Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203634323637.roa
File: 34352e3133322e3231362e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: aBZctsHDsKIsAkMR6UbH0tNh79c/MuPAWRrpoYJ7msg=
Subject key identifier: C1:7A:D2:FA:CC:E1:64:FE:AD:8E:CA:A5:C8:36:05:C2:2F:79:F4:8E
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4F113DFB68047244E3D058AFCA890E057D251885
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203634323637.roa
Signing time: Wed 28 Aug 2024 13:05:19 +0000
ROA not before: Wed 28 Aug 2024 13:00:19 +0000
ROA not after: Wed 27 Aug 2025 13:05:19 +0000
asID: 64267
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:11:3d:fb:68:04:72:44:e3:d0:58:af:ca:89:0e:05:7d:25:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 28 13:00:19 2024 GMT
Not After : Aug 27 13:05:19 2025 GMT
Subject: CN=C17AD2FACCE164FEAD8ECAA5C83605C22F79F48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:52:73:ea:01:41:03:83:33:a0:41:19:a1:
55:89:72:ad:d4:de:b8:27:64:82:69:07:1e:79:a1:
c4:2e:15:7b:b1:1e:0d:d6:11:75:c5:62:d0:90:50:
bf:f9:f3:f3:eb:5e:28:58:c5:ca:48:a6:d6:36:94:
71:06:0f:ed:e1:b5:ef:74:23:fb:1a:68:4c:50:5f:
5e:e7:51:37:7b:91:8e:cd:45:03:b4:4e:4a:fd:51:
5e:0f:fb:db:f7:b6:28:76:1c:9f:64:9f:95:de:9e:
63:0a:78:e6:60:50:b3:81:c5:02:ff:bd:58:db:ca:
89:9b:3f:e2:bb:45:80:f4:f2:f7:99:d3:1c:b9:f0:
8a:0c:23:f2:f7:c7:d1:f9:ad:1b:cd:95:51:4c:5f:
aa:8a:a1:73:df:64:11:d4:28:df:01:4d:a7:54:48:
6e:f8:5e:0c:08:4d:4a:68:be:5a:2c:e5:16:f0:a0:
7f:42:24:0f:72:c4:be:13:36:6b:21:33:ca:00:e5:
30:7d:36:f2:0d:6b:db:b0:94:e3:18:e8:b6:18:30:
01:eb:0b:18:5d:3a:ea:7c:ce:33:e2:2e:2f:6d:ef:
6d:89:b5:10:62:27:99:10:6e:b9:ff:53:c5:b5:09:
cd:3b:1b:63:d3:82:93:92:f8:0a:83:3e:8f:03:dd:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:D2:FA:CC:E1:64:FE:AD:8E:CA:A5:C8:36:05:C2:2F:79:F4:8E
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:73:a3:d5:2f:b7:46:08:6e:7b:23:d0:5c:35:60:80:4c:15:
f3:3d:fb:bd:e8:7f:88:26:bf:98:f4:31:25:48:a5:3d:c5:06:
b9:a7:94:0e:80:f8:24:4e:50:ab:41:7b:1f:13:bf:6a:9d:b3:
1a:5e:4e:4f:1a:17:8e:01:03:19:99:ec:bf:ab:88:e9:92:85:
3b:c8:19:63:c6:ec:5a:21:3c:db:da:02:b4:e3:83:4a:ab:ea:
54:aa:4d:0a:51:06:53:bf:81:22:fc:4b:59:e2:fe:bd:53:fd:
4d:60:c2:87:0e:e8:00:4f:ca:9f:d7:24:f1:24:7d:da:a4:0e:
12:9f:1f:2e:76:a2:37:0e:f8:e2:fd:c2:e9:b6:9c:d6:df:2a:
59:bd:dd:73:a5:62:24:54:6d:4e:d4:04:c2:f4:b7:66:d5:21:
85:db:fe:73:0d:3e:67:f5:5e:c8:a9:1d:d5:93:fb:d1:a2:23:
d8:2a:20:2a:92:35:c1:ac:1f:db:1b:ee:09:19:9a:1e:a6:c3:
b7:a3:c2:84:15:c7:cb:2a:69:33:d3:ef:5e:d9:21:bd:2e:20:
39:7c:b0:5e:f7:b6:ad:8d:b9:80:49:5f:82:32:a9:e6:2e:93:
d2:f2:74:2e:4f:77:26:21:a6:ca:d0:94:0f:a0:75:47:c1:33:
5c:22:e0:9d
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 1 02:42:52 2024 by rpki-client on console-ams.rpki-client.org