Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3233203d3e20383334.roa
File: 34352e39352e38322e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: 1g2uYhtk0MQhWDbhtukpfoEoyDZZvSrhG7MEKmAHpDw=
Subject key identifier: CD:E2:AE:7A:41:40:54:86:AF:97:13:CA:D0:BD:97:4D:64:88:3B:60
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 323DB81AFA421B0F93980CED709A4B1D29968790
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3233203d3e20383334.roa
Signing time: Thu 18 Jul 2024 12:04:17 +0000
ROA not before: Thu 18 Jul 2024 11:59:17 +0000
ROA not after: Thu 17 Jul 2025 12:04:17 +0000
asID: 834
IP address blocks: 45.95.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 Jul 2024 21:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3d:b8:1a:fa:42:1b:0f:93:98:0c:ed:70:9a:4b:1d:29:96:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 18 11:59:17 2024 GMT
Not After : Jul 17 12:04:17 2025 GMT
Subject: CN=CDE2AE7A41405486AF9713CAD0BD974D64883B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:04:9c:93:50:b4:41:74:fe:17:e2:ea:63:
b7:47:c9:9b:96:fc:f6:16:f1:ed:4e:65:6d:0e:4a:
14:9b:c4:f2:83:6b:cb:ae:20:a3:7f:12:44:57:fc:
51:35:e8:f5:58:13:54:ba:a6:8d:24:b1:30:0e:12:
cd:2d:69:97:e9:fe:97:ac:af:d7:8a:80:63:d0:c7:
33:74:63:78:7d:f7:15:6c:57:9a:aa:50:58:25:04:
a8:fa:a8:54:89:9e:fa:bf:6b:c3:d2:e0:e4:08:de:
d6:1d:4e:8e:3d:c0:14:a7:e9:3f:27:e8:f5:05:52:
9f:57:04:70:cd:fd:55:38:6e:11:20:0e:31:fb:20:
d0:3b:a3:47:cc:6d:8b:6f:46:73:5e:ef:c8:51:b2:
42:37:10:d3:28:e0:92:bf:c6:43:ff:7e:b8:c6:6b:
99:92:53:24:76:92:d2:e5:a9:36:93:eb:61:46:6b:
ef:07:44:0b:8f:19:7d:3c:dd:c4:15:29:9e:ac:b1:
8d:c7:19:e9:f0:6f:09:c2:33:d8:a4:6a:b7:05:7e:
aa:34:a1:4b:34:b7:f3:af:c0:ef:2a:ea:7e:5a:e2:
c6:33:5c:99:ea:16:1b:d1:0b:83:bf:11:b7:51:a8:
de:32:d6:aa:ba:36:b1:72:99:47:41:54:29:00:1a:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:AE:7A:41:40:54:86:AF:97:13:CA:D0:BD:97:4D:64:88:3B:60
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.82.0/23
Signature Algorithm: sha256WithRSAEncryption
04:83:98:a4:10:e8:e5:ae:71:c2:f1:9b:cf:5e:83:9d:3f:4a:
ce:02:d2:90:50:a0:e0:84:f4:01:48:eb:79:87:39:5e:2c:e7:
e7:41:38:59:c7:5d:19:8f:5e:97:c4:d8:17:9d:c8:ee:24:9a:
14:71:92:17:91:0e:c2:d1:94:71:b2:49:40:c5:59:76:c6:1f:
9f:81:6e:5d:e8:5a:92:49:2c:02:67:1c:15:ec:c3:69:4f:42:
92:af:0c:7d:dc:0f:a1:b1:af:4c:55:b7:5d:0c:fa:c2:52:f8:
b3:2d:37:55:a9:ab:5e:62:58:f2:cf:35:35:d4:c2:29:31:62:
3a:7d:6b:e2:15:d8:40:19:43:ae:d7:19:1f:c6:74:8f:57:61:
5d:02:22:5a:65:af:b7:f6:fb:9e:62:41:73:20:5e:56:01:cd:
91:20:95:c6:4f:ba:a4:74:fa:13:bd:9f:0c:c7:4f:c9:c9:46:
63:76:dc:36:61:0a:c5:9d:41:bc:be:a3:1e:97:34:84:a7:81:
1d:a4:23:cf:54:c2:0c:bf:80:ff:88:4a:f4:dd:ae:ce:6d:a7:
a1:1f:ac:ba:2d:1e:09:72:f0:2e:d7:1b:4a:78:a6:4e:86:c9:
f9:22:fa:82:f6:1b:1d:d8:9b:f2:cd:44:8a:89:ea:ff:4f:db:
0f:2d:1c:f4
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 26 00:30:04 2024 by rpki-client on console-ams.rpki-client.org