Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
File: 34352e38392e3134392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sfV+J5G0OPxD1VcVUzQ1fYZCCUY+U+aHZB5M5a33gAk=
Subject key identifier: 46:8E:BB:AC:29:85:27:A6:99:D2:DA:DA:F8:C6:23:4D:F0:9A:5C:E8
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4112D67226644EAA422B678D1D1FA3CD78E4267C
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
Signing time: Thu 01 Feb 2024 10:04:25 +0000
ROA not before: Thu 01 Feb 2024 09:59:25 +0000
ROA not after: Thu 30 Jan 2025 10:04:25 +0000
asID: 834
IP address blocks: 45.89.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 06:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:12:d6:72:26:64:4e:aa:42:2b:67:8d:1d:1f:a3:cd:78:e4:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 1 09:59:25 2024 GMT
Not After : Jan 30 10:04:25 2025 GMT
Subject: CN=468EBBAC298527A699D2DADAF8C6234DF09A5CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:d7:68:c5:02:45:fb:55:fb:29:a1:32:bc:
b8:1c:1c:2b:06:b4:34:d4:e7:9f:c3:57:a9:df:45:
0d:5a:36:83:19:cd:f2:ef:1c:fb:e9:7b:58:30:f1:
aa:05:80:10:15:6d:1f:7c:e8:17:5d:65:9a:1a:90:
0c:f6:32:db:a9:86:a0:50:c3:1b:46:08:37:95:fa:
a0:4d:eb:9f:d7:70:59:60:0f:bc:97:e2:96:69:55:
50:37:69:03:a3:97:ab:80:1d:5a:2d:70:0c:f8:99:
ec:08:e0:c4:a6:df:e0:3d:b0:88:7d:ef:bc:78:51:
e6:2d:66:2b:79:d5:53:c9:11:91:6d:ad:d8:98:02:
4e:2e:a6:b1:5f:1d:55:73:b0:b2:a5:e3:2f:3d:60:
48:7a:65:86:54:48:a7:e9:d6:1e:53:f4:31:17:6e:
93:fb:65:74:66:ce:0c:0a:60:2a:58:44:7e:df:79:
f1:93:73:e6:50:95:20:62:37:78:27:79:0c:d4:e7:
e5:6c:68:34:55:8e:fa:47:cc:1b:a2:1f:b8:e5:9d:
ea:cc:cd:ed:82:fd:36:42:ca:27:af:ae:d7:f5:a7:
48:e3:91:58:c0:e3:04:b7:fe:81:78:37:45:19:b0:
39:18:d4:fd:69:96:dc:56:5e:7c:c4:d6:4c:49:59:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:BB:AC:29:85:27:A6:99:D2:DA:DA:F8:C6:23:4D:F0:9A:5C:E8
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:df:34:4f:5c:f8:8a:fd:c1:fc:ed:5f:6e:cb:b3:49:a8:30:
8e:57:50:ac:aa:ac:c1:c7:e5:ef:c4:56:11:c3:4b:1e:ca:c1:
e8:0b:8d:3d:d6:f7:63:86:f5:ec:50:82:ae:ee:6e:c8:90:d0:
e3:79:37:67:05:b2:3b:ee:7c:ea:ca:d7:24:b3:6d:00:a6:b3:
41:cd:d0:3f:2c:71:51:59:05:dc:c8:71:ad:84:8d:1f:85:22:
77:2f:6a:63:4d:14:7b:cb:9f:7b:c3:8b:bb:5b:ac:04:17:8f:
71:76:dd:b7:90:dc:f3:3d:b6:01:62:96:1b:29:ce:48:d1:77:
9c:ac:fc:8a:70:d6:11:c6:1e:59:6f:cc:47:66:c6:cc:83:8c:
85:44:d7:d4:5d:3c:65:a0:80:2a:9e:e4:25:29:fa:f5:64:1c:
6c:28:ab:a8:c2:ae:02:87:a8:36:3f:a8:90:48:76:12:54:1d:
ba:0e:98:ae:ed:77:f2:e3:df:e7:c2:1f:64:bf:08:17:bb:fd:
58:02:23:25:a4:b0:25:5d:8d:94:30:aa:d9:55:4a:0f:ca:ab:
46:4f:1c:bf:8a:da:46:0d:90:bc:8a:7c:15:73:91:89:fa:40:
83:fb:f4:f8:90:27:c2:83:5b:54:b2:20:25:30:9e:36:97:01:
51:8e:9b:b8
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 2 09:27:09 2024 by rpki-client on console-ams.rpki-client.org