Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
File: 34352e3134302e33362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: l3rFe1KsumxAx6O9rGmE3Z+8cN9U/wqqpH0UqPjmfYI=
Subject key identifier: 76:70:E9:4E:82:57:4F:E6:EA:A6:E4:DB:A8:E3:58:AA:CF:E7:53:46
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6C4CB9A296A95ADFA54C46DAFE15EDD0EB40FDE7
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
Signing time: Tue 12 Mar 2024 08:47:10 +0000
ROA not before: Tue 12 Mar 2024 08:42:10 +0000
ROA not after: Tue 11 Mar 2025 08:47:10 +0000
asID: 21859
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4c:b9:a2:96:a9:5a:df:a5:4c:46:da:fe:15:ed:d0:eb:40:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 12 08:42:10 2024 GMT
Not After : Mar 11 08:47:10 2025 GMT
Subject: CN=7670E94E82574FE6EAA6E4DBA8E358AACFE75346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:bc:50:cc:43:af:e5:f2:4f:34:7e:ec:d3:
f0:cb:51:8a:8c:dd:76:c0:12:59:b1:4d:fe:47:81:
f0:3f:ab:c0:7b:99:87:87:8f:d0:37:4b:ff:b2:1c:
a9:98:3a:0f:97:ee:db:c1:0c:97:6e:ef:b9:a9:c4:
bf:01:e6:47:6d:06:20:05:f7:e9:29:5c:1e:ec:d6:
5d:4f:4c:da:d3:58:eb:ce:23:e0:4d:6c:33:2c:7b:
d5:a7:b0:e0:13:73:b7:a3:b7:0b:33:02:d5:5a:8d:
44:e1:6f:bf:9a:f7:ac:d6:5f:66:6b:4a:ef:b0:ba:
29:07:61:5c:7b:81:c9:12:8d:e3:a4:1c:af:60:2c:
1b:5d:52:63:a0:ba:df:83:7f:57:82:23:fd:a0:bf:
65:94:0e:b3:5d:b0:58:7e:bb:70:64:03:06:81:64:
0c:03:b9:31:9b:a6:61:d0:7d:90:04:e3:e7:7d:9f:
2f:43:17:9e:46:d4:69:fa:8d:f0:af:80:bf:f2:e8:
3e:17:d7:b4:72:6a:19:e1:85:84:1b:7c:2f:bd:84:
de:f3:58:9b:3d:07:3e:d4:3a:28:17:f2:59:ed:2b:
7f:b5:e4:96:8d:10:b4:9c:6c:86:f2:b9:c9:16:88:
da:8f:2f:8e:6f:bb:9b:38:c8:45:29:09:ec:75:e0:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:E9:4E:82:57:4F:E6:EA:A6:E4:DB:A8:E3:58:AA:CF:E7:53:46
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
93:18:f9:d1:af:68:07:10:b4:37:66:ad:fc:01:ce:d4:e0:66:
15:75:08:a5:06:0d:54:6b:8b:2a:c0:ca:a6:ec:ea:ed:36:29:
cd:76:94:e0:04:bc:05:14:02:ed:51:54:9b:c4:aa:11:80:54:
f0:f6:fd:13:39:22:2c:bd:5f:7a:02:c0:31:ea:02:79:6b:f6:
35:cf:5c:7e:d0:91:c7:b3:46:84:83:3c:28:d3:d1:f1:f7:68:
b9:39:1c:e5:04:62:38:6d:7b:f5:47:16:53:58:23:e1:20:f2:
9b:27:79:97:98:2b:38:0a:3d:62:db:81:7b:f4:24:3b:89:92:
cc:37:7c:37:62:2a:e0:30:f4:b4:f6:f9:ab:00:92:57:99:63:
70:a8:65:2b:16:79:45:b7:fa:36:79:20:6f:43:fa:9b:dc:55:
34:b1:84:80:ee:ab:9f:fd:ce:9f:28:e6:dd:c9:cf:40:72:fb:
66:3f:b8:d9:c6:05:4e:a3:72:36:54:2a:1b:4c:19:1c:a6:14:
3a:d1:33:65:3b:8b:c9:95:ce:d0:70:6c:f8:46:99:14:29:79:
6e:e6:9c:2c:ad:02:34:6f:66:7b:62:1a:00:4d:41:04:06:cf:
9e:51:50:6b:e2:cf:ae:67:e8:31:ad:b8:f5:43:af:b5:19:74:
4d:d8:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 01:21:56 2024 by rpki-client on console-fra.rpki-client.org