Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: w14vTI+fLshRXvURzKn8Emq2LM1d4mQnG+udyJCJe5w=
Subject key identifier: AF:6D:51:5A:0D:49:F5:26:1B:AE:74:7B:87:13:E1:DE:0F:72:4F:62
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 102D93E4847B61D7690F70AFC9F3A737E2487343
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Feb 2025 00:02:35 +0000
ROA not before: Tue 11 Feb 2025 23:57:35 +0000
ROA not after: Wed 11 Feb 2026 00:02:35 +0000
asID: 834
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 13:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2d:93:e4:84:7b:61:d7:69:0f:70:af:c9:f3:a7:37:e2:48:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 11 23:57:35 2025 GMT
Not After : Feb 11 00:02:35 2026 GMT
Subject: CN=AF6D515A0D49F5261BAE747B8713E1DE0F724F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:08:d7:94:66:8f:e5:3d:ee:88:07:95:c6:
27:70:f6:e6:4a:22:50:f7:c9:da:6f:bc:d0:9f:2d:
4d:39:52:a7:14:0c:8b:f4:a5:90:d4:e9:c4:49:f1:
86:e5:a5:a9:a3:df:6e:06:73:cd:d2:7b:4b:f1:92:
e0:9f:bf:c8:51:8a:6e:f3:90:01:cc:75:8d:da:30:
0f:63:c0:f7:06:f6:da:2a:c7:78:51:56:f3:4e:25:
44:26:f9:57:60:26:d5:ef:ed:e9:b6:52:3b:c1:63:
bd:09:60:7b:63:94:10:7c:c4:0f:44:c9:f9:1b:6c:
ac:f9:40:44:89:f5:0c:d2:18:1c:7a:73:1f:b4:e9:
03:aa:44:ea:d4:1e:b2:e1:a4:9e:49:6e:a8:bb:04:
e9:ad:20:1c:d4:0a:e2:cf:e4:72:89:f6:37:9b:78:
b6:35:4b:e6:23:01:18:5c:0c:bd:60:dd:94:f9:d0:
1e:94:3f:92:ff:26:62:f1:54:b5:c8:f7:30:dd:3b:
5f:75:54:fe:30:09:d5:6b:84:3d:ec:fd:8b:14:fa:
d3:88:80:8f:82:7b:ff:11:d5:22:f4:1a:c8:18:f1:
52:0d:68:5b:a0:7d:82:4c:59:d9:2f:e4:e8:f1:ca:
27:22:8b:9d:6e:73:e3:2e:20:09:74:03:c4:d3:6e:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:51:5A:0D:49:F5:26:1B:AE:74:7B:87:13:E1:DE:0F:72:4F:62
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:14:b7:39:a7:e9:19:f5:dd:81:39:3f:bf:85:fb:31:d6:45:
ad:6d:d9:d6:9c:ea:3c:7a:04:86:cc:89:1c:e0:ae:79:75:db:
92:06:fb:5f:22:6a:43:b1:b2:72:a8:6b:bc:f5:ac:f0:3c:a9:
44:3c:c6:e9:7f:72:26:fe:9b:fc:4a:6b:4e:61:99:30:58:d2:
08:4e:42:9b:a1:e1:5e:2d:ca:16:35:57:55:aa:bc:27:5a:ca:
1d:5c:a7:8d:96:bf:9f:f7:52:d5:bd:63:b5:0c:6a:1d:a3:5f:
e5:6f:e9:41:6c:e6:ce:38:60:25:ad:75:b2:1e:8f:e6:8b:c9:
9c:d1:17:64:89:8b:6b:4c:d8:d5:fe:1a:33:d2:3f:e2:42:77:
f3:df:b9:2c:14:a8:04:f1:6c:40:a1:5c:2f:4b:87:a7:c2:3d:
58:83:cd:d7:cf:60:2b:4f:c9:7f:99:71:35:02:00:5a:a7:27:
fb:6c:05:95:30:e7:9f:f0:ce:3b:d9:0a:3a:f1:d9:c5:0f:f7:
c9:f3:36:19:fe:f3:04:6c:79:c3:b1:8a:4d:b3:1d:89:54:7f:
46:60:8d:04:d9:81:a7:f2:0b:4e:96:c5:c4:54:ab:1f:d1:c5:
9b:3d:a9:db:4c:97:7d:88:0d:76:af:e8:2a:c9:01:ad:28:3c:
36:7a:52:ff
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUEC2T5IR7YddpD3CvyfOnN+JIc0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTAyMTEyMzU3MzVaFw0yNjAyMTEwMDAyMzVaMDMxMTAvBgNV
BAMTKEFGNkQ1MTVBMEQ0OUY1MjYxQkFFNzQ3Qjg3MTNFMURFMEY3MjRGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSmwjXlGaP5T3uiAeVxidw9uZK
IlD3ydpvvNCfLU05UqcUDIv0pZDU6cRJ8Yblpamj324Gc83Se0vxkuCfv8hRim7z
kAHMdY3aMA9jwPcG9toqx3hRVvNOJUQm+VdgJtXv7em2UjvBY70JYHtjlBB8xA9E
yfkbbKz5QESJ9QzSGBx6cx+06QOqROrUHrLhpJ5Jbqi7BOmtIBzUCuLP5HKJ9jeb
eLY1S+YjARhcDL1g3ZT50B6UP5L/JmLxVLXI9zDdO191VP4wCdVrhD3s/YsU+tOI
gI+Ce/8R1SL0GsgY8VINaFugfYJMWdkv5Ojxyicii51uc+MuIAl0A8TTbmYbAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUr21RWg1J9SYbrnR7hxPh3g9yT2IwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDMwMmUzMzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYwkMA0G
CSqGSIb3DQEBCwUAA4IBAQALFLc5p+kZ9d2BOT+/hfsx1kWtbdnWnOo8egSGzIkc
4K55dduSBvtfImpDsbJyqGu89azwPKlEPMbpf3Im/pv8SmtOYZkwWNIITkKboeFe
LcoWNVdVqrwnWsodXKeNlr+f91LVvWO1DGodo1/lb+lBbObOOGAlrXWyHo/mi8mc
0RdkiYtrTNjV/hoz0j/iQnfz37ksFKgE8WxAoVwvS4enwj1Yg83Xz2ArT8l/mXE1
AgBapyf7bAWVMOef8M472Qo68dnFD/fJ8zYZ/vMEbHnDsYpNsx2JVH9GYI0E2YGn
8gtOlsXEVKsf0cWbPanbTJd9iA12r+gqyQGtKDw2elL/
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:07 2025 by rpki-client