Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: jRgC35Nf5fqGUZmufhPJ2H3HpU9Q53JNKzuoCEEBpOM=
Subject key identifier: 65:77:74:CD:68:BE:F1:FD:A9:05:5B:D7:4C:C1:89:A0:9F:5E:2A:A6
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4A1F4FBCC407145DE7D8EAD726A4622ED483345B
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 27 Sep 2023 12:05:29 +0000
ROA not before: Wed 27 Sep 2023 12:00:29 +0000
ROA not after: Wed 25 Sep 2024 12:05:29 +0000
asID: 400866
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1f:4f:bc:c4:07:14:5d:e7:d8:ea:d7:26:a4:62:2e:d4:83:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:29 2023 GMT
Not After : Sep 25 12:05:29 2024 GMT
Subject: CN=657774CD68BEF1FDA9055BD74CC189A09F5E2AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:db:67:ab:ff:19:5b:b8:cd:e0:da:73:f4:
02:15:6b:3c:f8:05:48:f6:ac:5d:99:ee:4c:6e:b0:
eb:91:33:47:9a:62:60:81:03:3d:d0:d1:a5:21:6a:
30:43:fa:a8:af:09:62:55:74:2e:72:f7:34:b0:66:
33:31:03:1c:95:17:4c:ba:c3:95:b4:a7:1f:d6:eb:
0a:8e:c9:50:c9:0f:20:62:bb:a8:ca:7b:46:38:ae:
ce:05:ef:c4:e8:ec:85:16:ac:89:f0:58:79:06:43:
1c:2a:b6:74:4b:0c:1c:4b:67:62:96:90:f6:af:83:
61:39:08:93:ff:ff:7c:54:52:6c:3a:00:60:33:d5:
ee:d9:e6:a1:03:aa:d7:ce:ca:6f:f9:45:5a:74:20:
42:d0:49:b6:3f:b0:e4:91:09:eb:94:ed:6a:89:72:
d1:70:c3:59:5d:81:5a:34:9c:17:df:7f:e1:35:ee:
94:fd:dc:60:d5:9b:4b:a8:29:cf:15:08:5d:77:a6:
dd:d8:f6:cf:aa:0b:87:12:31:9c:71:5b:44:26:5b:
63:97:c0:79:24:9e:20:05:44:f7:bc:b5:b3:8e:5f:
37:aa:fd:2e:f4:55:ff:40:bf:09:45:9c:68:62:2c:
18:6f:94:bf:b7:78:e4:55:21:40:ce:4f:07:6c:ce:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:74:CD:68:BE:F1:FD:A9:05:5B:D7:4C:C1:89:A0:9F:5E:2A:A6
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
17:79:ad:15:27:43:59:15:4c:dd:57:9f:b4:0d:1b:3c:96:ad:
11:6d:75:07:ec:68:89:09:b0:99:f2:35:a2:aa:02:6c:f7:38:
f9:d5:80:84:73:7a:c7:e8:25:94:89:ed:89:b6:f2:a3:a1:b1:
9b:1c:23:a7:16:8e:97:53:97:e8:57:6a:97:d5:15:36:60:0b:
af:47:22:f4:c9:15:f8:06:79:4a:ea:47:99:af:d6:d0:8e:39:
87:66:18:98:b1:33:05:0f:99:61:7b:88:0d:32:63:20:3d:15:
17:f3:e7:83:30:f6:92:54:0d:a0:cc:d2:a3:26:be:36:ad:cd:
d8:be:c4:55:c6:d2:88:e8:0a:fb:10:d8:e0:d2:71:5e:2f:ae:
b0:8b:4a:4a:4e:84:b2:b9:3c:b0:de:c8:27:53:ae:49:48:f1:
8b:29:88:51:0d:cd:44:5c:3c:ae:52:11:54:69:93:e4:1a:d3:
98:88:b6:43:f6:e4:28:3b:ec:0f:f2:e2:33:66:be:54:70:33:
cd:7d:2d:a5:2f:22:f5:97:aa:a6:bf:6d:4a:7b:b7:74:8a:06:
b4:b8:dd:e9:cc:63:c7:ae:99:d1:14:68:db:e9:75:7a:3d:cb:
ef:4f:d3:d8:d3:6b:b1:1a:e0:ff:02:b3:35:f8:6a:70:d4:62:
41:c9:ac:19
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSh9PvMQHFF3n2OrXJqRiLtSDNFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzA5MjcxMjAwMjlaFw0yNDA5MjUxMjA1MjlaMDMxMTAvBgNV
BAMTKDY1Nzc3NENENjhCRUYxRkRBOTA1NUJENzRDQzE4OUEwOUY1RTJBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiydtnq/8ZW7jN4Npz9AIVazz4
BUj2rF2Z7kxusOuRM0eaYmCBAz3Q0aUhajBD+qivCWJVdC5y9zSwZjMxAxyVF0y6
w5W0px/W6wqOyVDJDyBiu6jKe0Y4rs4F78To7IUWrInwWHkGQxwqtnRLDBxLZ2KW
kPavg2E5CJP//3xUUmw6AGAz1e7Z5qEDqtfOym/5RVp0IELQSbY/sOSRCeuU7WqJ
ctFww1ldgVo0nBfff+E17pT93GDVm0uoKc8VCF13pt3Y9s+qC4cSMZxxW0QmW2OX
wHkkniAFRPe8tbOOXzeq/S70Vf9AvwlFnGhiLBhvlL+3eORVIUDOTwdszivbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUZXd0zWi+8f2pBVvXTMGJoJ9eKqYwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAthNowDQYJKoZIhvcNAQELBQADggEBABd5rRUnQ1kVTN1Xn7QNGzyWrRFtdQfs
aIkJsJnyNaKqAmz3OPnVgIRzesfoJZSJ7Ym28qOhsZscI6cWjpdTl+hXapfVFTZg
C69HIvTJFfgGeUrqR5mv1tCOOYdmGJixMwUPmWF7iA0yYyA9FRfz54Mw9pJUDaDM
0qMmvjatzdi+xFXG0ojoCvsQ2ODScV4vrrCLSkpOhLK5PLDeyCdTrklI8YspiFEN
zURcPK5SEVRpk+Qa05iItkP25Cg77A/y4jNmvlRwM819LaUvIvWXqqa/bUp7t3SK
BrS43enMY8eumdEUaNvpdXo9y+9P09jTa7Ea4P8CszX4anDUYkHJrBk=
-----END CERTIFICATE-----
Generated at Mon Nov 20 00:40:36 2023 by rpki-client on console-ams.rpki-client.org