Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: a+qAn9AeYrJ4/EGl9jZG24wY6BLW9jXK9ITGvNNDcHE=
Subject key identifier: 60:E3:DF:BD:C4:35:17:76:DC:B2:9E:5A:93:AE:83:DE:53:8A:3B:E2
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5E15780093434A5DB575DCCA4AA73EC7DF1D878A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
Signing time: Mon 04 Mar 2024 10:05:58 +0000
ROA not before: Mon 04 Mar 2024 10:00:58 +0000
ROA not after: Mon 03 Mar 2025 10:05:58 +0000
asID: 834
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:78:00:93:43:4a:5d:b5:75:dc:ca:4a:a7:3e:c7:df:1d:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 4 10:00:58 2024 GMT
Not After : Mar 3 10:05:58 2025 GMT
Subject: CN=60E3DFBDC4351776DCB29E5A93AE83DE538A3BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:eb:67:00:ce:8a:3a:4a:9a:3c:c3:d5:65:
64:56:51:b5:c4:69:3f:dc:12:6b:16:58:f9:ce:27:
17:05:1d:6b:67:02:15:b1:9c:6a:0d:86:33:87:1c:
fe:fb:dd:6f:b3:06:36:82:5b:ed:1b:f5:86:01:61:
a5:d6:b4:23:4d:0b:7a:c3:76:26:8a:d4:ea:8b:23:
9e:b8:7e:34:09:bd:1d:3a:01:e0:6a:81:a1:aa:c1:
72:e1:5f:52:fb:15:41:11:bd:6f:7d:3c:57:58:95:
6c:94:16:d4:c6:0f:e2:03:37:c9:a1:1b:cd:13:7f:
72:c7:7a:08:e4:31:2c:a8:9e:d7:e9:c9:8b:f3:b5:
65:9b:48:eb:42:f9:39:35:6b:9f:19:55:87:e0:52:
81:ae:8e:e0:b5:6d:71:e4:02:6b:fa:52:87:e4:9f:
c8:02:4d:52:5f:84:23:bc:8f:c8:f0:31:d0:b0:2b:
e9:93:0f:68:2a:4f:2d:33:dc:0a:dc:fd:bb:69:0e:
c4:da:11:f0:d7:de:69:9b:c0:d8:bb:66:e4:36:44:
45:55:2a:1f:30:b6:82:2b:5a:6a:55:b9:a8:76:ca:
e7:4e:23:a9:14:10:c8:17:b7:0f:22:5e:6e:6d:c5:
da:a8:3b:e1:bf:cb:e6:88:d1:3d:8b:1c:7d:b6:7e:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:DF:BD:C4:35:17:76:DC:B2:9E:5A:93:AE:83:DE:53:8A:3B:E2
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
27:83:95:e6:f5:49:d1:59:0a:16:89:3d:f1:6c:28:52:0e:85:
8b:ec:ad:0a:bc:0a:4d:d6:0b:96:f0:b9:ce:42:8f:36:bb:91:
3f:c5:55:ed:13:41:a3:01:c2:85:43:1c:d7:aa:a9:bf:4b:fd:
11:48:7a:67:18:75:68:7d:86:e8:c8:07:be:87:e1:8a:13:94:
e5:89:df:a6:b9:c9:d2:e0:1c:e3:16:1a:21:b3:fa:0a:bf:25:
ff:3e:bf:cc:60:04:c4:33:43:a1:20:5e:27:cc:36:5a:73:84:
8d:bc:6d:d7:8c:0f:95:dd:3f:cc:90:21:7f:d0:18:61:6c:24:
2d:fa:29:a5:8d:f6:51:8b:c8:26:9d:21:13:3a:00:49:e7:c0:
fb:01:ff:cb:fa:12:57:68:44:05:5a:92:13:26:69:66:d7:dc:
8a:23:84:31:d0:cf:98:07:2a:a4:2c:ca:c4:3c:2d:01:82:ef:
db:cb:e6:72:3a:16:97:64:77:8f:94:62:f0:cc:10:b0:de:61:
19:c0:1e:22:28:65:20:ae:5d:da:ab:8a:52:98:9d:13:3e:6f:
b1:1b:91:11:2d:da:75:02:8b:41:59:b1:ff:45:67:a8:9d:51:
f1:4f:c1:25:eb:67:c8:78:54:84:31:5d:80:15:7d:b2:fa:4c:
b5:e8:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 20:58:00 2024 by rpki-client on console-fra.rpki-client.org