Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e203136323736.roa
File: 34352e38392e3134392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: yCGCdw/D2F5TW+IRbgqkUGyHIWz7BMBrTDsgqYjxDQ0=
Subject key identifier: 4A:8C:1A:AF:5C:3A:22:D9:D7:3E:FF:90:F4:4E:5B:67:64:30:74:29
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 3B60258BDF3106C65550FF66783ADFABC93C4D98
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e203136323736.roa
Signing time: Mon 18 Dec 2023 07:42:01 +0000
ROA not before: Mon 18 Dec 2023 07:37:01 +0000
ROA not after: Mon 16 Dec 2024 07:42:01 +0000
asID: 16276
IP address blocks: 45.89.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 00:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:60:25:8b:df:31:06:c6:55:50:ff:66:78:3a:df:ab:c9:3c:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Dec 18 07:37:01 2023 GMT
Not After : Dec 16 07:42:01 2024 GMT
Subject: CN=4A8C1AAF5C3A22D9D73EFF90F44E5B6764307429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:a3:41:55:3f:f7:c4:6d:e3:6a:d9:86:a0:
50:f4:45:02:f6:bb:6e:df:0c:8c:f4:76:d2:a8:38:
e9:f3:c6:4d:2e:e2:83:f5:1c:19:6b:8b:c4:0e:13:
52:2b:8b:78:b0:13:6a:6e:bb:ae:47:1c:09:67:d7:
d6:ea:17:28:95:38:de:ab:06:49:6d:38:0f:48:c6:
af:5e:07:68:3e:a4:c3:b9:08:bd:dd:95:05:12:8a:
16:f9:45:2e:72:b3:66:31:68:dd:91:91:9f:c9:29:
cd:bb:01:05:25:ae:5f:eb:4f:ac:8a:94:c2:53:24:
44:16:03:01:9b:24:d2:bd:54:9e:9e:5d:5e:e1:78:
fe:e3:de:e9:15:ee:ea:2e:ae:7d:4d:19:38:e3:d9:
e7:25:58:65:9c:25:a0:8d:da:31:83:db:7b:d5:f0:
39:f8:c6:31:2b:90:70:ae:18:d7:f1:15:b2:03:89:
bc:32:ef:7e:c0:60:15:4f:30:87:23:19:98:86:66:
79:c1:f2:fa:23:8a:ab:df:6c:f2:05:e1:2d:6c:7a:
4c:10:31:4d:ed:3d:50:21:9d:53:5e:6d:01:f9:6d:
3b:2a:c0:4a:2f:4a:23:fe:fb:a0:8c:6c:28:8d:d1:
c3:c3:87:bf:37:36:d2:a1:1a:24:aa:0c:27:d3:d7:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:1A:AF:5C:3A:22:D9:D7:3E:FF:90:F4:4E:5B:67:64:30:74:29
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a0:aa:37:15:05:8a:86:81:12:61:0e:c0:8d:ac:f3:fd:0d:
7d:ef:b2:0e:1a:32:3a:f1:b5:10:22:43:a3:ea:f6:6d:57:8d:
db:c8:54:43:14:db:38:26:1b:73:f3:6b:cf:ea:da:d5:82:bc:
ad:55:1c:7f:88:3c:9b:41:ca:71:f3:1f:8a:0d:e1:81:7c:f3:
a0:d0:d5:dd:87:67:48:68:40:19:1c:3e:6c:93:db:49:10:1d:
ce:64:9c:f9:12:58:ad:b1:5f:76:c2:67:3c:34:b6:3a:37:30:
dc:3d:29:6c:29:0e:1c:8e:91:4f:af:26:4e:13:a3:3a:0e:27:
a8:3e:25:7e:18:06:39:c1:80:3b:14:77:3b:a3:b5:2a:a1:cc:
0d:6a:9a:09:c5:20:65:7f:30:da:8a:ed:33:44:35:c2:72:df:
ec:82:ad:91:4a:f8:62:7f:6b:f3:02:f4:11:3d:91:5e:9f:be:
e1:70:46:57:f1:0b:e8:30:8c:84:33:ea:ec:e2:9d:aa:8c:ee:
a2:c5:ee:88:51:20:41:6e:96:ee:33:76:23:a2:1e:7f:d3:4a:
27:8b:ff:48:53:08:d3:a0:70:24:66:87:30:eb:ab:89:c6:bd:
61:80:5d:78:1e:09:4c:5d:3d:99:67:d7:e7:fd:c0:dd:6d:80:
44:0b:f9:c5
-----BEGIN CERTIFICATE-----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Generated at Thu Jan 25 01:47:48 2024 by rpki-client on console-fra.rpki-client.org