Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323132323338.roa
File: 34352e3132382e31342e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: GUton6ZIAbygzyybrPztJNXkZxAuEjUMXGFIkoKbR+s=
Subject key identifier: 49:DB:5A:CA:45:DC:06:B3:B4:53:B1:53:A8:BD:80:03:50:EC:DB:E1
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4E6EB0AD26307E758F1FBD771AD62F5168B4BF61
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323132323338.roa
Signing time: Sun 08 Sep 2024 15:53:38 +0000
ROA not before: Sun 08 Sep 2024 15:48:38 +0000
ROA not after: Sun 07 Sep 2025 15:53:38 +0000
asID: 212238
IP address blocks: 45.128.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 Nov 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6e:b0:ad:26:30:7e:75:8f:1f:bd:77:1a:d6:2f:51:68:b4:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 8 15:48:38 2024 GMT
Not After : Sep 7 15:53:38 2025 GMT
Subject: CN=49DB5ACA45DC06B3B453B153A8BD800350ECDBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:4f:04:20:9b:65:32:a9:a1:62:fb:7a:de:
2c:cd:b5:7f:a6:39:5a:33:cf:13:32:4f:c3:36:25:
69:27:c2:5b:00:f7:2a:89:aa:06:a6:f5:14:38:4b:
66:ea:79:5c:e5:16:b2:ae:f0:da:49:36:aa:c0:71:
eb:c2:36:e2:9b:36:f4:59:c0:71:9c:2c:bc:65:20:
ae:3a:cb:2f:1d:68:d9:6b:6d:c9:05:ee:fd:14:3e:
1f:57:cd:cb:0c:87:20:0a:d7:12:dd:8d:af:6a:53:
90:ae:04:38:46:4d:f4:b2:41:4d:d8:8f:15:0c:dd:
09:da:4b:0c:32:59:a1:d4:31:15:7a:a9:b2:b5:97:
9f:6a:04:ab:27:9e:5b:27:f0:d6:03:e1:00:98:ea:
0b:e9:5e:e5:d0:89:00:96:c2:77:f6:3d:b8:12:6c:
41:f5:60:18:8c:36:bc:09:4a:19:eb:e4:da:da:ac:
f5:f4:6f:c3:ee:ea:30:70:c0:25:1f:40:49:30:6f:
b4:89:87:75:f2:05:9f:69:4d:fa:98:05:b5:ba:08:
88:90:8d:16:7c:c3:c5:f7:1f:44:fe:f3:04:b8:ef:
cf:c7:50:43:2d:46:f7:45:c3:c4:90:63:31:75:a3:
18:e7:57:7d:73:81:7d:25:0e:c5:f1:6c:bf:38:86:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:5A:CA:45:DC:06:B3:B4:53:B1:53:A8:BD:80:03:50:EC:DB:E1
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
49:86:18:9a:18:af:bf:1f:f3:8c:00:a0:3f:ad:e6:b1:57:9c:
10:45:99:25:cd:48:86:8b:ed:f7:52:ed:f8:9d:68:6c:d2:19:
a1:2d:a4:ba:06:bb:a8:d6:93:ec:ba:01:02:37:f8:2d:82:46:
f3:ef:32:7d:f3:25:6d:ee:32:47:0e:14:51:0d:2b:01:2c:3e:
a6:89:6a:3a:57:63:4b:36:de:5a:a7:46:f8:02:17:7e:0d:3f:
17:aa:94:00:25:6b:81:8d:a2:6c:81:c1:87:e4:af:7d:5f:d7:
2c:37:22:bc:3c:96:01:fc:08:d0:cc:9e:f8:71:e2:98:f6:4c:
dc:9c:4b:24:6e:0a:70:d5:1a:f0:a5:ae:b5:94:cd:75:f5:b0:
1a:3f:7f:0a:82:eb:90:dd:4d:4c:f1:27:92:1e:f5:8b:31:51:
e0:d4:0b:85:cd:59:f8:65:7d:f2:fd:08:4c:ca:77:e6:89:f8:
17:b9:d1:6b:c3:55:69:94:1e:bc:cf:26:27:07:e1:54:85:c9:
b8:af:aa:75:79:55:0e:fa:58:5b:5e:8f:43:65:c9:b0:74:3c:
25:a4:ea:fc:7e:4f:0f:26:60:e0:93:64:9f:22:d6:63:7b:a8:
98:e3:8e:3c:df:a8:da:c3:3a:a6:3f:c6:01:3c:82:7c:4c:0e:
91:1a:1b:62
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 8 03:37:48 2024 by rpki-client on console-ams.rpki-client.org