Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e2038313030.roa
File: 34352e3133322e3231382e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: goh+OkcnAMHkO/q7BwTY7B46AstxdfnG7CRyZLj6HGs=
Subject key identifier: 4A:E0:18:C9:17:6E:1A:1E:37:30:C6:A8:5E:05:DA:D4:F9:7C:D7:2B
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1E0583121DFCC57BF5A6596D12679636E1E1F8C5
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e2038313030.roa
Signing time: Fri 16 Feb 2024 14:59:39 +0000
ROA not before: Fri 16 Feb 2024 14:54:39 +0000
ROA not after: Fri 14 Feb 2025 14:59:39 +0000
asID: 8100
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:05:83:12:1d:fc:c5:7b:f5:a6:59:6d:12:67:96:36:e1:e1:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 16 14:54:39 2024 GMT
Not After : Feb 14 14:59:39 2025 GMT
Subject: CN=4AE018C9176E1A1E3730C6A85E05DAD4F97CD72B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:47:e1:c9:94:15:78:c1:38:16:46:5c:7e:
12:79:7d:06:97:3c:4a:fc:d6:a7:53:68:c4:c7:0d:
71:b7:95:98:d5:e1:01:b8:56:c6:30:51:46:cb:8a:
48:c4:9a:cb:7f:11:bf:be:64:93:00:3e:ee:b1:3c:
9f:d3:72:aa:7e:7a:b8:7e:87:79:ea:14:75:19:9d:
d7:4b:f7:38:b0:98:84:e3:64:6f:9a:92:ab:10:f5:
93:9a:9e:4c:60:68:ef:21:71:f5:8f:e9:59:e2:28:
c5:fc:c6:0c:54:b1:38:5f:bb:bd:46:c9:45:b6:89:
ad:d6:27:47:00:5c:8b:88:b9:ba:9f:64:2c:c1:08:
90:2f:5e:35:02:30:0b:a1:a4:71:a8:b3:12:14:49:
bb:ef:d3:f2:41:8a:4e:c3:b4:a4:df:74:56:7f:b5:
cd:01:32:d4:b0:d0:66:f4:17:05:09:77:d3:f2:7d:
ca:10:96:96:27:c5:de:44:e2:4c:d0:1c:70:1e:1d:
ea:0e:f9:4e:11:12:cd:51:23:54:8e:f2:38:96:d5:
17:1c:1d:fb:56:17:87:38:34:ad:43:63:31:47:30:
dd:38:7e:c3:78:37:25:5f:6e:3a:e4:61:29:cd:79:
c7:c8:af:47:98:43:94:84:5d:4f:d8:ed:06:b3:f0:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:18:C9:17:6E:1A:1E:37:30:C6:A8:5E:05:DA:D4:F9:7C:D7:2B
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dc:7e:66:c9:0f:ef:0f:77:1b:41:a8:ab:68:4e:1d:14:7a:
d4:84:d4:f0:60:88:e7:94:b1:1d:70:87:8a:8f:9b:cf:30:1d:
f5:20:35:33:88:d6:43:31:7f:38:a5:a7:57:12:68:d9:55:b8:
57:0c:35:26:6a:33:b2:8f:40:a6:3d:d9:da:10:e3:f8:a2:d9:
9e:a8:cf:33:7a:4a:77:38:56:89:2c:37:ca:b0:b8:66:1d:7f:
bf:1b:56:59:72:e7:16:f9:04:16:53:2d:11:14:48:60:d0:8e:
88:40:dc:97:ea:a3:ff:80:b1:0a:29:1c:c1:44:e5:d0:cc:c9:
62:c2:58:cb:3f:68:8f:71:fe:86:87:10:61:33:21:51:f5:a6:
ed:e2:73:ce:da:2f:8a:7f:46:ef:0e:a5:84:81:dc:36:dd:8f:
a3:a8:4e:92:63:3b:76:68:29:9e:ad:1c:17:64:28:b9:ed:b0:
e2:28:0b:48:8c:7d:3e:14:7d:fb:ad:e2:43:65:ad:3d:4e:c3:
53:cb:a5:21:f9:0d:9f:9f:62:e0:23:b5:aa:a2:2c:99:0d:2a:
c8:74:37:55:41:13:95:6c:ef:f8:48:56:94:df:ad:fd:09:6e:
44:75:70:02:7a:18:46:b3:48:49:67:8b:0a:3e:54:40:c3:d5:
7f:f2:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:54:52 2024 by rpki-client on console-fra.rpki-client.org