Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20343030383636.roa
File: 34352e3134352e3234332e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: hfiYRkTbiIsQFTDsaFG3BTzZGVdxGDJVnUzbKHvdnuk=
Subject key identifier: 4D:C3:10:BB:D2:5B:95:79:51:FE:C6:07:79:81:39:11:8E:BB:77:EA
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1101ADEDC5E0F18767947F5CF037CED39992AB60
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 10 Jun 2024 09:29:07 +0000
ROA not before: Mon 10 Jun 2024 09:24:07 +0000
ROA not after: Mon 09 Jun 2025 09:29:07 +0000
asID: 400866
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:01:ad:ed:c5:e0:f1:87:67:94:7f:5c:f0:37:ce:d3:99:92:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 10 09:24:07 2024 GMT
Not After : Jun 9 09:29:07 2025 GMT
Subject: CN=4DC310BBD25B957951FEC607798139118EBB77EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:31:ab:a7:2f:1c:e0:99:2c:cc:95:dd:e2:
ca:77:5c:38:ff:c1:0f:cc:a4:c3:64:37:21:39:66:
e6:d9:2b:4d:bf:bf:76:07:e6:43:f0:f5:40:c9:6e:
52:a3:91:69:5e:ae:a8:a7:ed:52:c5:80:ea:1f:4e:
50:1b:17:9c:b8:3a:63:73:c7:02:c5:56:66:b8:72:
79:54:4f:df:fd:2a:53:e0:77:a8:a9:c8:23:55:1b:
38:44:fe:cb:20:e8:c1:b0:06:e3:73:f9:5d:16:e3:
41:03:50:cf:a3:fd:da:cd:a9:6a:1a:de:11:0e:2c:
70:39:98:fb:80:7d:6c:f6:00:e1:fd:38:df:99:74:
32:7b:e7:78:49:06:3b:7b:01:dd:bc:5f:9b:8e:42:
b4:f3:56:4d:70:23:97:62:1b:b0:d6:a3:21:cd:df:
89:9e:82:0b:a6:ca:6b:4b:f4:53:20:57:80:ae:75:
9e:80:44:30:5e:01:c6:e1:37:22:14:fa:7a:5b:63:
72:03:b4:9b:cc:cf:d7:fc:98:ca:63:03:60:c8:67:
0f:1a:dc:be:6c:e1:bb:41:7e:47:79:2d:29:83:78:
c5:87:a2:79:bd:f0:e3:09:e5:d1:10:39:e4:f4:60:
c2:d0:86:ff:94:38:1d:62:a3:ac:4c:1e:36:53:a9:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:10:BB:D2:5B:95:79:51:FE:C6:07:79:81:39:11:8E:BB:77:EA
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fc:88:d1:28:ed:7c:eb:f7:82:48:cb:5f:51:ce:ac:74:77:
11:c9:6e:07:bd:da:fa:99:27:7e:2e:11:d1:c9:35:81:1f:5d:
60:d1:67:01:75:15:82:be:60:f0:d9:5f:5a:0c:f9:03:35:42:
66:a2:91:a2:7b:b5:8a:da:c6:3e:f8:81:6c:41:51:f1:2c:b4:
23:34:e6:f5:a4:c7:9c:4a:7d:7a:08:dd:8b:05:64:a9:07:80:
8a:12:c6:e4:18:23:f4:59:a1:f7:a1:fb:3f:4d:e1:e2:75:a6:
45:bf:8f:c8:0b:65:ca:3b:3d:ae:d0:2b:0b:67:89:f6:78:83:
41:7f:b6:2c:88:b0:3d:e2:79:79:ec:49:f9:83:04:b4:b0:8e:
2a:d4:4a:01:0c:62:dc:26:a7:e0:85:fc:be:a5:01:19:49:32:
24:1e:80:23:ad:d7:e4:ba:5b:77:0f:cf:01:85:1d:0b:ee:95:
b4:74:ce:b6:13:58:3b:47:c1:4b:4a:c7:30:f2:12:3d:31:37:
5f:67:b2:c4:11:44:45:2e:88:78:30:0e:e9:75:5e:18:a5:b0:
67:e3:9e:5d:31:d6:75:4f:7e:72:a2:34:65:04:fd:01:55:ff:
d1:ea:9b:61:8c:0d:36:5a:ff:c1:c9:14:5e:0f:05:8c:29:f5:
f6:f3:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 01:14:41 2024 by rpki-client on console-fra.rpki-client.org