Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20313339393839.roa
File: 34352e31322e38302e302f32342d3234203d3e20313339393839.roa (raw, json)
Hash identifier: q0Xaf4GMaj9wNWeZtCP3w1twsYz7UxguB6lgnGY6MZE=
Subject key identifier: B7:02:BE:B3:82:D4:66:2E:0E:86:D0:0B:20:AC:CA:B3:BC:7F:E3:B2
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0A4A9B9811549BC54DF77F704A64A640BDFB5D7D
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20313339393839.roa
Signing time: Sat 06 Jan 2024 12:52:20 +0000
ROA not before: Sat 06 Jan 2024 12:47:20 +0000
ROA not after: Sat 04 Jan 2025 12:52:20 +0000
asID: 139989
IP address blocks: 45.12.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 10:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4a:9b:98:11:54:9b:c5:4d:f7:7f:70:4a:64:a6:40:bd:fb:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 6 12:47:20 2024 GMT
Not After : Jan 4 12:52:20 2025 GMT
Subject: CN=B702BEB382D4662E0E86D00B20ACCAB3BC7FE3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:92:ce:7e:c8:55:9c:27:81:0d:5a:db:de:
08:93:32:19:93:6d:8b:9a:e1:29:ec:b8:40:2a:52:
d7:f2:85:7f:68:5f:f8:02:7c:d5:c9:ed:3e:d7:96:
2f:0d:70:04:88:53:6b:f4:95:97:9b:f2:c2:92:b3:
0b:aa:e1:c9:a8:4a:00:e2:11:5b:e5:1e:89:dd:45:
7a:bd:d1:30:c2:52:cb:31:68:5a:15:02:91:5b:f7:
8b:9f:ce:93:e7:d4:1e:8d:d7:42:11:37:38:8a:f7:
61:11:1e:e5:d0:b4:96:d5:cd:ae:b6:7a:e2:3f:61:
a7:52:e2:08:f0:37:c3:4d:5c:b0:44:97:ca:ef:6c:
24:f2:5c:5f:3c:59:c8:95:05:aa:58:27:68:db:79:
42:f8:42:dd:81:0e:31:aa:ab:66:53:3c:40:26:07:
c5:66:46:2b:0a:23:5e:dc:1c:12:e4:6f:c6:c0:69:
ce:08:8f:df:ab:e6:1a:e4:67:ab:33:ee:36:e2:a8:
86:a6:3a:40:96:2d:1e:f3:10:33:49:b4:6e:2f:82:
14:cc:79:d0:6b:21:bf:f6:d1:25:a8:fc:9d:9e:ed:
72:aa:7c:ac:9c:fa:85:79:74:20:57:2a:26:3b:fc:
80:63:5e:e3:10:97:6e:83:52:b3:b9:b2:a8:84:5a:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:BE:B3:82:D4:66:2E:0E:86:D0:0B:20:AC:CA:B3:BC:7F:E3:B2
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20313339393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
Signature Algorithm: sha256WithRSAEncryption
74:81:e9:ad:2f:b4:2d:c3:fc:cc:58:ce:32:56:69:83:38:5c:
ed:c2:75:d1:9c:e9:fb:ae:6b:3a:e9:73:01:b3:57:e4:b6:fd:
6b:67:fb:ef:d9:b4:a3:f4:30:27:6d:a6:f8:87:c8:8c:3f:d7:
e7:ad:6f:c5:25:cd:91:2a:8d:ea:36:53:a6:60:e6:38:c9:42:
e9:c8:c2:a1:9a:df:07:ee:5c:21:e4:78:fa:d1:45:eb:ed:9c:
7f:45:d9:bc:9c:9a:30:14:c3:ac:dd:68:90:b4:93:50:d4:c5:
5a:4f:bd:e8:95:50:27:64:9a:54:19:6f:45:ec:e1:0d:12:56:
22:27:82:2b:5b:77:17:47:72:3d:a8:6e:d8:58:a9:33:06:84:
df:f1:8d:8a:d0:0d:2f:1b:22:3c:c2:3c:6f:1e:b4:89:2c:d3:
d9:2c:03:ed:69:47:70:45:d5:fb:ff:51:2a:39:2f:23:bb:8a:
86:41:18:79:bc:94:8f:da:fd:cb:23:01:11:10:f6:7e:3c:78:
dc:43:bf:83:5e:3b:97:df:40:cf:13:d3:7c:52:42:93:4e:54:
81:36:e5:8b:93:bb:52:01:13:23:6c:44:3e:73:30:65:3b:8a:
54:a0:87:fc:b8:f9:7d:2d:b6:92:d2:fd:68:59:f2:62:ce:55:
89:66:86:fa
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 7 14:49:07 2024 by rpki-client on console-ams.rpki-client.org