Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e203536343835.roa
File: 34352e3133322e3231382e302f32342d3234203d3e203536343835.roa (raw, json)
Hash identifier: wgTnuymAXn1wkICaMwUgLqDBx2Cp2NxHem/hU95+rQw=
Subject key identifier: 43:AE:F7:53:41:60:86:16:0B:90:CF:BC:4B:B5:E8:0F:86:39:AC:17
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 744632B724C3EE481E7AD96B85CEB15952132AE2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e203536343835.roa
Signing time: Sat 09 Dec 2023 10:31:07 +0000
ROA not before: Sat 09 Dec 2023 10:26:07 +0000
ROA not after: Sat 07 Dec 2024 10:31:07 +0000
asID: 56485
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:46:32:b7:24:c3:ee:48:1e:7a:d9:6b:85:ce:b1:59:52:13:2a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Dec 9 10:26:07 2023 GMT
Not After : Dec 7 10:31:07 2024 GMT
Subject: CN=43AEF753416086160B90CFBC4BB5E80F8639AC17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:cf:17:89:45:15:83:8f:ac:4b:ef:25:e7:
57:09:a9:51:d8:fa:40:72:d7:37:2a:47:88:4c:c5:
c9:9a:bc:3e:3d:dc:4a:99:64:01:22:0a:be:92:e7:
cd:ba:3a:a3:a2:bd:f1:5a:97:06:ab:e6:ae:d3:70:
06:04:1e:8b:01:41:22:82:6d:3d:bb:02:53:c2:73:
75:51:8e:7f:eb:bf:6a:36:11:62:05:38:66:65:14:
fa:0f:5d:f0:d9:4a:29:04:e8:23:f1:0a:09:d1:71:
75:da:0b:56:5b:1c:1f:95:ee:ae:1f:5a:1a:de:b3:
18:a7:0e:72:ef:f4:8b:3a:49:b0:17:51:fd:3e:ab:
6a:4a:8e:74:cf:a5:27:6a:f1:da:b4:a3:79:6f:7f:
78:51:0a:bc:66:8c:c0:6f:61:e8:d4:d6:3e:7f:81:
60:45:ca:bd:fd:e8:42:1e:dc:3f:ba:ef:a9:46:57:
cf:c8:c7:53:0e:35:8c:73:0a:1f:98:f5:fe:46:00:
03:e5:a8:98:47:71:04:90:d3:7f:e9:c6:88:c3:b9:
30:60:85:46:35:b8:69:e9:9d:08:af:79:9f:c2:33:
5b:ed:3d:3d:cc:9a:f3:f7:29:6e:58:cb:ad:e0:68:
dd:34:f7:36:97:45:52:2d:61:d5:dc:48:01:aa:af:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:F7:53:41:60:86:16:0B:90:CF:BC:4B:B5:E8:0F:86:39:AC:17
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e203536343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:16:a3:59:94:61:7a:a9:04:a7:64:6c:60:a5:a7:ca:b8:27:
23:23:2d:4f:f8:06:d8:78:35:98:cc:d1:07:40:a7:88:12:2b:
9e:64:5e:80:d5:ac:96:43:53:24:a2:46:c6:92:a2:04:20:f5:
1d:93:ee:54:ae:dc:4a:35:51:53:15:39:03:27:de:65:48:e5:
15:1d:a1:e1:f1:4a:7f:27:96:2a:2e:dc:52:1a:30:53:e1:18:
9b:9d:b6:64:bd:23:91:b2:a3:0d:fd:c1:34:f0:1a:6b:1f:e9:
e2:a9:ee:3f:4b:c7:4a:99:68:90:17:e3:53:46:a0:7a:2b:e7:
30:ba:33:e5:f5:af:7e:cc:f6:2a:05:d5:d0:56:94:2d:0f:9a:
5b:fd:1f:07:69:93:cd:27:a0:79:50:8e:ca:83:99:e5:67:4e:
e2:b6:4d:a2:b7:0b:2f:d9:b8:3f:58:25:82:f7:81:3b:05:c9:
52:4b:62:bb:2d:c8:0f:74:59:5b:3d:79:09:64:5a:a4:5c:12:
dc:8a:72:ba:0c:31:f4:bd:ae:94:92:8a:20:b1:d4:b3:2a:7d:
c1:14:5f:67:86:7c:f9:e0:14:81:b7:18:bf:c8:7b:1c:e7:48:
56:5f:f2:df:b2:05:4e:17:b6:ed:aa:6b:f4:80:f4:2c:a2:b7:
40:a2:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 03:18:46 2024 by rpki-client on console-fra.rpki-client.org