Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e20383334.roa
File: 34352e3134302e33362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: q11iNRLoVn76ZLMK4tkKOArIK1SzlrWXxL7Geop+wRY=
Subject key identifier: C3:C7:2C:7A:44:CD:50:9D:14:03:7B:EF:A2:00:3C:84:68:D6:18:79
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 63DF7B5604767B9154D458F8721A85450D5F3C2B
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e20383334.roa
Signing time: Fri 12 Apr 2024 00:02:33 +0000
ROA not before: Thu 11 Apr 2024 23:57:33 +0000
ROA not after: Fri 11 Apr 2025 00:02:33 +0000
asID: 834
IP address blocks: 45.140.36.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 08:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:df:7b:56:04:76:7b:91:54:d4:58:f8:72:1a:85:45:0d:5f:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 11 23:57:33 2024 GMT
Not After : Apr 11 00:02:33 2025 GMT
Subject: CN=C3C72C7A44CD509D14037BEFA2003C8468D61879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:8d:e4:68:81:66:56:2c:a7:cf:10:15:9f:
6f:e0:03:31:21:c1:b1:a4:2b:78:73:c5:74:a8:3f:
41:e5:cc:00:aa:f0:8c:77:57:5f:74:ac:82:6b:49:
dc:53:92:cf:ce:2c:5a:05:4c:3e:4b:c8:c0:2a:b2:
e4:db:9f:57:70:98:88:a6:97:dc:8e:3e:8b:f9:6c:
b2:8a:09:f8:7f:79:77:7b:9e:c7:a3:4e:75:2b:94:
fb:c8:04:4f:50:74:42:d1:64:f0:a7:cd:be:89:ec:
39:a4:cb:f4:b1:e3:67:d6:3e:fa:1f:b2:a3:0f:62:
52:28:16:c1:38:00:38:b4:7b:e0:16:21:75:8c:df:
6f:9e:80:8f:6e:77:23:73:c9:59:56:7c:c1:eb:b4:
4f:19:71:76:ae:05:0b:4c:60:75:9e:27:d5:4e:31:
d7:1f:65:1d:8c:77:0d:e8:11:fb:4b:6c:2d:0b:8d:
d3:cc:9a:97:13:80:f5:74:4e:97:7f:98:30:a0:dc:
19:62:df:23:63:f6:64:2a:20:17:76:ed:60:57:a2:
2a:3e:14:0f:6a:d7:ad:38:42:08:7a:67:e0:7b:4a:
35:08:60:11:75:cd:b6:72:a1:0d:1b:4e:98:8d:2b:
da:a5:c4:bd:f4:89:70:8a:22:6c:b7:bd:a7:d1:eb:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C7:2C:7A:44:CD:50:9D:14:03:7B:EF:A2:00:3C:84:68:D6:18:79
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/23
Signature Algorithm: sha256WithRSAEncryption
88:65:f6:d6:9c:9f:a0:46:25:75:a5:1b:07:64:36:73:46:58:
a5:50:88:47:3e:22:07:f1:98:2e:34:74:5e:f3:3e:bc:5e:0e:
4c:0c:4d:90:ac:d1:c2:df:20:f5:37:40:55:95:99:75:48:3b:
72:98:ec:0b:a7:93:a5:f0:f8:0b:1d:87:d7:95:81:d6:1a:f6:
2c:f1:2c:e8:bb:c9:07:cd:ef:3e:8a:a0:5b:c2:ed:20:fa:46:
9b:e5:95:a4:28:ec:79:51:ae:83:e5:70:86:e3:cc:ea:8f:f3:
d8:16:f8:26:f6:5e:e4:33:87:ba:4b:11:fa:90:fb:13:4d:94:
7f:03:16:55:97:ee:65:30:18:7b:61:a5:f8:f7:38:a5:4b:6a:
f4:6c:ce:a4:9d:56:9d:28:4d:c1:44:d7:36:52:57:82:d0:f8:
94:cb:fb:c2:c4:03:8e:89:b5:8e:b7:5c:fb:2b:50:42:0e:18:
d1:03:06:fc:8d:b0:d1:5f:74:38:35:78:a8:97:49:ee:a6:98:
a0:95:43:62:18:7a:df:ea:8c:3a:84:f2:6d:c2:7d:8f:3a:f0:
a8:78:63:3f:7c:fa:9c:cf:49:11:d1:8a:e5:48:ee:de:e2:2d:
f5:90:3f:7f:b1:7b:39:cf:66:f7:7f:b8:a8:c6:39:5d:14:a6:
63:58:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 10:28:10 2024 by rpki-client on console-ams.rpki-client.org