Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203231383539.roa
File: 34352e3134302e33362e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: 6e6vx7Zm/PgHczQBj4EVBjJ0YLwGgzIg3WUWxhRY1Bg=
Subject key identifier: FC:E6:33:C5:66:50:7B:14:A0:CC:1E:E0:5E:A1:A2:87:4A:66:82:6F
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 51C635493C96A2A0E5A21FCC1D250352DF80B1F6
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 06:30:59 +0000
ROA not before: Mon 08 Jan 2024 06:25:59 +0000
ROA not after: Mon 06 Jan 2025 06:30:59 +0000
asID: 21859
IP address blocks: 45.140.36.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c6:35:49:3c:96:a2:a0:e5:a2:1f:cc:1d:25:03:52:df:80:b1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jan 8 06:25:59 2024 GMT
Not After : Jan 6 06:30:59 2025 GMT
Subject: CN=FCE633C566507B14A0CC1EE05EA1A2874A66826F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:a3:47:eb:01:da:54:24:8e:48:e2:2a:75:
1a:ff:6b:78:9a:3f:c7:0c:59:44:5a:8b:09:8d:d8:
2d:71:39:f8:93:2a:3c:00:a2:7a:c9:bb:f6:f2:1f:
b2:be:6f:fe:d5:d4:8b:62:4b:1e:8d:c2:92:f7:b1:
c2:4a:69:62:28:ef:52:89:c4:4b:59:e9:2d:98:70:
6f:36:98:d4:d1:76:06:ef:a6:e5:da:79:6c:69:03:
eb:02:4b:8f:a6:e9:1a:0c:06:64:ce:cd:c6:b0:06:
87:f7:86:37:40:10:7d:f3:8e:c6:41:cb:d2:d9:24:
ac:ea:cc:46:bc:29:57:91:00:a6:89:f8:12:a1:c2:
31:cb:36:68:ae:16:17:ea:a6:2e:1c:bf:d4:99:6b:
9e:1b:c3:c8:a4:75:18:86:d0:ee:b3:e0:33:34:e8:
c5:24:0f:e6:3e:f0:06:11:2a:a3:57:42:98:e4:f1:
20:03:b8:59:80:a9:84:00:18:a1:43:9a:cd:5b:2e:
ee:87:b7:69:9d:e3:bd:36:86:08:7d:09:a3:da:47:
7d:0d:a6:7e:07:c1:bd:e1:40:d3:ed:a0:c7:6b:9b:
1c:24:80:d0:49:2a:52:cd:8a:39:a0:a6:b5:fd:dc:
34:a3:9b:7a:e4:c6:37:e0:92:6d:5d:3c:5b:b2:0c:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E6:33:C5:66:50:7B:14:A0:CC:1E:E0:5E:A1:A2:87:4A:66:82:6F
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/23
Signature Algorithm: sha256WithRSAEncryption
81:0b:14:7c:6d:01:a5:e9:18:80:29:b0:24:9a:a4:3b:44:a2:
cb:33:d5:c8:90:fe:00:26:e8:3a:81:a3:aa:67:75:56:ef:3a:
ce:ee:81:d5:42:f8:7d:cb:fc:0a:9c:cd:a5:b3:e7:85:fe:4e:
23:59:8a:06:ee:75:d4:cd:43:a7:4c:1c:e1:7a:4e:91:9b:45:
3d:e8:14:a5:4c:7c:79:af:9e:c8:37:28:15:7a:c2:84:46:da:
d4:bb:8d:df:e9:ad:ed:04:49:ab:fa:8f:e5:88:71:e2:4b:bb:
1b:19:4b:4f:c8:99:5a:9a:aa:fd:fc:96:80:6c:3e:c1:3b:8d:
8f:a0:5f:5b:df:77:04:a9:63:e6:62:4b:35:0d:f6:52:d7:12:
b3:9a:9c:5a:5b:d9:90:4e:7f:a5:e3:ac:21:55:db:a1:af:d7:
6d:9b:10:2c:d3:ef:1a:01:1f:bf:5b:ad:e9:c9:1d:66:70:69:
01:14:42:43:3c:3d:43:56:e1:59:43:96:58:4c:76:ea:7e:b7:
a4:db:ea:17:34:06:6b:65:08:45:91:5e:99:09:87:58:5b:00:
95:9b:45:81:9e:e2:29:12:d6:a3:47:5f:39:ec:f7:7b:cc:3e:
f5:61:ec:70:b3:8d:e0:8a:99:cd:5e:2b:69:e6:63:f5:6f:48:
e7:a2:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:18:11 2024 by rpki-client on console-fra.rpki-client.org