Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
File: 34352e3134352e3234302e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier: KAXQTUZC9YfBKUbtIrpZIfG1sKqs+ZrZVnU72o/fGFc=
Subject key identifier: C1:13:23:98:18:21:DC:4A:AA:92:84:2D:F7:00:3D:92:95:81:9A:C5
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1E0378A2743C04630BAB12C3509C4CF2CBD857E2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
Signing time: Wed 27 Sep 2023 12:05:35 +0000
ROA not before: Wed 27 Sep 2023 12:00:35 +0000
ROA not after: Wed 25 Sep 2024 12:05:35 +0000
asID: 51847
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 10:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:03:78:a2:74:3c:04:63:0b:ab:12:c3:50:9c:4c:f2:cb:d8:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:35 2023 GMT
Not After : Sep 25 12:05:35 2024 GMT
Subject: CN=C11323981821DC4AAA92842DF7003D9295819AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:d2:a3:6e:96:51:cc:1e:18:11:c0:0e:d0:
64:f1:16:14:0e:57:d6:f9:f9:22:ee:b0:56:8b:39:
d3:19:77:df:0d:d4:52:99:71:26:fd:4e:06:f3:cb:
36:64:c8:fe:6c:d8:5b:b7:0a:52:d0:80:6e:10:4c:
76:b7:5d:17:be:8a:56:ce:a1:69:26:1a:79:e7:08:
8e:db:65:67:79:0a:fb:98:df:2d:04:98:94:31:db:
a9:42:8a:02:62:5e:27:68:ec:b1:55:2c:64:5a:7d:
d4:42:d6:cc:3f:2b:64:38:e1:10:71:01:96:eb:1f:
40:98:bb:39:b0:c7:e6:5e:bf:bf:88:3e:31:ae:9f:
a8:0b:d0:31:40:a3:9d:86:88:3e:6a:a2:34:65:19:
cf:b2:b0:57:1f:07:0c:6a:56:f6:2b:55:7e:97:b3:
56:ad:48:2e:a4:35:ff:fb:9f:c7:2d:78:e6:73:e8:
8f:ab:a4:e4:7c:7a:d9:60:e9:53:7a:87:63:27:6b:
fc:53:9f:94:70:24:fd:04:f6:15:f9:05:07:9f:60:
cb:69:7d:a7:15:5b:3b:ed:23:9f:10:10:e6:a2:ea:
f5:61:5e:dd:97:56:c7:55:2d:f5:96:9d:a6:62:db:
c2:f3:0f:45:44:23:8b:c9:cf:91:47:a1:9c:08:3d:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:23:98:18:21:DC:4A:AA:92:84:2D:F7:00:3D:92:95:81:9A:C5
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9b:ae:68:c7:bb:44:0e:1e:ab:02:d5:33:8b:f0:c1:d2:55:
87:d4:22:96:fa:66:cb:23:6d:76:57:ed:e7:1f:5e:66:e2:cc:
53:f0:b9:79:1a:f0:ea:0d:ba:45:c6:ad:70:f0:70:cb:3a:3d:
aa:cf:3f:4a:2c:4f:51:2f:f8:54:a7:3e:79:b3:d8:a4:43:41:
ad:cf:fc:a6:81:a3:e4:06:09:64:c8:c5:15:b4:9a:a9:72:f3:
07:d3:03:e0:0e:e1:16:60:d0:03:c8:6e:97:f9:20:24:c0:b5:
0b:53:eb:40:3c:a7:b1:25:60:4c:7b:b4:14:23:07:d1:cc:cc:
b3:70:0a:0e:8c:5a:3b:d7:ab:67:c3:e7:52:ae:65:bc:86:7c:
1b:4f:43:d6:ce:9b:2c:06:f7:5e:3a:77:87:e9:d5:45:44:5e:
4c:5f:10:0e:1e:a9:26:17:33:4f:81:97:92:d4:b4:08:bd:5b:
31:bb:2e:8e:4f:31:b1:ec:b4:33:e3:45:53:aa:c7:88:ac:ca:
74:3e:9e:7e:7d:93:c9:c8:61:9a:f9:e4:32:6d:21:03:96:22:
41:d3:01:72:26:29:36:4d:2e:d4:dd:80:b5:4d:c9:44:be:15:
8d:7a:30:05:00:7d:ef:96:a1:98:ba:53:2f:00:30:a6:87:7f:
17:c8:10:63
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 4 14:43:35 2024 by rpki-client on console-ams.rpki-client.org