Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa (raw, json)
Hash identifier: SCJxXkmo8jLnHcNvXXfZCFoof84J57GurnT5VBwJTBs=
Subject key identifier: 97:A3:98:A8:89:97:CF:0D:0B:0E:77:F4:37:A1:FA:30:6B:42:FE:F9
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 142BFC23AA7D89D772272FBD86628DED200FD78A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa
Signing time: Wed 27 Sep 2023 12:05:26 +0000
ROA not before: Wed 27 Sep 2023 12:00:26 +0000
ROA not after: Wed 25 Sep 2024 12:05:26 +0000
asID: 151487
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 10:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2b:fc:23:aa:7d:89:d7:72:27:2f:bd:86:62:8d:ed:20:0f:d7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:26 2023 GMT
Not After : Sep 25 12:05:26 2024 GMT
Subject: CN=97A398A88997CF0D0B0E77F437A1FA306B42FEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:c8:02:94:ab:23:31:80:e7:2d:f6:ee:82:
12:97:a3:57:6e:87:54:e4:15:45:62:9f:d1:2c:44:
9c:e5:5b:53:7e:6e:8c:b5:90:a2:3b:1f:01:a5:02:
33:41:d6:dc:d8:2a:e1:f2:b6:16:6a:56:16:75:09:
f6:a6:3d:46:23:d1:fc:7f:aa:cf:cf:b7:75:5f:0a:
85:f6:f4:9e:4e:37:23:1e:eb:fa:df:5a:50:81:e8:
b5:7e:3c:08:d4:c6:97:a9:9f:00:9e:e4:62:fe:b0:
d3:4c:eb:56:6e:02:d0:58:62:6a:74:7a:aa:eb:e2:
e7:a4:fa:36:23:56:33:82:60:74:6a:41:80:a3:51:
f7:d0:f7:66:f9:98:6b:3e:3f:b4:53:97:b0:0b:d9:
24:1d:45:ee:54:d9:9e:4b:57:ae:ce:09:8a:23:6f:
c9:c7:e3:aa:3d:8a:5d:a0:0d:93:9c:9d:91:e5:8b:
62:10:e8:41:a1:a1:61:8e:12:25:9a:b3:1b:94:b3:
ec:ff:2f:af:c7:ca:93:50:c4:a1:f8:98:ac:50:ba:
bc:31:1a:45:0e:ac:e3:8f:1a:af:32:c5:0b:6b:27:
a2:36:9d:55:a1:f6:95:1f:34:48:84:66:ef:5e:cc:
06:d1:42:da:41:d4:67:6d:dd:32:9b:35:b9:7d:10:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:98:A8:89:97:CF:0D:0B:0E:77:F4:37:A1:FA:30:6B:42:FE:F9
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2e:b8:5b:0d:70:41:26:ca:ae:8d:8f:e2:77:87:97:f3:20:
92:ae:3c:d7:28:97:53:92:05:02:c0:8d:31:b0:01:17:f4:f7:
7d:e6:cf:a1:54:4a:fa:e2:ff:36:ff:97:4c:97:bd:ee:e4:b2:
e2:50:56:6f:32:a8:3f:5c:98:0c:e3:62:f5:7b:d3:fd:09:37:
88:75:07:09:e1:2a:a2:39:87:e4:10:e5:f2:06:fe:2c:9b:ac:
3e:7a:42:df:ab:b2:67:10:e8:86:16:02:a3:51:ee:81:d7:b8:
68:60:56:81:86:e2:71:96:03:da:e2:94:61:bf:51:14:71:49:
17:f5:c7:e7:bb:c7:e9:75:a6:62:fc:74:bc:34:33:95:f5:20:
bf:46:d4:46:b1:60:9c:7f:77:07:a2:0c:e4:1e:c5:5f:66:4b:
0f:5f:5c:6d:27:7f:d1:78:c4:19:da:dc:8e:6c:50:07:73:94:
10:74:db:55:45:d2:fa:a3:c0:15:20:ab:31:a8:0e:e4:5f:a6:
9f:71:e4:c3:af:f0:e4:9c:5d:30:e8:80:94:8f:fb:68:4b:88:
7a:5d:d5:63:10:5b:c1:5a:e2:27:08:95:03:5e:02:96:21:ba:
c1:03:f1:be:c8:90:48:11:3f:00:bf:1c:da:a7:00:4f:28:44:
01:39:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:34 2024 by rpki-client on console-fra.rpki-client.org