Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e203231383539.roa
File: 34352e3134302e33372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: jw2EGwh//VEHKRVJvlGW2pmW+g/2SowMfUHsUR2PdMI=
Subject key identifier: E7:88:5C:B7:7D:F0:07:C6:06:EB:98:5D:5D:3B:EF:6F:66:5B:75:4D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 18D286983B2894AB93F6349EF367F2D54F81B3EE
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e203231383539.roa
Signing time: Tue 12 Mar 2024 08:47:10 +0000
ROA not before: Tue 12 Mar 2024 08:42:10 +0000
ROA not after: Tue 11 Mar 2025 08:47:10 +0000
asID: 21859
IP address blocks: 45.140.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d2:86:98:3b:28:94:ab:93:f6:34:9e:f3:67:f2:d5:4f:81:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 12 08:42:10 2024 GMT
Not After : Mar 11 08:47:10 2025 GMT
Subject: CN=E7885CB77DF007C606EB985D5D3BEF6F665B754D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:b0:86:b6:17:c0:5e:a3:66:2e:3b:57:6c:
9b:f8:e8:63:72:fe:c7:a4:56:2c:41:ce:56:53:cb:
51:e8:52:a6:b4:4b:f1:ec:29:65:ba:04:03:40:c6:
ae:f2:c0:f2:97:a3:6e:24:b4:90:ef:34:24:96:f5:
23:e2:bf:7a:c5:8c:69:78:cc:a7:8a:05:41:1f:af:
07:50:ac:e2:81:f7:3c:0b:51:6d:41:6c:b7:86:39:
46:e4:e8:64:e2:62:f6:5e:9c:cc:8f:9d:25:b7:fb:
67:af:4c:06:91:13:5b:1e:57:71:53:a1:4a:6f:1e:
d4:11:49:23:4a:6b:b3:75:87:3d:35:bc:4d:86:ae:
bf:7e:cd:7a:30:25:2f:df:ef:26:23:cb:b9:ca:f7:
6f:91:1a:d8:de:9a:6c:4e:4a:dc:83:86:5b:ac:ec:
c5:35:8e:d4:d4:27:f8:e0:55:af:c0:a8:a1:e4:e2:
1d:9e:c3:3a:8b:d3:94:f4:8d:2e:53:f5:d5:22:6d:
b8:8d:e8:a0:f3:e7:05:94:d0:63:02:22:d2:69:31:
03:5e:5c:6f:10:26:96:92:57:69:28:89:de:94:19:
3d:39:fa:c1:0a:89:96:b9:bf:cb:da:bd:33:71:68:
c0:b1:66:60:8a:de:9e:29:36:cf:d6:56:6a:da:fe:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:5C:B7:7D:F0:07:C6:06:EB:98:5D:5D:3B:EF:6F:66:5B:75:4D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.37.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4f:6a:85:83:c7:03:46:5e:62:75:01:00:2c:b0:66:51:cb:
77:4b:58:4f:a2:f1:0e:11:ba:ca:ab:c3:55:5c:19:95:3b:88:
2f:ec:7b:93:14:f3:c1:1f:aa:00:6f:75:84:2d:54:95:7f:27:
33:77:a6:c8:4f:38:dc:2d:7c:26:33:53:97:1b:cb:be:95:fa:
9e:1e:1c:62:16:5c:f1:56:15:17:9a:f8:d0:01:7d:41:21:09:
c0:cb:9d:86:03:cd:cd:57:bf:cb:42:de:cc:76:2d:5f:cd:99:
c1:54:f0:ef:eb:b7:fb:8d:b1:06:3c:67:cd:f1:c8:21:8d:eb:
0e:2f:00:1f:60:fa:6c:5a:fe:a0:de:fc:05:82:08:81:c7:85:
1d:89:e9:2d:3f:6b:b5:91:73:21:4b:99:94:9c:8d:31:d8:6b:
20:81:32:71:b0:c9:82:ac:18:69:64:75:7b:ee:1a:6b:01:fa:
3d:7a:9a:78:44:54:f5:2f:57:e9:22:fe:c0:9d:ed:9c:ec:dd:
f9:4b:39:52:7b:29:e5:9e:75:34:cb:75:a8:8f:a2:a4:2a:e5:
50:eb:71:76:b2:42:cf:c1:f9:bb:2a:41:91:47:b1:a2:5d:83:
d0:05:94:d7:55:a8:46:38:44:31:24:3f:c2:42:88:da:ba:a4:
d1:ae:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 01:07:45 2024 by rpki-client on console-ams.rpki-client.org