Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7MnQRe/+YJ3CJqNU786xO7uFvG+ye36zb+D0m72CuIw=
Subject key identifier: 42:B1:43:22:50:A7:9C:79:2B:E4:E5:79:6A:F2:88:7F:5F:84:C2:6F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 131E5D2015C878E62BE608B46A040166611BE499
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Aug 2024 07:16:06 +0000
ROA not before: Thu 22 Aug 2024 07:11:06 +0000
ROA not after: Thu 21 Aug 2025 07:16:06 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 08:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1e:5d:20:15:c8:78:e6:2b:e6:08:b4:6a:04:01:66:61:1b:e4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 22 07:11:06 2024 GMT
Not After : Aug 21 07:16:06 2025 GMT
Subject: CN=42B1432250A79C792BE4E5796AF2887F5F84C26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:bb:be:60:62:d2:eb:7e:38:6d:3c:cf:f7:
e9:05:dc:77:47:41:8f:d1:7d:90:80:44:f6:7b:bc:
56:47:41:e1:4e:68:56:7f:cf:a0:98:7c:c4:31:63:
f0:8a:dd:95:ec:fe:18:a9:f0:d1:99:9c:71:76:ea:
a5:90:ee:23:b5:bf:63:a7:a5:3c:98:c8:26:55:d0:
17:f8:8c:ba:23:ef:2c:77:f5:eb:7d:05:8d:80:a2:
0f:a7:81:a8:e5:f4:19:7a:d3:88:6a:05:b3:fa:38:
44:f8:02:7c:4d:4a:1e:5c:16:0a:82:88:1b:03:59:
ea:8b:d4:06:74:74:a4:4a:ed:6b:50:7c:91:15:3e:
d7:9f:d9:a5:dd:67:23:a1:be:41:71:d4:c1:89:76:
62:d9:fd:35:c7:5c:47:a6:70:31:62:e1:dd:0b:cf:
fb:5e:66:21:13:7f:de:b6:ec:9d:5b:31:fe:18:27:
3e:6d:cb:be:48:3e:64:9b:88:a8:f3:df:45:88:3d:
80:cf:52:a9:d6:bf:6b:d6:06:d0:cf:5d:bd:e7:77:
ea:ed:0f:9c:41:da:47:3b:c7:ec:4c:8e:a2:6b:87:
b6:7e:84:c6:04:b3:9c:d7:04:a5:ea:3c:56:5f:dd:
10:eb:f8:23:91:cc:d7:1d:e3:12:94:d7:7a:26:ec:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:43:22:50:A7:9C:79:2B:E4:E5:79:6A:F2:88:7F:5F:84:C2:6F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d1:ec:c1:cf:92:9a:3a:f9:bd:13:41:12:a2:a4:e7:d3:f2:
93:e7:13:c5:4e:a7:12:26:3a:6d:20:df:3e:38:96:17:91:c1:
6b:3d:f2:09:9e:cd:e1:85:10:78:35:ef:00:3c:9f:01:22:21:
0b:2a:1b:25:9d:69:58:64:c1:d9:db:1b:81:42:51:5f:61:a7:
55:0c:a1:fb:cc:64:18:14:69:96:92:de:2f:20:e8:7c:27:a4:
ba:98:a8:14:a6:e7:62:f7:c4:7c:96:31:04:bc:ac:ce:a1:57:
c7:28:4d:36:a5:86:a6:27:57:da:14:e1:11:35:19:26:8d:2d:
64:25:9d:b7:11:20:7e:31:1d:7d:24:2b:1a:08:1e:72:af:09:
09:34:86:aa:f8:9f:2c:5c:51:2d:60:22:66:5b:60:29:ab:e7:
78:1e:22:e1:f7:7c:97:6c:5c:30:61:e6:0a:b7:75:da:48:33:
26:1b:7b:0d:5f:f8:c7:f7:19:03:8b:e1:02:8b:5d:22:06:4c:
14:c9:dd:60:ee:ae:2e:33:f0:eb:cf:09:ca:df:28:08:5e:c7:
36:ee:2c:6a:91:f7:6c:63:6f:c9:c5:f0:4d:a4:0c:1b:84:8e:
cb:69:01:dd:08:80:d9:c0:b1:f4:92:61:8b:3b:82:b6:d7:45:
b9:40:73:c6
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 22 13:16:58 2024 by rpki-client on console-ams.rpki-client.org