Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
File: 34352e38392e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: sRgXCZJaOpTWB1cHPu7OyCzMYW+LzOx5tECRFg/qPiQ=
Subject key identifier: F1:9C:0A:E1:C3:95:A4:17:03:E7:25:09:98:C4:D5:6B:0D:08:3E:24
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0CBB06D6FBF56FDE9BC9C369E8A3A5E4F97BBA0E
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
Signing time: Tue 16 Jul 2024 10:10:14 +0000
ROA not before: Tue 16 Jul 2024 10:05:14 +0000
ROA not after: Tue 15 Jul 2025 10:10:14 +0000
asID: 834
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bb:06:d6:fb:f5:6f:de:9b:c9:c3:69:e8:a3:a5:e4:f9:7b:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 16 10:05:14 2024 GMT
Not After : Jul 15 10:10:14 2025 GMT
Subject: CN=F19C0AE1C395A41703E7250998C4D56B0D083E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:e8:14:e5:c1:6e:3b:6b:c4:f0:49:7e:c1:
d0:f4:ed:93:04:08:21:49:da:68:d7:69:54:59:08:
e5:6f:f6:a9:0b:39:13:ab:f7:f6:03:97:2b:b3:7d:
d9:d8:14:a1:7e:c4:95:63:9e:3b:80:45:6e:b2:91:
02:d0:06:20:51:d1:e8:53:97:0f:e9:f1:b4:fb:f0:
13:8b:2f:76:5d:7e:1a:9c:f1:0b:78:25:9e:0c:3d:
d8:c2:88:2b:e9:29:51:d4:6d:91:32:a9:12:51:8c:
39:93:8f:58:50:10:f9:82:20:56:05:fa:4e:e3:15:
1e:af:61:e6:22:cb:66:80:b7:11:3e:0b:bb:f2:43:
0a:b2:02:ba:30:bf:74:98:2e:3b:28:45:ba:64:cb:
67:52:a9:10:52:53:b9:e0:7e:a6:cb:5a:ec:7a:c3:
45:d5:39:96:57:9d:b9:39:ca:53:4b:1e:fa:a3:a9:
f6:09:b3:41:4f:a1:49:e2:c3:a1:36:53:27:9d:f9:
60:73:f1:fd:12:52:c4:b6:52:f9:e5:09:8a:e5:75:
01:88:ac:64:2d:3c:27:2e:7b:a8:87:1d:ea:7d:4c:
06:bb:21:89:02:2d:6d:17:d9:d9:dc:d5:cc:30:43:
3e:db:65:40:e5:89:8b:3c:69:5b:9d:5d:cc:59:a2:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:0A:E1:C3:95:A4:17:03:E7:25:09:98:C4:D5:6B:0D:08:3E:24
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:14:81:81:ea:7f:2a:42:97:df:0e:fc:9f:d8:85:ca:65:ed:
7d:a1:2d:c1:3c:f2:64:bc:c9:7d:b8:18:4b:c6:89:5c:4c:95:
ef:23:85:c3:01:da:09:57:20:51:20:4e:0f:7c:75:92:83:29:
ef:24:e9:27:bb:c7:92:01:a3:ee:8e:63:30:04:6a:b1:93:e3:
48:61:1d:ab:7a:eb:83:92:c8:96:71:98:12:c6:63:c3:79:0d:
6a:ea:96:91:9b:14:be:26:ca:51:76:da:ed:13:0f:8b:16:b2:
6a:03:f7:f1:d0:46:e0:26:f7:5c:66:2e:a0:58:2f:f9:7f:ae:
c8:96:d7:5e:3a:92:08:af:ec:65:5c:3c:28:85:e1:75:94:7c:
0c:9a:ef:e8:e5:78:0b:ba:6d:d2:6f:dc:bc:40:4a:21:30:23:
ed:3f:65:90:bd:fa:20:d2:9e:bd:57:8e:3f:dc:8c:b1:1f:2b:
0a:78:62:c9:84:70:6e:2c:db:f1:59:41:cd:79:fa:47:35:b2:
3d:41:15:e1:f6:cd:87:fe:87:d6:93:e4:23:bc:1e:69:2e:3c:
ee:50:af:68:90:c9:d7:06:15:1d:54:4a:40:d3:d7:96:00:c2:
f8:9c:d0:e3:15:d8:17:a7:45:22:63:8f:5c:cf:35:9d:1b:fd:
bf:25:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:40 2024 by rpki-client on console-ams.rpki-client.org