Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e203232373831.roa
File: 34352e3134302e33392e302f32342d3234203d3e203232373831.roa (raw, json)
Hash identifier: YvB0DoEnur+Ie+xcbIebSX/colcXNQbTpgBYrRLyn1Q=
Subject key identifier: 4E:6A:5A:A5:1E:1F:E2:2F:EE:01:51:86:D0:D8:60:42:D6:14:4F:5A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6E1105E3FDFC9ED40744B6D27535D470B4DA66E2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e203232373831.roa
Signing time: Wed 27 Dec 2023 23:37:55 +0000
ROA not before: Wed 27 Dec 2023 23:32:55 +0000
ROA not after: Wed 25 Dec 2024 23:37:55 +0000
asID: 22781
IP address blocks: 45.140.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:11:05:e3:fd:fc:9e:d4:07:44:b6:d2:75:35:d4:70:b4:da:66:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Dec 27 23:32:55 2023 GMT
Not After : Dec 25 23:37:55 2024 GMT
Subject: CN=4E6A5AA51E1FE22FEE015186D0D86042D6144F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:b9:d3:54:4f:24:a7:ff:67:21:e3:45:f2:
33:4b:67:7d:d6:a2:af:0e:76:7d:13:92:0a:a0:38:
50:73:db:78:ab:3d:98:e1:65:d8:c4:ff:2c:e1:1f:
06:ed:8a:d9:57:82:21:09:0d:18:e1:22:0a:38:02:
1e:3c:39:9c:8f:60:e3:6c:d5:df:b0:7e:92:f0:f4:
85:59:e7:e3:32:c9:83:fe:df:b4:0c:dd:a5:ba:b6:
9f:bd:1f:1e:5e:e2:08:5b:51:a1:6b:42:3a:0f:19:
3a:af:1a:8c:a6:27:f6:7c:e3:3e:79:c4:ad:c8:db:
aa:9f:39:81:3f:f0:8b:08:85:78:a2:cc:62:62:74:
4f:6b:8e:6b:1d:5c:04:36:02:ec:e1:a8:3b:65:35:
75:ec:11:15:bd:e6:33:6c:65:5a:5e:e5:75:3c:56:
f4:6f:b9:6f:f5:c0:8a:69:3e:b3:6d:01:d9:f7:aa:
22:49:23:38:eb:09:b4:9f:40:19:f7:3e:a2:82:ed:
3a:c8:28:1c:78:39:23:5f:6a:e2:ff:e0:c0:93:0e:
5e:c2:1e:a8:32:97:9b:b6:8c:83:76:8d:ba:25:2b:
ba:1b:a4:c3:f3:e8:3a:76:d5:df:50:fb:34:70:1e:
82:68:c7:af:bd:2f:2e:8f:40:ed:2f:0e:6e:ba:21:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:5A:A5:1E:1F:E2:2F:EE:01:51:86:D0:D8:60:42:D6:14:4F:5A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e203232373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.39.0/24
Signature Algorithm: sha256WithRSAEncryption
06:78:00:62:3b:fb:ec:ba:91:60:82:0b:89:0f:30:df:f2:72:
d0:47:1e:ab:2a:39:9b:42:73:5e:58:19:85:c7:31:45:83:9d:
d4:57:16:c7:d5:6f:39:fe:83:6f:42:86:50:b0:c6:d0:0c:ad:
81:ba:cc:20:50:62:11:db:24:5c:02:3b:22:49:b9:ca:90:9c:
e3:a4:db:84:71:45:e4:08:0e:35:2c:8e:d7:99:4b:e7:bf:3a:
04:7d:ee:b7:c0:cd:c3:c6:a1:34:c4:b5:2a:82:f0:33:aa:85:
ba:24:43:dd:98:10:c3:24:2b:30:5d:a2:d3:f8:36:84:a0:0e:
0f:05:62:5b:be:01:84:78:6a:96:e8:a7:3e:c7:00:d8:89:6a:
d9:e7:79:1c:00:1a:bc:23:b5:03:08:79:52:a2:22:ff:7a:32:
ef:4a:62:1b:49:c7:eb:d9:90:bd:10:37:c8:f7:a2:df:6b:ac:
13:04:39:1c:fc:b7:61:d7:03:4c:80:cd:ca:1e:bb:ff:60:55:
61:c3:3b:82:64:09:92:32:80:52:38:30:26:f8:2f:95:8c:4b:
2f:ab:d1:05:1f:5f:7c:a1:f3:2e:1e:68:b9:d3:b7:76:01:f3:
9e:d2:18:ad:ad:91:5f:71:d9:57:1f:1f:49:b9:3b:43:4b:9b:
a0:4e:76:ec
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbhEF4/38ntQHRLbSdTXUcLTaZuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzEyMjcyMzMyNTVaFw0yNDEyMjUyMzM3NTVaMDMxMTAvBgNV
BAMTKDRFNkE1QUE1MUUxRkUyMkZFRTAxNTE4NkQwRDg2MDQyRDYxNDRGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVGLnTVE8kp/9nIeNF8jNLZ33W
oq8Odn0TkgqgOFBz23irPZjhZdjE/yzhHwbtitlXgiEJDRjhIgo4Ah48OZyPYONs
1d+wfpLw9IVZ5+MyyYP+37QM3aW6tp+9Hx5e4ghbUaFrQjoPGTqvGoymJ/Z84z55
xK3I26qfOYE/8IsIhXiizGJidE9rjmsdXAQ2AuzhqDtlNXXsERW95jNsZVpe5XU8
VvRvuW/1wIppPrNtAdn3qiJJIzjrCbSfQBn3PqKC7TrIKBx4OSNfauL/4MCTDl7C
Hqgyl5u2jIN2jbolK7obpMPz6Dp21d9Q+zRwHoJox6+9Ly6PQO0vDm66IaidAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUTmpapR4f4i/uAVGG0NhgQtYUT1owHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDMwMmUzMzM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM3MzgzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2M
JzANBgkqhkiG9w0BAQsFAAOCAQEABngAYjv77LqRYIILiQ8w3/Jy0Eceqyo5m0Jz
XlgZhccxRYOd1FcWx9VvOf6Db0KGULDG0AytgbrMIFBiEdskXAI7Ikm5ypCc46Tb
hHFF5AgONSyO15lL5786BH3ut8DNw8ahNMS1KoLwM6qFuiRD3ZgQwyQrMF2i0/g2
hKAODwViW74BhHhqluinPscA2Ilq2ed5HAAavCO1Awh5UqIi/3oy70piG0nH69mQ
vRA3yPei32usEwQ5HPy3YdcDTIDNyh67/2BVYcM7gmQJkjKAUjgwJvgvlYxLL6vR
BR9ffKHzLh5oudO3dgHzntIYra2RX3HZVx8fSbk7Q0uboE527A==
-----END CERTIFICATE-----
Generated at Wed Mar 27 03:58:00 2024 by rpki-client on console-ams.rpki-client.org