Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20333938343635.roa
File: 34352e31322e38302e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: 5dMiYj+NjTwWIJBejXK1CBt5rDG2kszBRPp5ex+4EFc=
Subject key identifier: D1:79:C7:65:49:D4:50:9A:DA:DD:94:0B:E5:1B:73:B4:5E:19:BC:74
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6A33FC20EB0D2AF567796E9919480398C2517AC2
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20333938343635.roa
Signing time: Thu 08 Feb 2024 16:26:54 +0000
ROA not before: Thu 08 Feb 2024 16:21:54 +0000
ROA not after: Thu 06 Feb 2025 16:26:54 +0000
asID: 398465
IP address blocks: 45.12.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:33:fc:20:eb:0d:2a:f5:67:79:6e:99:19:48:03:98:c2:51:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 8 16:21:54 2024 GMT
Not After : Feb 6 16:26:54 2025 GMT
Subject: CN=D179C76549D4509ADADD940BE51B73B45E19BC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:e6:0e:89:0b:48:74:3b:22:1f:a4:25:b0:
40:94:34:0a:ab:ee:2d:17:b3:5b:65:69:2f:a4:8d:
55:a5:7e:52:0a:54:51:66:c0:e6:26:81:ff:a4:37:
a0:71:d4:fb:0b:6a:46:72:b4:f9:13:f7:79:e3:be:
06:77:6b:df:3b:9c:2f:38:ff:95:b2:28:5b:d5:6b:
25:61:cf:2e:ca:6d:bf:ec:26:0f:7f:f2:c4:52:ff:
e5:c9:5b:d4:96:ee:72:35:fc:fc:42:2a:27:fc:f9:
b4:4d:a7:72:78:df:33:17:5c:be:87:e9:81:81:5f:
06:f2:00:48:44:26:76:90:17:5f:76:43:b4:ef:a8:
51:64:d6:2b:de:50:89:5d:cc:5e:3b:e8:a1:65:83:
ab:55:43:b1:91:fc:5f:47:e2:7f:1d:d5:70:d3:fc:
5f:fd:b7:74:fc:05:ee:d2:b7:92:25:82:63:48:3d:
6f:30:b3:90:74:44:76:28:88:a1:4e:3e:28:96:a0:
9c:14:cb:04:d1:b3:31:7e:7c:c4:69:3e:36:f9:5b:
50:a2:50:25:a5:14:ff:85:eb:33:f4:14:91:ca:4a:
ca:a6:c8:b7:c5:9d:e5:22:0f:ee:c4:a2:f7:73:33:
d0:06:7b:6c:2c:64:23:98:ef:66:98:08:28:60:8e:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:C7:65:49:D4:50:9A:DA:DD:94:0B:E5:1B:73:B4:5E:19:BC:74
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
Signature Algorithm: sha256WithRSAEncryption
38:52:1a:4f:c2:d9:65:01:49:fe:68:9d:16:68:11:16:6a:fe:
b8:d4:ae:75:df:9b:b6:64:65:c1:6c:e7:f9:d9:75:b2:49:e8:
f5:25:88:21:76:0f:42:62:8d:23:4a:22:04:30:46:45:75:2d:
e8:43:0c:9f:fd:2f:69:34:03:f2:62:63:fe:d8:3a:ee:21:ad:
f4:ef:ee:62:f7:04:31:08:36:0c:50:96:fb:ea:46:8b:c2:f8:
4e:60:bf:19:a1:42:cd:fa:73:c9:eb:ce:7f:29:f8:87:e7:5a:
5b:01:a6:f0:80:b6:5d:0c:c3:ba:44:57:90:f2:b7:d1:5f:87:
0b:6f:ae:44:9d:a7:88:65:f3:a7:a0:47:25:0a:69:87:a0:69:
6b:da:a3:b4:61:1f:a5:2d:a2:89:ad:ce:c8:32:d0:c5:2f:7d:
b3:12:61:03:e0:6c:10:da:1f:bc:d5:0c:c7:04:56:10:aa:f8:
07:b7:af:23:c6:5e:fa:83:d2:4d:1f:1a:58:a4:9e:5b:4d:ec:
90:41:e3:2b:0d:dc:0c:2e:b7:86:ab:92:59:96:c3:13:6c:df:
be:00:00:ce:a8:e4:45:5a:cb:5e:38:dd:e4:02:e8:cb:30:f6:
f2:85:8d:07:89:92:47:8f:51:ec:96:9d:3f:ee:c3:99:b7:90:
83:9d:52:77
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 8 02:42:01 2024 by rpki-client on console-ams.rpki-client.org