Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
File: 34352e38372e3137322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: sJRmtXgno+xl/DikeQQgPAtrtzYvYBbnMPUs8F6aMU8=
Subject key identifier: 57:84:E4:E0:C2:96:66:33:BF:4E:B9:9D:36:C4:CE:2D:CB:8E:EA:4A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 25D0CC4C94916D8D41189DAD36F8A4EF01B6468C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
Signing time: Sat 13 Jul 2024 05:05:18 +0000
ROA not before: Sat 13 Jul 2024 05:00:18 +0000
ROA not after: Sat 12 Jul 2025 05:05:18 +0000
asID: 61317
IP address blocks: 45.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d0:cc:4c:94:91:6d:8d:41:18:9d:ad:36:f8:a4:ef:01:b6:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 13 05:00:18 2024 GMT
Not After : Jul 12 05:05:18 2025 GMT
Subject: CN=5784E4E0C2966633BF4EB99D36C4CE2DCB8EEA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:af:fd:48:e4:ce:1e:46:33:2e:33:01:a8:
fb:72:33:a6:86:de:82:14:23:47:bf:d1:20:a0:90:
5f:7f:f9:71:0b:7e:4a:94:0b:b1:8b:de:18:65:b7:
40:74:4a:79:ed:e3:2b:46:dc:92:66:59:9f:f2:6c:
23:cb:35:19:9a:e0:96:66:7e:5c:bb:a4:a2:61:05:
db:59:8b:72:62:18:fe:a6:bc:97:d2:7f:f8:da:3d:
6d:1c:96:77:53:05:3e:2d:5e:01:83:15:c3:93:41:
b4:5a:ca:2d:f1:78:31:3d:7f:3e:ef:6a:c2:a1:da:
d8:5b:7c:92:f6:d0:3a:ec:88:f6:e8:7b:4f:e2:dd:
54:98:31:58:9f:71:aa:d6:21:c4:c6:51:fa:7a:4b:
4e:81:56:fb:4c:15:66:ec:29:a3:49:26:e6:18:91:
17:ee:8c:9c:6f:14:8b:77:66:33:e4:a4:b0:6c:d2:
fc:65:6b:c1:15:2f:4e:8e:08:15:ba:62:80:5b:19:
8f:1b:60:b1:e0:54:20:14:42:40:d3:8e:87:31:89:
a6:30:04:0e:d0:6a:9d:85:1c:82:62:aa:e6:44:9a:
44:58:e0:d6:17:85:42:cc:62:cf:5e:fa:40:99:50:
d2:4f:5b:e5:f5:65:1b:a0:aa:ba:43:ed:46:2a:8b:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:E4:E0:C2:96:66:33:BF:4E:B9:9D:36:C4:CE:2D:CB:8E:EA:4A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
42:01:0e:da:6c:c0:76:0d:95:d6:12:47:4b:5c:f6:de:5b:e4:
b8:6d:7f:1e:2f:74:41:58:87:b8:28:2b:6b:8d:06:0c:02:4d:
08:35:21:ff:3f:59:d1:e7:8a:4e:d7:99:4c:ba:9d:87:83:e5:
b7:ae:a8:aa:94:ca:80:58:8f:b5:97:71:7b:9d:aa:d5:2c:df:
85:51:26:c2:cc:38:b2:cc:3b:0b:12:40:d7:15:c4:04:a6:1c:
b5:1d:ec:3c:cd:b7:0f:ab:c0:a3:99:a4:83:6f:ef:82:a0:16:
e0:95:54:2a:5e:3a:28:27:fe:88:59:e5:39:d5:b6:22:d2:97:
25:1f:69:41:03:83:af:f1:99:e4:6b:ec:e9:31:7b:ff:77:b9:
04:31:46:6d:3c:4e:cc:74:6f:82:00:0b:70:5b:3c:ca:4d:69:
38:cd:33:1e:bf:33:5e:83:ce:64:40:3e:24:75:8d:a1:0d:9d:
ba:8e:5b:3d:21:68:56:83:27:42:ca:73:1a:72:7a:15:c4:71:
79:ea:20:bd:d8:3a:70:2e:ef:12:60:3d:1f:19:5f:29:14:29:
7d:66:be:b9:90:80:ba:ec:97:64:9b:43:0b:b2:8a:04:e0:0d:
8b:eb:f0:17:bc:47:5c:79:93:43:fd:74:db:4a:c4:72:e5:82:
48:87:68:bf
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 12 03:06:33 2024 by rpki-client on console-ams.rpki-client.org