Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cfn07GRQvyUmqbL8pmVqRWze7KnVPc0hGXtPtJV+mbA=
Subject key identifier: 33:5E:95:1C:06:DC:89:C6:22:BD:34:99:83:2F:B3:58:36:5B:6C:53
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5DE1A8AF767CF000F8EA78AA610E243D10E60D5C
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:27:09 +0000
ROA not before: Thu 11 Jul 2024 09:22:09 +0000
ROA not after: Thu 10 Jul 2025 09:27:09 +0000
asID: 834
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 01:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e1:a8:af:76:7c:f0:00:f8:ea:78:aa:61:0e:24:3d:10:e6:0d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 11 09:22:09 2024 GMT
Not After : Jul 10 09:27:09 2025 GMT
Subject: CN=335E951C06DC89C622BD3499832FB358365B6C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:26:71:e2:3b:be:30:0a:15:f9:12:cb:5d:
5b:91:99:ec:4c:78:03:c4:54:4f:91:63:25:3b:cf:
df:61:c2:8f:8d:94:f2:79:66:7c:ec:4b:4c:d3:d2:
03:13:0b:c5:f4:a1:7f:db:38:81:7b:2a:fe:54:21:
3b:3f:85:0b:32:a3:91:e0:64:72:4a:1a:4e:67:a5:
f1:25:9d:d5:73:ed:5f:ab:9a:58:6b:19:91:92:8a:
8c:e3:b0:63:61:86:5e:99:37:5a:57:1f:36:22:d7:
a3:07:e9:f8:f1:1c:f6:30:2a:87:4f:dd:d5:41:76:
ab:5e:b5:2a:6e:0a:ba:75:0b:6b:a2:64:78:7b:61:
39:b9:23:04:10:a0:4a:15:81:c1:03:d5:a8:8b:0f:
9c:c4:94:15:0e:1f:1b:4e:25:40:e7:96:92:f0:02:
18:77:e2:27:4b:b2:5f:be:ee:24:e8:2d:6d:bf:02:
af:16:0b:e8:7f:9d:dd:04:e8:4b:9f:27:e8:93:2a:
a7:83:a0:ce:c1:9b:9b:ad:8b:ae:a5:7e:a9:3e:00:
b5:60:05:bd:41:05:46:bc:b7:c8:b2:1c:a1:92:99:
08:a0:26:64:a1:b3:02:8b:b5:df:ac:21:2a:b6:fd:
17:73:91:4b:80:21:9c:ff:c1:33:b5:2d:d9:76:87:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:95:1C:06:DC:89:C6:22:BD:34:99:83:2F:B3:58:36:5B:6C:53
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d0:09:6f:c6:c6:80:36:f1:d5:da:45:c2:00:8f:aa:1e:2b:
8a:af:5e:75:bb:22:dc:d4:c1:0b:bc:51:a2:b3:6d:9b:25:a0:
eb:7f:d2:dc:ee:44:48:fc:c2:13:ce:6a:5f:76:af:26:a9:58:
57:83:ff:17:05:86:fb:43:65:46:cc:ed:87:e4:7d:17:04:5a:
96:ae:d1:3f:d5:03:61:4e:4f:75:4a:86:e0:49:24:d2:2d:30:
2e:34:14:a4:28:99:39:bc:ba:85:d7:ad:b4:b6:40:2f:d4:4a:
c8:08:2e:69:3d:68:43:0e:df:c7:89:d7:f6:d6:43:aa:1c:c9:
7a:bd:b1:1a:cf:88:9a:e6:5b:76:cd:43:93:fe:f4:e8:97:61:
8b:a3:f7:01:a4:fa:91:5d:94:d4:2e:ff:5a:b5:10:99:26:1f:
ae:06:d6:d6:33:99:99:fa:ea:c7:ef:a1:78:05:19:b5:5c:f5:
c1:69:41:51:90:f7:fd:5f:60:cf:e4:fd:c2:8f:c0:65:df:d5:
a9:e4:7d:67:41:9a:75:3a:1d:06:32:15:fd:e0:01:4e:ab:e8:
1d:4b:0b:61:e6:f0:67:73:6d:be:f2:19:72:ae:1f:6b:a8:c1:
63:1e:3e:6b:c1:55:d3:a2:83:9b:91:ce:53:f6:19:f3:fe:13:
36:1f:28:1b
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org