Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34779.roa
File: AS34779.roa (raw, json)
Hash identifier: gIRbW3AN5+GfxZSoeHe4H2+axb7DMrHgxDUhCxOdFU8=
Subject key identifier: 8B:1B:52:19:CC:E8:32:72:76:AA:6C:3E:8D:C9:03:CD:08:4E:77:39
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 392382FE03AD76257E839DC91FC034479CBC8DC8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34779.roa
Signing time: Mon 29 Jul 2024 10:40:13 +0000
ROA not before: Mon 29 Jul 2024 10:35:13 +0000
ROA not after: Mon 28 Jul 2025 10:40:13 +0000
asID: 34779
IP address blocks: 141.11.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:82:fe:03:ad:76:25:7e:83:9d:c9:1f:c0:34:47:9c:bc:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 29 10:35:13 2024 GMT
Not After : Jul 28 10:40:13 2025 GMT
Subject: CN=8B1B5219CCE8327276AA6C3E8DC903CD084E7739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:4e:bd:8e:22:4c:41:e8:ca:ac:e2:25:a9:
58:c9:f3:2b:50:c6:d6:0f:c3:82:ad:19:bf:85:be:
b1:d0:37:a6:c5:11:0a:cb:95:c9:be:b0:94:44:db:
0b:c6:d5:86:66:88:78:66:03:25:93:c2:8b:4e:e1:
ef:6d:91:fe:10:26:66:5e:a6:76:00:90:48:34:33:
a3:05:d4:d3:93:d4:29:99:10:74:13:7f:b9:64:2a:
a2:1c:26:dc:0d:d8:92:61:20:bf:4a:f4:c0:d8:52:
15:f3:87:43:69:24:7c:8a:3e:c5:2a:c8:8f:a3:53:
3c:fb:22:dc:eb:80:62:c6:01:82:0b:35:f9:39:05:
26:9d:67:ea:c7:eb:55:6b:6f:1d:40:d7:84:13:cb:
37:e7:1e:4f:da:8c:8e:ec:88:75:49:3e:0a:b0:0f:
45:c7:af:98:c5:46:86:b1:55:27:8a:41:28:00:e2:
99:86:b6:9f:4f:81:5d:6e:37:30:a0:08:18:a1:34:
78:4c:96:f8:db:72:c0:3e:50:cd:50:3e:28:34:ff:
f0:a9:95:1c:80:72:d8:42:47:43:81:d4:67:8b:45:
24:60:fd:9f:9a:11:01:23:a1:28:be:5e:a9:36:ed:
81:b4:ce:b0:ca:ce:bb:b5:93:71:70:b1:e5:51:04:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:52:19:CC:E8:32:72:76:AA:6C:3E:8D:C9:03:CD:08:4E:77:39
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.161.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b6:0c:8c:b0:38:d5:fc:47:a4:bf:0e:89:c5:2a:01:c3:56:
7b:bd:f8:d6:b9:7c:d8:48:99:57:b5:3f:28:81:2b:2f:7e:dd:
ac:3b:a2:3f:53:da:6c:5d:54:d1:ae:fc:55:1b:70:45:d3:06:
6e:e8:1e:35:27:5e:44:7f:0f:46:38:f4:85:b9:25:de:3c:51:
27:bd:b6:17:3b:cc:ed:17:f3:b0:75:8b:61:22:26:e9:b1:29:
c6:59:5f:89:32:00:90:88:e0:f2:68:57:08:c6:95:62:ba:c1:
17:42:35:51:d6:d9:99:7f:5b:13:78:c1:40:f9:0e:18:76:f2:
a8:c5:94:14:7e:4a:05:1a:d9:ef:e6:3e:d4:93:e3:4a:b4:34:
cb:bd:7f:dd:2a:9b:99:97:88:a2:e1:92:ba:01:0f:7d:48:db:
0d:b1:94:3f:7b:8d:47:05:35:20:24:03:0a:3a:7a:07:08:f8:
06:c3:85:c0:60:04:5a:66:b6:d0:3b:e4:b9:94:f1:19:46:6a:
f1:52:50:99:54:36:6a:d5:87:dd:44:b2:06:32:5a:4e:c2:e1:
56:77:75:48:97:d0:ff:e2:62:b7:a4:a2:e0:67:7f:19:28:f0:
c9:8b:28:c3:17:a8:fa:37:63:39:d5:f3:7e:4f:f3:b8:45:55:
5d:25:bc:76
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 29 01:57:07 2024 by rpki-client on console-ams.rpki-client.org