
5d:d0:b9:bf:b0:23:fa:a8:61:cd:08:64:ca:aa:97:f1:92:42:
98:08:04:9e:4d:b8:57:07:18:1a:c4:f0:04:8d:ea:f1:1e:37:
2f:f4:46:de:dd:d3:4d:e5:28:5d:4e:6d:63:c0:97:26:35:e7:
46:cd:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org