Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa
File: 34352e31322e38302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VWSKp4BrSAuA83hoKZY4vHkU69COiLXLJhd1NGz7xSw=
Subject key identifier: 26:E2:48:0F:DE:97:41:FB:5F:D9:3C:89:1D:8E:7A:AF:4A:5D:0E:91
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 79902A87140B7F2FC4576035AA74885C8D3709F7
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 Mar 2024 00:02:25 +0000
ROA not before: Thu 07 Mar 2024 23:57:25 +0000
ROA not after: Fri 07 Mar 2025 00:02:25 +0000
asID: 834
IP address blocks: 45.12.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 06:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:90:2a:87:14:0b:7f:2f:c4:57:60:35:aa:74:88:5c:8d:37:09:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 7 23:57:25 2024 GMT
Not After : Mar 7 00:02:25 2025 GMT
Subject: CN=26E2480FDE9741FB5FD93C891D8E7AAF4A5D0E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:ba:53:da:89:e6:9c:f3:9e:4e:8b:01:1d:
0e:86:a8:db:8b:e0:f3:f4:c0:d7:e9:2e:48:ef:a2:
a1:35:16:33:11:b1:ce:1d:7c:4d:4c:0e:c3:d1:9e:
1e:a2:6f:48:86:db:25:2a:83:8c:7e:a5:e1:e0:2d:
89:ef:1c:9d:5f:1d:c2:08:c2:e2:ae:b8:9c:4a:ca:
7c:66:6d:33:3c:61:3a:e3:c0:d8:e9:1e:76:a9:33:
07:f2:61:d6:cf:63:a8:5d:cd:e8:53:ab:54:2f:e6:
d2:ea:ec:92:39:ef:80:5f:56:89:f0:25:9b:31:8d:
c4:e5:9f:20:45:53:c4:bd:69:df:6d:cc:cb:83:cb:
da:72:d7:11:ba:f3:9b:d1:30:9b:7c:7e:44:97:6e:
5f:ff:d4:20:94:02:52:6d:43:d6:ee:f4:c2:bf:35:
ff:99:7b:20:66:0d:97:4b:5b:a0:a4:09:95:61:16:
cf:88:a5:8b:b2:67:b4:ca:39:58:98:48:4b:ca:9f:
69:f2:f8:37:ce:4c:72:1b:21:4b:e4:d1:37:b3:9b:
24:03:2b:5e:21:b9:41:cc:6f:19:79:56:de:5a:10:
f9:4e:fd:6b:36:99:0a:bf:a2:b6:23:f1:b8:c4:ac:
eb:aa:51:d2:16:91:91:98:17:0e:e9:c4:f9:c6:7f:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:48:0F:DE:97:41:FB:5F:D9:3C:89:1D:8E:7A:AF:4A:5D:0E:91
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:61:a6:f9:63:72:e8:76:62:93:32:a1:9b:bb:40:e1:1c:
a1:d6:95:ca:2f:09:cb:56:3c:de:e9:b2:52:01:0c:73:45:65:
7b:8a:b2:c9:64:f2:bc:f7:86:21:3b:39:74:fb:4d:3b:8a:8b:
bb:6d:f4:f5:f6:c1:84:25:3c:ae:c8:fe:98:82:28:58:c4:a7:
5d:07:79:63:da:8b:2e:89:f1:ce:d4:63:ba:8b:83:71:b7:1f:
6d:b4:7f:39:02:04:17:f5:b3:12:82:cc:11:64:f9:dc:df:b3:
8c:72:8a:a4:9b:9e:51:50:a3:e5:40:c3:81:c6:62:d1:2d:cb:
53:60:98:4d:e4:aa:54:0a:60:70:17:74:e7:73:95:9c:7d:66:
2c:e1:de:76:4e:95:c8:c5:d7:ed:bc:19:14:ce:be:50:bd:2b:
30:ab:d2:52:d9:be:6e:a9:5f:df:d8:44:1a:3e:25:8b:a1:0b:
96:ec:e7:13:c9:fd:95:f0:dc:e5:a0:2b:01:80:ec:8b:19:1e:
44:fc:67:1d:00:c9:0e:69:c1:73:3f:89:35:af:56:e1:d3:ff:
5c:d2:70:dd:45:d5:bb:89:0b:38:ce:6b:7f:fe:e6:62:b4:83:
2b:28:40:c9:00:a8:3c:5c:74:59:b9:67:0c:75:72:2c:e6:dd:
ad:da:f6:fd
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 8 08:46:25 2024 by rpki-client on console-fra.rpki-client.org