Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JLczJA2Vpu4XaJwCrTnLbKDBm8PxQ94w4aochA2z508=
Subject key identifier: 70:34:68:EA:C8:C5:77:34:60:09:3C:08:31:0C:D1:17:06:EA:39:7F
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 269DAC95A5A9AF8A373CF4B6EFB7E11D206F9BAE
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Jun 2024 00:01:33 +0000
ROA not before: Wed 12 Jun 2024 23:56:33 +0000
ROA not after: Thu 12 Jun 2025 00:01:33 +0000
asID: 834
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 06:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9d:ac:95:a5:a9:af:8a:37:3c:f4:b6:ef:b7:e1:1d:20:6f:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 12 23:56:33 2024 GMT
Not After : Jun 12 00:01:33 2025 GMT
Subject: CN=703468EAC8C5773460093C08310CD11706EA397F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f9:85:5c:e5:98:8e:55:4a:5a:3c:8e:79:b8:
39:de:8d:8f:06:1a:c1:cf:78:68:62:58:21:ed:88:
27:7d:b4:67:c8:49:1a:35:30:c0:18:af:0e:df:0b:
6c:9e:fd:b2:80:8a:61:27:5f:56:3c:e7:c0:08:8d:
37:36:4e:9b:ba:82:bd:eb:32:9e:5b:b9:dc:16:09:
c8:52:f6:fa:6f:0c:4d:3c:da:ab:42:42:19:27:fe:
06:ca:af:86:71:8a:47:f5:96:60:f0:97:c5:b5:d4:
ea:95:d2:ae:17:24:77:1a:2a:29:dd:74:32:cf:ea:
62:ed:54:85:77:e0:28:2e:5a:c0:7e:4a:ee:6e:cd:
51:79:30:36:75:ec:27:7e:5f:75:36:c2:0d:6c:4d:
a0:b1:fe:aa:0a:35:2d:df:e5:ee:c5:a9:60:d6:63:
db:51:f8:5f:6e:f0:b9:4b:8e:e2:cd:39:62:c6:94:
74:9f:e2:20:6f:df:1a:e8:82:2c:3b:cd:e4:4e:73:
f4:aa:b0:d1:67:91:48:81:75:57:a6:6f:08:37:47:
6f:04:2c:05:30:9e:58:ac:d3:e5:28:39:7c:8b:af:
e4:62:5d:5c:06:1f:7a:90:c7:97:e6:f1:97:8d:fe:
54:fd:e7:d9:c8:c9:09:d2:a9:10:1c:60:0e:bd:49:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:68:EA:C8:C5:77:34:60:09:3C:08:31:0C:D1:17:06:EA:39:7F
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
89:95:97:e0:5f:56:52:e6:59:07:84:64:5e:2b:2d:b2:c9:3e:
89:ce:68:b4:6b:2f:9a:6a:fa:67:15:49:92:5d:22:e1:1a:a1:
03:91:cb:dd:c2:9a:10:79:b6:ff:90:85:eb:e6:b4:9f:11:f6:
03:9c:04:20:15:0d:83:ee:bc:f0:b8:95:b7:37:e1:e9:1d:e7:
8b:f1:5d:54:74:7e:d8:20:b4:7f:3f:d5:41:17:d6:ca:08:e9:
15:f7:37:e5:a5:a6:61:5b:46:d2:3c:5d:f8:1f:9f:b6:a3:68:
0b:db:71:3f:36:1a:5a:76:72:3a:a3:f8:c9:7e:ab:ef:59:7f:
be:79:0e:7e:4d:48:e8:f6:49:f5:3b:87:31:b2:92:27:66:f1:
ca:7d:ea:53:2c:39:9c:8d:31:f3:87:7e:85:b3:43:b6:90:62:
3d:5b:1a:23:ac:3b:c7:16:d2:38:53:3b:55:a0:a0:aa:9c:0b:
be:6f:3a:19:ae:d4:0d:fc:84:46:48:e6:21:74:62:74:e9:aa:
76:e9:a4:70:29:c2:cd:2d:c7:57:e4:0c:00:ac:91:b2:91:df:
ac:22:61:09:bd:7f:8a:82:c9:e8:e7:ec:7c:ee:44:c2:8a:d6:
df:bf:59:15:ef:86:6f:e1:76:87:3c:94:89:36:e7:b6:4b:e1:
23:f2:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 10:23:53 2024 by rpki-client on console-fra.rpki-client.org