Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wy1TCJFSAAweE0Gx+T6gK7P/xWrc9J9VvxnEI5ZkcsY=
Subject key identifier: 52:20:EF:91:9E:B8:F1:A0:57:86:47:F6:7E:FD:A8:BC:D3:02:8E:83
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5A77FA6D4B69024E390DD4BC8BFF0304380577E4
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
Signing time: Sun 14 Apr 2024 08:06:46 +0000
ROA not before: Sun 14 Apr 2024 08:01:46 +0000
ROA not after: Sun 13 Apr 2025 08:06:46 +0000
asID: 834
IP address blocks: 45.140.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 11:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:77:fa:6d:4b:69:02:4e:39:0d:d4:bc:8b:ff:03:04:38:05:77:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 14 08:01:46 2024 GMT
Not After : Apr 13 08:06:46 2025 GMT
Subject: CN=5220EF919EB8F1A0578647F67EFDA8BCD3028E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:1f:4e:fc:40:f9:0e:38:5b:a1:86:aa:45:
d9:d6:02:e6:00:02:e1:30:28:91:ec:0b:d1:75:ac:
01:e1:55:a1:29:22:39:ee:f0:18:04:70:7a:65:ff:
1b:c9:b9:b7:7f:ee:ac:fb:2c:86:aa:6f:4c:51:23:
9c:a1:00:d4:bf:8b:1b:d4:1c:15:9b:d6:25:39:10:
1d:a3:c5:c3:46:80:6e:9d:ac:48:e3:59:d1:d5:d1:
00:66:98:6e:57:ed:93:62:ec:a3:06:d1:5e:38:5e:
85:35:60:95:c1:38:81:67:da:d9:5f:83:0d:e1:7f:
ff:c9:d4:c9:c4:7c:a9:4f:fa:93:54:d5:98:8a:37:
7d:ba:6a:31:b5:8b:08:49:96:59:a6:43:7f:26:84:
04:50:90:e4:30:b9:7d:55:eb:1c:bd:c5:ea:f7:11:
5c:25:a1:9b:d9:06:c9:a6:f8:5d:ff:f7:bc:ac:6c:
cb:48:2c:50:e0:1d:42:e9:61:31:f1:0f:0d:6e:f1:
71:b4:7a:e0:4f:06:6f:c3:5d:22:c1:d6:b7:04:4e:
1e:8b:e5:43:eb:f8:ff:a7:93:76:f7:a6:b3:e6:f3:
47:8c:d5:16:d1:d9:a2:ce:78:7c:67:2d:a6:9f:3c:
02:1d:d1:34:db:6e:57:24:10:da:da:c8:86:89:7f:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:EF:91:9E:B8:F1:A0:57:86:47:F6:7E:FD:A8:BC:D3:02:8E:83
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4d:73:0f:fc:20:e9:c6:f7:f1:3b:d3:a1:f4:af:08:9d:c9:
6e:83:d2:af:ac:3f:5f:a0:a7:60:8d:49:62:6c:83:9e:cb:90:
e7:e2:9c:b0:62:10:84:7e:0c:62:d5:34:2a:af:3a:d6:3a:85:
dd:c0:08:f0:32:0c:53:d3:6b:83:c9:ab:28:70:a2:ad:6a:60:
f4:ae:8f:dc:2b:ac:d5:17:45:94:f2:90:47:06:80:3a:dd:67:
b8:d7:e9:7b:e8:e7:cf:cc:8b:6b:9a:02:c7:ea:65:84:91:e1:
89:2f:fc:17:b0:ac:f2:46:4b:d6:ff:d9:9e:38:3b:e2:bc:c9:
13:9d:8f:60:fe:b9:64:ec:03:b7:4e:69:7d:1b:3f:78:f5:38:
fc:97:0f:5a:1e:9f:42:1b:8a:61:0b:4d:33:8c:64:e6:79:27:
ff:7c:91:b5:a0:a9:60:e3:b1:bd:0a:a9:39:0c:89:7a:3d:ba:
fa:6c:39:60:c8:25:d7:70:d4:a8:8a:90:da:d3:dd:2e:dc:10:
65:0c:58:be:77:d8:ce:7b:10:95:6c:54:b5:a3:41:15:8f:79:
e7:c7:d6:50:c2:29:84:37:55:e9:93:66:10:0d:87:76:2d:b5:
fe:60:19:2c:b7:0a:49:e5:e5:dd:d8:81:22:37:d8:5e:a1:91:
0e:36:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 16:50:22 2024 by rpki-client on console-ams.rpki-client.org