Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EEyBItStGBotGdff0srHUmxfLNZkn48yLSUDPUe45t4=
Subject key identifier: B4:E2:54:19:F1:45:65:BC:2C:15:22:B6:04:0B:50:A4:24:0D:F8:00
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 789575074762FC3E786EECA94ED510058E3373C1
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:26:55 +0000
ROA not before: Thu 11 Jul 2024 09:21:55 +0000
ROA not after: Thu 10 Jul 2025 09:26:55 +0000
asID: 834
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:95:75:07:47:62:fc:3e:78:6e:ec:a9:4e:d5:10:05:8e:33:73:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 11 09:21:55 2024 GMT
Not After : Jul 10 09:26:55 2025 GMT
Subject: CN=B4E25419F14565BC2C1522B6040B50A4240DF800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:b6:33:44:18:c1:0f:96:11:b3:d1:aa:9d:
70:9a:9e:7e:74:1d:bb:47:88:48:2b:df:4f:72:91:
28:c3:78:90:16:71:43:85:24:ac:53:f6:97:f0:e2:
21:35:f7:46:27:0a:c3:e6:6f:9d:c2:ed:3f:72:f6:
5d:c6:29:99:7b:9d:53:72:40:c7:52:c7:16:a7:8c:
dd:35:7f:1a:2c:15:d6:e6:6d:a7:f5:4c:16:b9:85:
18:c5:c6:ff:2c:0f:da:b0:02:d3:79:99:4f:b3:16:
ae:26:f7:68:5d:17:a1:fe:42:ed:09:ce:43:4c:24:
f4:d8:4e:8e:80:d7:a3:39:a9:34:b8:33:00:e6:45:
0a:c2:1b:ec:ad:99:d4:39:1d:89:6f:fb:ba:1e:40:
e1:75:3e:51:48:58:24:99:21:1d:49:9b:53:64:9e:
c4:7c:e9:66:85:a7:95:e6:49:47:eb:c3:f5:b5:11:
1d:89:78:86:75:92:44:65:47:07:b8:4d:fc:12:9d:
4a:bd:49:6d:00:b2:18:95:3d:f8:69:da:d4:cb:62:
da:42:74:7c:c1:9d:7f:c8:72:b5:48:e5:66:e7:6b:
5b:99:03:4c:52:85:26:b7:08:f0:69:dc:90:db:e9:
c6:3c:a9:2a:c7:bd:4c:d0:cb:f2:46:b7:09:90:2b:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:54:19:F1:45:65:BC:2C:15:22:B6:04:0B:50:A4:24:0D:F8:00
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c1:37:ca:ac:c8:5f:e0:10:ed:c5:28:46:d7:98:c6:3d:a3:
67:ab:53:cc:0b:ce:12:8c:0c:af:35:32:83:6e:50:3b:76:f4:
43:a2:43:55:e5:13:13:37:fb:d6:61:ad:ee:71:c8:e2:54:d4:
5a:5f:25:69:a9:0c:57:a9:f6:ce:98:ee:73:b0:df:24:c6:b2:
b2:fd:4e:86:37:54:7e:da:1a:b1:70:d9:ef:31:24:52:90:26:
9f:e7:7b:15:7f:bd:60:09:ec:57:44:a0:11:3a:c3:08:f1:5d:
99:e5:44:bf:0f:fb:ef:b4:fd:3c:df:aa:62:8c:36:a0:04:6d:
cc:9d:73:c7:8f:9a:d8:7a:43:fb:a0:66:c4:43:9c:7c:b0:d4:
10:11:48:5f:96:ae:5f:d6:71:09:ac:7f:16:4c:9c:02:e7:47:
98:3a:34:68:f8:e0:f1:43:8d:4c:a1:39:8b:8c:39:c7:42:9a:
e5:64:bf:8d:dd:b5:f3:71:c5:df:e9:e3:be:70:54:1d:bf:1f:
f6:fe:2f:5a:46:4f:6f:e2:85:2f:9e:07:bc:66:fc:0d:42:8c:
d9:02:97:57:0f:e8:af:88:2f:7a:c3:a4:02:ba:d2:03:77:98:
4c:2e:1b:7c:79:79:80:24:c4:6c:f3:d4:9e:9d:46:2d:6e:39:
2b:2c:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 15:47:46 2024 by rpki-client on console-fra.rpki-client.org