Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
File: 34352e39352e36372e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: owaCclM/rVVPSEd/ueb9FajoXnzpgBCIDZJ9nbkfEsM=
Subject key identifier: 2F:9B:C9:0D:AF:B8:EC:BB:83:8D:AC:D5:A5:28:7E:90:F1:7D:B0:C5
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6CA120898EAD4DEA43201228D160ECBD2C458AE9
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
Signing time: Mon 23 Sep 2024 09:43:19 +0000
ROA not before: Mon 23 Sep 2024 09:38:19 +0000
ROA not after: Mon 22 Sep 2025 09:43:19 +0000
asID: 57043
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a1:20:89:8e:ad:4d:ea:43:20:12:28:d1:60:ec:bd:2c:45:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 09:38:19 2024 GMT
Not After : Sep 22 09:43:19 2025 GMT
Subject: CN=2F9BC90DAFB8ECBB838DACD5A5287E90F17DB0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:bd:07:cc:15:fc:55:7b:eb:94:7f:16:64:
71:4c:85:bc:97:f0:13:5e:a4:34:bc:58:71:da:cc:
02:bb:70:bf:08:55:7f:c2:39:7a:2e:9f:66:f8:31:
b1:48:d5:24:9b:5b:90:1c:f1:28:4c:5d:02:39:82:
17:12:be:0d:05:0e:f3:5f:5b:b2:72:1a:8f:81:0d:
c5:d6:78:77:60:2b:b6:e0:fd:9f:eb:ec:2f:dc:9a:
8f:27:98:87:ab:d7:af:48:ae:0d:26:88:15:37:2d:
44:6c:e7:da:b4:2f:34:6c:83:41:e9:80:e5:16:3d:
63:59:7a:53:a7:e3:1e:68:6d:e4:34:a9:38:14:61:
f8:da:23:e9:57:6b:7b:fa:82:f4:37:54:a7:1e:53:
bd:49:6e:0c:3d:82:6e:77:70:39:f6:e9:ba:0a:a9:
d9:cd:0a:b6:a9:6d:07:2e:40:cb:90:be:57:8c:ae:
1a:88:81:b9:8d:d8:e3:91:5b:9f:bc:69:80:ea:0e:
c8:8c:bf:90:c2:43:46:6f:93:1e:27:96:96:79:e6:
3a:cb:c5:04:99:46:68:2d:10:d8:da:fa:cf:3a:68:
d1:e2:4c:6d:fd:e2:cf:73:60:8c:d1:74:db:59:c0:
8e:15:43:4b:ea:45:c2:02:7f:35:bf:59:e5:33:37:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:C9:0D:AF:B8:EC:BB:83:8D:AC:D5:A5:28:7E:90:F1:7D:B0:C5
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:75:83:1e:87:a0:2e:f3:38:29:c2:9f:60:0c:11:d7:da:a8:
74:7c:4b:d5:a1:97:51:02:4c:be:2a:17:91:ae:c7:e3:e3:de:
6f:1e:7b:56:11:d9:27:f5:10:b7:55:4a:6b:31:4f:54:d8:10:
55:e3:31:c1:3d:3a:4c:5a:0c:05:46:59:09:cb:27:db:c3:3d:
fc:44:ea:82:e1:53:03:3a:1d:f3:1e:1d:6e:62:27:66:aa:de:
1c:4a:ce:f8:74:dd:d6:1f:2b:8e:ea:5c:99:28:84:73:8d:1a:
77:80:b9:f0:64:e2:57:1d:a2:ff:bd:a2:fd:21:97:2e:83:58:
b2:50:f2:44:8c:24:cb:07:ba:c0:70:d9:19:a3:54:93:64:75:
f5:70:0f:14:34:42:15:0d:5b:87:2f:a8:32:22:a5:95:8f:c7:
42:21:2f:2d:39:82:03:c0:24:3f:b8:cc:01:0c:31:85:b9:92:
3a:4f:b6:01:58:67:39:96:bb:39:ef:39:94:0c:b9:5a:f6:4f:
1f:c5:58:1c:a6:4f:04:1a:1f:c5:2b:81:f0:80:e0:9c:07:f1:
8e:36:98:a5:08:31:b3:67:8d:6d:79:94:84:12:f9:63:9b:80:
41:54:98:89:2b:64:c4:9e:81:fe:9b:fb:c8:1d:11:2f:8f:6c:
ce:d2:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:44 2024 by rpki-client on console-ams.rpki-client.org