Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3233203d3e20323132323338.roa
File: 34352e39332e3138342e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: QFe23lFN5Q7mWyoKSGFHpLXzOnTAHfUMyYNAGXP6WsE=
Subject key identifier: 0B:24:B0:61:2F:A8:E7:82:CB:F7:C3:34:09:B5:AE:65:F9:AC:65:9C
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 7299391A2DBF2637388885DC323CE48C6F593BF1
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 25 Sep 2024 06:16:36 +0000
ROA not before: Wed 25 Sep 2024 06:11:36 +0000
ROA not after: Wed 24 Sep 2025 06:16:36 +0000
asID: 212238
IP address blocks: 45.93.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 25 Oct 2024 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:99:39:1a:2d:bf:26:37:38:88:85:dc:32:3c:e4:8c:6f:59:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 25 06:11:36 2024 GMT
Not After : Sep 24 06:16:36 2025 GMT
Subject: CN=0B24B0612FA8E782CBF7C33409B5AE65F9AC659C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:73:13:63:e7:e2:1e:43:02:20:53:a2:58:
9e:cc:82:fc:98:ba:98:ea:37:bc:ec:01:98:45:22:
d0:65:61:c8:c2:3b:19:a7:fb:2d:13:fe:18:1c:0f:
34:ce:e3:92:6d:b7:54:61:3f:a1:42:7b:79:91:b2:
68:4c:45:57:a2:ef:15:d1:93:5b:95:f6:fc:a6:e5:
3e:6a:ea:a9:9e:ea:8d:c0:2f:6e:ce:84:22:f5:83:
e4:65:87:77:a8:35:29:3c:12:fe:9b:87:59:7c:c4:
22:16:13:bd:92:a2:08:4d:75:45:ce:4f:ad:b8:f9:
4a:bf:f3:dc:75:3f:76:62:da:1e:94:52:18:a1:4c:
ac:ea:0e:63:01:24:46:68:b0:2e:25:eb:88:c9:30:
09:f1:50:c1:bf:e3:7d:16:b2:d5:4b:3b:70:ec:8b:
99:70:a5:3b:63:b0:44:e2:35:75:9e:99:10:ef:63:
bb:d1:06:45:18:48:24:c6:22:e5:08:6f:7a:de:60:
c2:9c:d5:77:f8:c7:e2:2c:44:81:b3:c5:48:24:9b:
f1:35:45:04:c0:d0:b9:dd:ee:01:6a:d3:97:f3:df:
ce:6b:3f:a8:b5:95:ef:d3:3b:f7:20:b3:0b:a7:4d:
d6:fa:98:4a:4c:68:b6:b6:b2:e5:3f:df:b5:cd:da:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:B0:61:2F:A8:E7:82:CB:F7:C3:34:09:B5:AE:65:F9:AC:65:9C
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:7d:d5:e7:8d:fc:e0:b6:b3:1f:6d:5e:b5:24:d1:78:f8:19:
4e:5a:e8:ad:b4:bb:31:18:9c:ca:2a:81:4d:64:60:ca:01:3a:
6c:4d:d8:da:d9:e3:e3:25:f3:7d:f5:a7:84:1b:84:96:4d:29:
15:df:35:aa:98:c1:37:e4:5d:10:2a:19:3b:cc:86:33:9b:5d:
15:8c:a5:f2:11:b6:f1:cc:39:a3:c6:9a:6b:81:6d:2a:b2:4a:
cc:4c:e4:c3:99:27:5a:33:25:7f:72:fe:e9:c2:3a:d8:ad:b5:
4f:2a:37:4e:c9:c7:97:fe:3c:f8:d7:29:f1:e6:25:da:02:1c:
36:c9:b5:51:b1:e4:6c:bc:4b:b2:25:31:95:f9:0f:3a:eb:bb:
e6:50:5c:6d:a2:18:78:ec:cb:74:c5:0e:d7:30:b3:3b:83:9b:
09:bd:7f:41:34:43:10:3a:7f:33:c9:24:2f:3a:b4:95:1b:68:
ed:ca:7b:69:c4:0b:5b:01:a9:6c:22:77:ab:b9:e5:94:0e:5f:
ec:9c:0c:01:3b:a0:de:84:c7:f5:95:ba:bb:be:5c:f9:40:ea:
45:5a:ab:40:9f:a5:ae:67:59:1e:15:cb:42:ec:33:22:90:fb:
fd:c5:44:81:19:50:0f:85:24:9a:a5:f6:5a:5f:3d:b7:1c:4e:
42:22:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 01:19:42 2024 by rpki-client on console-fra.rpki-client.org