Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203134333135.roa
File: 34352e38372e3137352e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier: PLQOAxLCyB4NgmiQoXimhc7rTojynimGIJO1EIrQbtk=
Subject key identifier: 63:05:AC:A9:53:5C:A7:49:10:1F:56:97:90:18:4E:91:04:80:88:7C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6D19EF8AB17B79FE883498870B39EAFA5F1B3F83
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203134333135.roa
Signing time: Tue 02 Jul 2024 07:30:42 +0000
ROA not before: Tue 02 Jul 2024 07:25:42 +0000
ROA not after: Tue 01 Jul 2025 07:30:42 +0000
asID: 14315
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:19:ef:8a:b1:7b:79:fe:88:34:98:87:0b:39:ea:fa:5f:1b:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 2 07:25:42 2024 GMT
Not After : Jul 1 07:30:42 2025 GMT
Subject: CN=6305ACA9535CA749101F569790184E910480887C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:ee:03:18:8a:30:6f:b5:a6:ed:13:df:18:
0f:15:86:26:a6:4f:ff:cc:72:9e:5b:0f:76:53:43:
c1:87:0a:92:cd:00:63:80:37:a4:82:c4:48:60:e3:
20:7c:f1:af:6e:39:16:c2:1a:dd:33:ff:76:04:17:
75:8f:1b:c2:da:e7:5f:5a:fb:fe:d7:86:30:eb:ea:
31:e6:11:c6:ee:bf:76:c9:4e:2b:b1:3e:dd:18:6e:
6e:d9:87:0f:bf:8f:ff:6d:b9:88:0b:f0:48:86:01:
a8:9e:4c:e2:5f:6c:7d:c1:fa:b2:e7:a9:5b:2b:3d:
28:22:91:6f:5e:47:46:e2:e4:da:61:3e:1b:ae:01:
83:23:ec:05:86:b4:5c:c0:b7:0e:97:cb:9a:41:c7:
be:25:51:11:4c:84:87:cb:ff:bf:be:58:26:43:4a:
00:33:05:91:03:f2:3b:f8:25:79:44:52:62:f0:8c:
5f:4f:33:ba:60:2a:71:b0:57:3d:40:32:32:99:66:
37:a9:61:e7:4e:42:59:47:43:82:3a:cc:92:26:62:
e6:b9:05:8f:e7:98:9c:ed:a3:2d:67:4c:dc:a2:4a:
1a:47:0d:41:e6:4e:e8:7f:34:e1:21:9b:47:64:e6:
a7:d6:e3:3e:2c:c1:6d:24:81:de:7a:8a:cc:a1:92:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:AC:A9:53:5C:A7:49:10:1F:56:97:90:18:4E:91:04:80:88:7C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e203134333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:51:fd:ba:2e:82:da:c8:d6:e5:04:0b:6d:33:d8:a0:b0:2d:
f7:b1:d3:4c:8b:ab:10:89:d9:c5:50:c6:ae:0f:a6:f2:f5:83:
28:d6:f6:fb:df:5b:43:2b:c8:50:eb:9d:86:3b:bb:3e:58:c2:
cb:ad:53:93:67:f1:3a:48:1f:c4:87:b5:e5:47:7a:99:0a:b9:
b2:9a:7a:56:c8:c3:e2:3e:59:01:5a:dc:ab:44:d9:52:29:41:
79:c2:40:bb:41:b3:58:9a:cf:06:90:a8:53:55:50:da:83:ef:
ca:d7:81:51:16:21:c6:e8:2d:15:bb:67:85:df:cd:b4:cb:0c:
62:de:43:3e:a7:10:45:0e:9f:1a:ce:80:be:d4:13:fa:02:01:
57:4b:b0:d2:00:53:38:af:78:58:f6:9f:f0:7c:c2:1f:ae:ab:
31:3e:14:11:da:34:41:42:0b:aa:a5:57:e0:f3:b2:24:0c:3b:
ab:a2:46:68:62:9b:f3:f1:c1:da:a9:a0:61:1e:57:4f:35:ce:
9e:c3:7f:1a:02:4d:39:d9:b5:f3:f6:95:1d:81:00:1e:a3:ec:
25:52:a1:d2:8b:b2:1b:0b:00:67:f8:97:f9:56:f7:97:43:16:
67:78:1a:a2:58:12:f5:70:32:00:11:36:a7:8c:a4:c0:9d:17:
16:14:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 02:41:49 2024 by rpki-client on console-ams.rpki-client.org