Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa
File: 34352e39352e38302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: N65swe4BFXQMFtftN6/6+vmENzDbDeBa01NLodTxzhI=
Subject key identifier: 6B:6A:A6:48:9C:8B:2E:70:28:D4:09:6B:0B:2B:28:33:09:BB:2D:5D
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 5188C9E51CD5360E45A1CF7B2E86A66D11CCF873
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa
Signing time: Thu 18 Jul 2024 12:04:17 +0000
ROA not before: Thu 18 Jul 2024 11:59:17 +0000
ROA not after: Thu 17 Jul 2025 12:04:17 +0000
asID: 834
IP address blocks: 45.95.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 Jul 2024 12:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:88:c9:e5:1c:d5:36:0e:45:a1:cf:7b:2e:86:a6:6d:11:cc:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 18 11:59:17 2024 GMT
Not After : Jul 17 12:04:17 2025 GMT
Subject: CN=6B6AA6489C8B2E7028D4096B0B2B283309BB2D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:57:89:2d:1b:60:00:29:73:d0:ef:7b:3b:
5e:89:d7:72:fe:6a:e0:5b:18:cb:28:48:33:5f:32:
f5:2f:be:ef:5a:f2:a8:d6:4c:da:38:3b:db:fc:96:
f5:c1:06:84:60:44:6b:84:ad:75:15:73:60:18:9f:
f8:b2:3f:0d:c7:ef:74:88:9d:e6:f7:9c:27:64:fb:
45:a9:7f:7e:bb:0f:71:2e:8f:4d:bf:75:c1:87:3e:
40:33:c3:93:a9:76:64:ac:06:a6:36:ae:65:16:8d:
79:b5:25:fb:74:57:44:cf:0a:f1:92:d5:ae:d1:28:
ff:fe:2e:27:46:cc:2e:f5:13:71:e4:8a:ec:92:98:
a3:5f:ed:6b:74:4a:3e:4f:33:5d:17:e5:fb:5f:95:
10:13:cd:40:0a:77:7d:12:19:17:4f:e1:2c:de:b3:
fa:11:75:59:7c:43:fa:d6:bb:f0:c2:7e:1c:a6:93:
8a:82:e3:85:4b:df:40:0f:d8:2b:87:04:65:a7:71:
cd:1b:ed:ec:fb:ef:5d:72:9d:3e:65:2a:2d:ba:af:
05:64:1c:10:3c:e5:85:5a:22:ad:25:dc:82:38:db:
cd:6c:6e:a0:7c:71:c5:ba:2c:a3:ef:fd:31:81:75:
6c:d9:a3:77:82:f6:94:82:dc:46:8f:e9:ff:1b:45:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:A6:48:9C:8B:2E:70:28:D4:09:6B:0B:2B:28:33:09:BB:2D:5D
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.80.0/23
Signature Algorithm: sha256WithRSAEncryption
17:37:3d:f0:5c:9f:80:fa:60:c3:25:a8:89:a9:6b:05:13:d1:
08:70:aa:83:a3:de:bf:08:dc:96:76:db:ac:56:38:3c:5e:73:
48:a3:fd:24:b4:c6:38:60:6a:26:ef:81:e6:aa:80:77:8d:bd:
d6:46:56:d0:20:74:3e:89:5b:41:d3:83:08:d5:52:e3:4d:57:
40:df:c5:e5:10:fb:b8:96:d5:be:e4:a7:4b:4d:ad:34:ed:df:
88:fd:a7:83:8e:69:61:89:85:71:c9:3e:a3:23:58:71:85:a8:
07:db:94:99:0b:9b:16:32:cb:fa:66:83:9c:9e:5f:81:5e:27:
42:d0:a2:8c:46:21:e6:fd:1e:66:1b:48:e2:a7:ee:f2:21:e3:
94:c5:5d:ac:b8:da:08:87:c6:16:ab:c4:0b:31:a7:13:31:1e:
b3:bc:25:47:4b:61:96:54:ed:4b:eb:a2:b0:98:0b:7b:2c:f0:
57:df:01:ad:a8:86:40:b9:ad:a6:79:ea:83:5e:a7:4b:96:87:
c0:c1:5c:68:57:4c:b0:c6:7e:bd:ff:16:bb:7e:a5:97:30:7f:
0a:e0:02:34:b7:53:2c:43:fc:12:f4:ed:24:4a:7e:5c:56:e0:
f5:0d:c4:0c:52:b0:68:85:04:f5:7e:ee:4d:46:e6:47:52:0e:
12:71:2e:f2
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 25 14:55:53 2024 by rpki-client on console-fra.rpki-client.org