Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hK8rYC+/0Gb0P6XtfyVlUcdrtiZaOVfvxTy0z21USWs=
Subject key identifier: D9:28:D3:10:22:F4:83:8A:7F:22:04:FA:FB:7E:35:69:49:29:8C:16
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0889B5E7281B0F5F0FEFB7D212CF29F4816AA718
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
Signing time: Fri 09 Feb 2024 00:00:09 +0000
ROA not before: Thu 08 Feb 2024 23:55:09 +0000
ROA not after: Fri 07 Feb 2025 00:00:09 +0000
asID: 834
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:89:b5:e7:28:1b:0f:5f:0f:ef:b7:d2:12:cf:29:f4:81:6a:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 8 23:55:09 2024 GMT
Not After : Feb 7 00:00:09 2025 GMT
Subject: CN=D928D31022F4838A7F2204FAFB7E356949298C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:61:d9:d0:4f:55:e5:7e:b2:19:28:bf:21:
b4:96:7d:13:17:bc:d4:10:e5:13:e6:4f:de:6b:0a:
d8:e6:9e:72:71:58:7c:77:ab:ee:29:ea:71:8a:94:
b1:1f:32:88:e9:63:da:9c:d1:15:ff:92:27:56:ec:
ff:8b:22:3b:3a:47:e3:02:8f:d1:de:b1:23:a9:29:
55:54:3c:0a:da:6c:0c:08:61:54:06:6e:8c:b7:d3:
17:36:f3:22:10:8d:21:ea:0b:b6:bd:63:f9:4d:66:
6f:c5:1f:54:aa:9f:66:a7:95:9e:b0:cd:ca:5c:e3:
32:07:cd:42:f7:ef:8d:ca:e4:99:00:cc:6c:9f:98:
8b:71:fd:26:24:ed:f8:11:86:61:ba:22:a8:c3:dc:
41:00:3f:91:52:6d:7d:43:35:3a:30:2c:15:64:53:
87:36:50:c3:ac:86:01:e4:23:d5:d4:09:6d:9e:c5:
eb:fe:89:59:37:ba:6f:1f:6b:b7:8c:cb:1a:a3:14:
f0:67:30:c3:bb:1a:ae:e7:f2:c1:e2:33:b0:16:5e:
47:d2:17:d8:93:ad:2f:6a:41:c2:e7:28:06:30:9c:
5e:24:8c:93:00:a8:c7:95:72:57:2c:1a:4c:a3:bd:
6c:a7:2f:c9:af:48:00:df:bc:54:c3:72:53:76:e9:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:D3:10:22:F4:83:8A:7F:22:04:FA:FB:7E:35:69:49:29:8C:16
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cf:fa:f6:cd:3b:90:14:f5:ab:67:ba:0f:89:e9:5e:d3:48:
2b:7f:34:35:22:ae:39:0a:03:c2:7e:f5:83:98:d0:5f:91:61:
76:bc:fc:2b:ac:41:d7:e1:77:9c:45:f9:98:19:05:a7:5e:94:
10:8f:72:fe:ff:ad:de:d4:07:6b:bb:fb:8f:3f:cf:cd:b6:d3:
d8:30:5a:8f:9d:5a:6c:8d:f6:87:be:b4:ac:30:fa:e0:a1:cd:
84:31:0b:4b:39:63:4b:b8:9f:12:4e:04:17:b6:ff:46:15:54:
40:8b:c4:fe:38:dc:80:e0:1f:8b:84:21:ed:80:03:45:0c:54:
6e:07:56:30:a7:90:be:13:5d:69:38:48:de:55:dc:00:e4:68:
e5:6f:45:3c:60:fd:33:d8:11:e3:fd:8c:dd:fe:77:06:a0:0f:
b1:18:53:c2:1e:7f:18:89:1c:02:80:cc:e2:dd:b1:2a:23:0a:
aa:cf:d0:a3:05:35:82:86:07:8c:2e:57:55:64:83:5d:dd:0e:
a9:69:96:85:89:9b:f4:9b:db:e0:68:52:22:d3:9a:13:e3:a6:
6b:82:a8:c1:8b:5d:ed:12:30:fd:3d:b0:0b:2b:60:c8:28:a8:
bd:2e:a6:2a:0d:84:77:3d:3d:4b:ac:07:b5:26:32:61:ee:43:
79:55:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:22 2024 by rpki-client on console-fra.rpki-client.org