Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20313436393631.roa
File: 34352e38392e3134392e302f32342d3234203d3e20313436393631.roa (raw, json)
Hash identifier: XQ29B5myz6A4SPk9JA2snK7o9REa1U9ejUQP/fK5D0E=
Subject key identifier: D6:19:FF:2B:6D:1B:E2:BD:27:4E:3A:D0:46:5E:CE:7F:7D:44:A5:8A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6CAB0551385788FB5EFCA57A4EAD05742AAA9EBA
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20313436393631.roa
Signing time: Sat 21 Oct 2023 07:32:38 +0000
ROA not before: Sat 21 Oct 2023 07:27:38 +0000
ROA not after: Sat 19 Oct 2024 07:32:38 +0000
asID: 146961
IP address blocks: 45.89.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ab:05:51:38:57:88:fb:5e:fc:a5:7a:4e:ad:05:74:2a:aa:9e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 21 07:27:38 2023 GMT
Not After : Oct 19 07:32:38 2024 GMT
Subject: CN=D619FF2B6D1BE2BD274E3AD0465ECE7F7D44A58A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:97:56:43:82:f5:68:c6:a5:45:13:6a:b3:
ef:08:21:51:0f:51:bf:49:e4:d6:be:e4:24:02:12:
c2:03:b0:45:cb:1a:b9:ec:7f:0a:7c:f7:0d:44:00:
db:13:25:34:e7:0a:da:56:72:63:6a:de:10:35:b7:
2a:42:ee:2f:be:fc:ae:6d:e0:6d:58:ad:95:b0:ec:
08:09:fd:f6:71:03:41:6f:bd:47:45:45:db:de:c6:
b9:e9:25:79:00:15:69:15:7e:50:af:cc:b7:81:3a:
59:79:f0:2e:72:48:55:e1:84:2c:79:37:26:e9:52:
78:50:23:14:24:3e:7e:91:ad:cb:36:07:a7:ff:bd:
04:e1:49:06:10:40:54:a5:12:1c:bb:25:d6:08:f7:
8e:a4:27:63:cd:33:46:68:a8:98:86:b4:a2:e7:3c:
e2:4b:0c:cb:ed:df:6a:51:13:ae:da:f4:0e:05:64:
52:88:a1:d9:4d:dd:ed:60:ec:56:ea:21:64:14:0f:
fa:8b:d1:d6:61:54:ec:c2:ff:fb:10:7e:96:43:b2:
e7:77:26:66:c8:73:cc:93:fc:48:c9:c6:43:74:ba:
72:d2:c9:ad:45:14:d9:63:d5:fb:73:4e:83:ee:57:
a7:36:b7:1d:1e:2d:59:b2:70:28:7d:3d:9c:99:e4:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:FF:2B:6D:1B:E2:BD:27:4E:3A:D0:46:5E:CE:7F:7D:44:A5:8A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20313436393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.149.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:6d:44:c6:f8:23:f6:3f:4a:19:db:9f:f4:20:2f:e2:8b:
cf:5a:5e:e7:49:be:e1:c5:b7:af:2d:3c:8b:47:21:85:ff:18:
5d:a5:0c:5c:86:f4:8d:96:54:94:ad:9b:e5:57:30:10:fd:c0:
4d:d4:1d:10:17:45:07:1f:9c:f4:e4:84:70:31:d6:00:28:01:
5d:c3:75:8e:cd:5c:d0:ee:de:01:5f:97:6e:e4:31:46:2a:f8:
91:c4:bb:bc:49:1f:31:29:3f:c1:ad:05:66:e8:4f:c4:26:fc:
3a:de:b7:74:9a:f1:a8:b2:51:22:76:d7:a1:f9:c4:93:b1:f1:
49:48:13:c0:43:f8:44:c8:6c:4a:8e:3c:79:31:e8:0d:49:a7:
c0:cd:a4:5f:c8:d3:d1:96:dc:43:e2:12:aa:16:a4:dd:b1:1d:
d9:c8:f4:b6:1c:77:12:45:53:5f:77:ff:d2:54:3a:47:b2:e2:
7e:cc:39:e5:8e:5f:be:05:ad:20:38:78:15:3a:05:5a:07:1a:
0b:07:73:f7:65:e5:b9:3a:c6:bb:65:de:20:24:42:48:f9:c2:
ba:99:88:a6:89:08:ed:b7:ec:b0:92:96:ac:ac:3f:1c:1c:ce:
5b:22:94:12:53:b0:49:8d:2c:65:be:60:58:fe:5d:bb:9a:46:
87:9b:88:9f
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 22 10:33:58 2023 by rpki-client on console-fra.rpki-client.org