Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KQkPx1sTTZq/LHPw/CQM4xSshrq31WQlxKxX0iU6dDQ=
Subject key identifier: D9:44:FC:0D:0A:A7:39:71:88:A0:98:B3:1F:06:0C:51:BD:F0:6C:99
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 3D4FF2A4D2641500BF8D3AC9C3A0EE5DB9147D3D
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:27:08 +0000
ROA not before: Thu 11 Jul 2024 09:22:08 +0000
ROA not after: Thu 10 Jul 2025 09:27:08 +0000
asID: 834
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:f2:a4:d2:64:15:00:bf:8d:3a:c9:c3:a0:ee:5d:b9:14:7d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 11 09:22:08 2024 GMT
Not After : Jul 10 09:27:08 2025 GMT
Subject: CN=D944FC0D0AA7397188A098B31F060C51BDF06C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:d9:7c:4f:28:1c:27:50:8c:3e:0e:d8:51:
7d:07:2c:cb:fc:45:a2:59:e7:ed:14:52:84:e2:c5:
20:c0:4f:a1:6f:36:da:e4:fe:75:46:13:aa:e4:a5:
4f:b3:4b:42:92:37:82:8f:09:01:71:65:f1:9f:68:
56:f0:fb:d6:93:70:15:2e:0d:25:98:a2:1a:36:e4:
fe:ab:49:68:66:8f:1f:a8:3f:fc:8d:81:ec:08:1e:
cb:32:f8:4c:6b:94:b7:a2:06:e7:79:eb:6e:cf:f7:
00:dc:f5:7a:3c:bf:ea:16:8a:75:a5:ad:dc:2d:c2:
b6:2c:39:f3:b6:a3:bb:ed:59:62:d4:ce:aa:3a:b5:
e7:64:05:c2:25:cc:78:af:f0:ad:a2:9a:db:a1:0e:
85:8f:26:27:90:c3:6d:73:c4:2e:3f:91:d3:aa:dd:
51:11:ee:c7:68:8f:45:bb:f1:87:91:46:a6:d0:00:
6c:b7:c3:d7:fe:cd:05:80:96:de:92:98:fa:d1:b9:
9d:9f:02:f6:b0:be:72:01:7d:39:35:f5:82:85:27:
12:32:e9:b6:7b:81:de:0f:66:e3:c8:87:a2:99:41:
d0:58:a0:b3:0f:82:36:60:80:cd:fd:b9:25:08:0f:
0f:f5:8d:70:99:f0:48:2d:fd:30:5b:2e:73:42:4c:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:FC:0D:0A:A7:39:71:88:A0:98:B3:1F:06:0C:51:BD:F0:6C:99
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:29:cb:3e:5f:57:3c:a1:58:2f:91:89:e0:62:0d:c4:53:42:
c5:5a:fb:94:99:23:35:16:80:ba:9c:a8:89:a9:22:7e:3d:56:
94:09:d9:8d:38:2d:fd:20:91:6c:f6:36:c5:f1:73:31:bf:c7:
22:91:c5:d8:dd:28:71:25:70:49:76:81:69:30:3a:71:e1:0c:
0c:c6:6a:c6:76:52:4f:35:c5:93:f5:5d:24:e4:ed:0b:d2:9c:
61:bb:fe:db:2c:cc:ad:fe:1e:cc:0a:ed:3e:c2:aa:ac:f7:ce:
c0:4c:10:a6:88:8e:65:8d:f8:66:21:c0:80:42:e7:7f:2f:ca:
46:e7:62:a5:fa:4e:e9:11:be:f5:fe:77:99:69:f0:7a:06:be:
2e:2e:17:85:72:a7:03:31:81:fe:d0:9d:12:3f:5f:40:b3:1a:
93:19:89:82:ba:c0:2b:be:28:6f:35:fc:19:b5:1d:95:2e:5b:
dc:60:36:49:69:dc:bc:14:b2:f8:71:f7:82:e8:a0:d8:5d:ee:
df:e3:fe:7b:34:4a:fb:f9:ec:df:91:a2:df:79:4b:cb:e1:24:
86:57:9f:26:3c:11:98:59:83:41:2f:12:14:11:f5:97:f2:e9:
cb:a1:6b:73:f4:0c:77:f5:47:61:2c:66:b0:10:c5:38:dd:21:
5a:ad:76:34
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPU/ypNJkFQC/jTrJw6DuXbkUfT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNDA3MTEwOTIyMDhaFw0yNTA3MTAwOTI3MDhaMDMxMTAvBgNV
BAMTKEQ5NDRGQzBEMEFBNzM5NzE4OEEwOThCMzFGMDYwQzUxQkRGMDZDOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9tl8TygcJ1CMPg7YUX0HLMv8
RaJZ5+0UUoTixSDAT6FvNtrk/nVGE6rkpU+zS0KSN4KPCQFxZfGfaFbw+9aTcBUu
DSWYoho25P6rSWhmjx+oP/yNgewIHssy+ExrlLeiBud5627P9wDc9Xo8v+oWinWl
rdwtwrYsOfO2o7vtWWLUzqo6tedkBcIlzHiv8K2imtuhDoWPJieQw21zxC4/kdOq
3VER7sdoj0W78YeRRqbQAGy3w9f+zQWAlt6SmPrRuZ2fAvawvnIBfTk19YKFJxIy
6bZ7gd4PZuPIh6KZQdBYoLMPgjZggM39uSUIDw/1jXCZ8Egt/TBbLnNCTLPDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU2UT8DQqnOXGIoJizHwYMUb3wbJkwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkfMw
DQYJKoZIhvcNAQELBQADggEBADopyz5fVzyhWC+RieBiDcRTQsVa+5SZIzUWgLqc
qImpIn49VpQJ2Y04Lf0gkWz2NsXxczG/xyKRxdjdKHElcEl2gWkwOnHhDAzGasZ2
Uk81xZP1XSTk7QvSnGG7/tsszK3+HswK7T7Cqqz3zsBMEKaIjmWN+GYhwIBC538v
ykbnYqX6TukRvvX+d5lp8HoGvi4uF4VypwMxgf7QnRI/X0CzGpMZiYK6wCu+KG81
/Bm1HZUuW9xgNklp3LwUsvhx94LooNhd7t/j/ns0Svv57N+Rot95S8vhJIZXnyY8
EZhZg0EvEhQR9Zfy6cuha3P0DHf1R2EsZrAQxTjdIVqtdjQ=
Generated at Tue Jul 16 15:47:32 2024 by rpki-client on console-ams.rpki-client.org