Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20343030383636.roa
File: 34352e3134352e3234312e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: isison4lEFmpuglB8AvHt00nkg4o8BaIk82gdxFD9xY=
Subject key identifier: 01:41:7D:49:40:64:74:AC:02:06:0C:A0:D0:50:00:F3:BF:49:0C:D7
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 56B405D1E7C63D2D62B339238E297A30273A759A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 10 Jun 2024 09:29:08 +0000
ROA not before: Mon 10 Jun 2024 09:24:08 +0000
ROA not after: Mon 09 Jun 2025 09:29:08 +0000
asID: 400866
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b4:05:d1:e7:c6:3d:2d:62:b3:39:23:8e:29:7a:30:27:3a:75:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 10 09:24:08 2024 GMT
Not After : Jun 9 09:29:08 2025 GMT
Subject: CN=01417D49406474AC02060CA0D05000F3BF490CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:da:88:25:7c:6b:57:58:ff:83:3a:68:7e:
22:fe:6d:e1:70:c5:00:98:01:ab:5b:ba:a6:b5:ff:
de:36:2d:36:76:74:16:ca:be:49:00:17:ec:5a:37:
f3:05:9f:12:8a:d9:ac:4c:eb:67:86:38:21:19:a9:
9a:03:e9:27:87:72:a4:51:4e:33:84:cc:50:f0:7b:
d0:78:d4:82:a9:7b:93:a9:4d:aa:8c:b8:76:be:21:
b7:fb:7e:4d:c1:6b:8e:81:34:8c:8c:4f:50:5d:da:
68:2a:c0:70:74:5e:97:d2:26:a7:10:9a:13:8d:82:
ce:1d:b4:ba:e4:2b:b6:de:4e:ab:cc:3b:33:61:99:
cb:db:cb:f0:66:07:0b:45:fa:0a:40:bd:56:d4:4c:
06:66:55:5b:0d:f8:cb:fc:f9:22:f6:11:5d:1d:eb:
0a:b6:d4:0e:76:0f:08:96:f9:b7:2f:30:72:58:fd:
88:40:ff:5d:ad:d5:c9:6c:d3:c1:66:e6:ff:6b:fa:
36:76:ac:77:98:e4:2e:2b:15:f8:40:7a:71:27:5c:
fc:74:46:d6:63:93:28:a7:28:6c:83:1a:d2:8a:1d:
a0:71:9a:3e:59:2b:2c:c2:58:18:76:8d:96:26:c9:
5f:f1:76:6c:df:bd:1d:44:0f:55:7b:ae:26:ca:3e:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:41:7D:49:40:64:74:AC:02:06:0C:A0:D0:50:00:F3:BF:49:0C:D7
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bd:f7:48:9a:90:41:3d:b3:5a:d8:77:18:83:72:b6:08:15:
ca:af:81:28:fc:eb:31:b6:76:d2:43:a1:23:1b:5e:28:ff:72:
a7:cf:dd:99:8d:8e:4d:65:72:a6:11:6a:06:50:b2:d5:db:c1:
f9:bd:55:9e:d3:a7:2c:49:48:f4:1a:ed:22:77:3c:6c:0a:e6:
f7:25:ab:49:76:0b:96:8f:55:d8:05:b1:95:cf:4c:5b:1c:a2:
36:79:98:d7:50:94:46:a3:ff:27:b5:d2:66:60:26:9a:15:93:
f4:24:aa:00:10:9a:73:aa:15:72:5d:96:ba:bd:44:21:95:6c:
e5:e0:a6:18:c3:5b:29:9f:ad:4e:e9:5b:d5:1c:cc:34:d3:90:
40:b0:a1:45:16:8e:fd:2c:b7:d8:4f:be:54:75:45:e0:6c:83:
82:38:46:7f:f7:0d:ff:91:e5:b0:0e:49:20:43:e5:45:db:24:
88:fc:13:15:d4:28:f2:ba:32:53:f5:53:5a:f3:c3:62:c9:3e:
47:b2:a6:25:1d:1c:40:35:47:74:f4:5b:83:c2:14:1a:f2:c8:
98:38:b9:ce:18:d7:b6:b0:09:e6:ac:82:a0:4b:dc:00:d5:51:
60:f0:1d:e6:c9:3f:30:23:b0:33:23:95:c7:f5:0f:68:43:af:
65:81:51:2a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVrQF0efGPS1iszkjjil6MCc6dZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNDA2MTAwOTI0MDhaFw0yNTA2MDkwOTI5MDhaMDMxMTAvBgNV
BAMTKDAxNDE3RDQ5NDA2NDc0QUMwMjA2MENBMEQwNTAwMEYzQkY0OTBDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInNqIJXxrV1j/gzpofiL+beFw
xQCYAatbuqa1/942LTZ2dBbKvkkAF+xaN/MFnxKK2axM62eGOCEZqZoD6SeHcqRR
TjOEzFDwe9B41IKpe5OpTaqMuHa+Ibf7fk3Ba46BNIyMT1Bd2mgqwHB0XpfSJqcQ
mhONgs4dtLrkK7beTqvMOzNhmcvby/BmBwtF+gpAvVbUTAZmVVsN+Mv8+SL2EV0d
6wq21A52DwiW+bcvMHJY/YhA/12t1cls08Fm5v9r+jZ2rHeY5C4rFfhAenEnXPx0
RtZjkyinKGyDGtKKHaBxmj5ZKyzCWBh2jZYmyV/xdmzfvR1ED1V7ribKPqQJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUAUF9SUBkdKwCBgyg0FAA879JDNcwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtkfEwDQYJKoZIhvcNAQELBQADggEBACC990iakEE9s1rYdxiDcrYIFcqvgSj8
6zG2dtJDoSMbXij/cqfP3ZmNjk1lcqYRagZQstXbwfm9VZ7TpyxJSPQa7SJ3PGwK
5vclq0l2C5aPVdgFsZXPTFscojZ5mNdQlEaj/ye10mZgJpoVk/QkqgAQmnOqFXJd
lrq9RCGVbOXgphjDWymfrU7pW9UczDTTkECwoUUWjv0st9hPvlR1ReBsg4I4Rn/3
Df+R5bAOSSBD5UXbJIj8ExXUKPK6MlP1U1rzw2LJPkeypiUdHEA1R3T0W4PCFBry
yJg4uc4Y17awCeasgqBL3ADVUWDwHebJPzAjsDMjlcf1D2hDr2WBUSo=
-----END CERTIFICATE-----
Generated at Wed Jul 10 01:14:41 2024 by rpki-client on console-fra.rpki-client.org