Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39362e302f32342d3234203d3e203236303432.roa
File: 34352e3133372e39362e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: 50AnAfNpfKnklufQmsmWxjSrQOuIfTXWT1YuGhO+u7w=
Subject key identifier: 11:D8:E2:94:50:2C:0E:6C:AE:FC:5A:57:01:B3:48:DD:19:CC:83:54
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4C3DD61B32AF0DC0400649DA28A2C4BFB2C84058
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39362e302f32342d3234203d3e203236303432.roa
Signing time: Fri 16 Feb 2024 15:11:26 +0000
ROA not before: Fri 16 Feb 2024 15:06:26 +0000
ROA not after: Fri 14 Feb 2025 15:11:26 +0000
asID: 26042
IP address blocks: 45.137.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3d:d6:1b:32:af:0d:c0:40:06:49:da:28:a2:c4:bf:b2:c8:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 16 15:06:26 2024 GMT
Not After : Feb 14 15:11:26 2025 GMT
Subject: CN=11D8E294502C0E6CAEFC5A5701B348DD19CC8354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:ea:be:90:83:65:36:40:eb:d4:48:05:ee:
c1:19:60:a9:85:84:2a:1e:d4:ed:1c:f9:eb:b0:6e:
fe:c3:2e:7c:0c:7c:89:b9:b4:24:15:d9:4b:23:1a:
8d:fa:8c:a6:65:f3:0d:12:f0:2a:f3:2a:b2:17:cc:
7e:2f:db:37:26:58:de:13:52:ac:a2:9d:4a:07:c7:
0b:dd:7e:a4:67:f5:2e:90:d6:63:a5:60:bc:bb:98:
ab:93:e7:42:cf:f3:a9:8b:b3:a1:6a:59:b9:00:4c:
e4:20:31:44:a5:fd:a6:4d:63:24:15:ca:07:62:20:
c3:97:61:c5:f5:8d:a8:78:67:86:2a:b3:d4:50:3c:
f9:19:ab:e1:14:76:1f:3d:47:19:42:4b:68:07:3c:
6e:1d:9e:1a:31:a4:b7:9e:5e:3b:00:dd:8e:e3:3e:
9d:29:ca:dd:50:9d:54:98:87:c3:17:e7:e6:51:f9:
03:4f:59:d5:c8:bc:62:0e:2c:cd:d5:57:46:8d:4f:
68:7a:4d:07:b7:31:39:93:41:dd:f6:01:18:6b:9b:
2f:d6:f5:bc:ef:2a:c3:7b:a9:97:b4:60:e3:a0:95:
cb:b3:d7:e5:24:49:ac:9e:9e:79:ec:3e:8c:43:22:
e0:2c:b1:28:85:f1:a5:94:e6:e8:f2:9d:fd:e3:2c:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D8:E2:94:50:2C:0E:6C:AE:FC:5A:57:01:B3:48:DD:19:CC:83:54
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39362e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:43:de:29:30:a8:e3:c5:3b:74:34:f4:28:c0:0d:d2:4c:c6:
9a:50:99:ed:b5:06:7a:6f:8a:c4:f4:f5:de:5b:d2:c0:14:63:
25:d3:15:04:02:ff:9f:10:d5:36:b0:db:99:b9:4e:3f:56:20:
50:d3:09:49:5d:8a:f6:f8:8e:ad:55:87:ef:cb:20:33:64:d6:
11:30:f4:dc:b5:76:75:1e:d4:d3:bc:5e:65:ab:80:fe:75:ff:
40:8d:81:e9:83:6c:64:7a:35:c2:06:7e:21:72:54:a4:fc:44:
e6:4e:24:74:fc:83:77:8b:58:82:5f:f7:10:9d:b4:20:45:04:
87:90:e9:28:3f:ee:8f:1d:c7:e2:7c:55:9a:8f:ad:09:47:55:
28:83:f6:73:27:6d:e2:24:e4:f1:1f:78:21:7d:05:4e:f1:60:
e2:68:f4:1a:ad:20:84:f3:9c:25:53:71:d0:c1:39:34:c4:1a:
41:1a:a9:7a:d3:88:21:d3:e1:3a:88:6c:0d:d0:3f:e0:0f:0d:
3a:e2:9d:fd:56:cd:ce:39:ed:10:9d:48:0e:dd:85:ef:82:eb:
e0:e8:b9:98:74:cc:2c:cc:c4:b9:a6:da:bd:b5:17:39:df:91:
99:27:f7:9a:aa:87:ad:f8:a1:f1:02:3b:c6:93:06:50:a6:7e:
a8:f7:93:21
-----BEGIN CERTIFICATE-----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Generated at Mon Feb 26 01:08:12 2024 by rpki-client on console-ams.rpki-client.org