Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
File: 34352e38372e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qvjsSVwqYIoD92KCEJ21G5ywNfe9rSCxur7Uasjzf8s=
Subject key identifier: 4A:94:C8:CE:8F:47:E8:5D:75:6C:E6:28:10:B9:5E:49:6E:0A:D7:82
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6BFBCCB778F14FF59A36F3AD286C02375BA13A34
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
Signing time: Sat 02 Mar 2024 10:07:38 +0000
ROA not before: Sat 02 Mar 2024 10:02:38 +0000
ROA not after: Sat 01 Mar 2025 10:07:38 +0000
asID: 834
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 09:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fb:cc:b7:78:f1:4f:f5:9a:36:f3:ad:28:6c:02:37:5b:a1:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 2 10:02:38 2024 GMT
Not After : Mar 1 10:07:38 2025 GMT
Subject: CN=4A94C8CE8F47E85D756CE62810B95E496E0AD782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:44:e7:b5:3b:29:1e:3d:d6:45:d4:9d:c4:
8b:e1:ec:d6:89:e0:12:ef:2a:d5:90:1e:82:3c:aa:
9c:4d:d0:95:e5:64:07:30:97:be:a8:f1:af:78:d0:
5c:f9:ef:00:3c:6f:03:1d:ba:86:cf:51:f4:99:23:
75:21:da:11:99:e6:9b:f0:42:9e:1d:68:75:84:02:
9f:69:03:99:a6:b6:a4:06:f5:7c:02:fb:50:88:e5:
17:f3:05:bc:cd:e5:fb:78:85:15:02:3b:41:b6:e5:
8e:cc:6e:e8:52:78:fd:89:65:7c:c4:bf:c2:39:b6:
72:5f:b4:d7:29:38:d4:2a:65:09:cc:05:55:c5:1b:
14:64:35:ca:bd:60:fa:ec:95:7b:b5:7c:72:71:55:
b8:44:9f:dd:00:de:7d:e7:bc:e1:e5:f9:de:5e:59:
e8:9c:f5:a0:57:d3:26:20:15:c5:75:be:88:3a:a1:
03:c1:65:47:dd:28:f5:6f:4e:fe:d8:c3:c3:30:aa:
23:ea:1a:9f:c8:a6:ce:fe:28:b3:7e:af:83:17:93:
07:1d:88:b5:c3:5e:a7:f0:b5:19:b2:2d:f4:10:f6:
a7:9d:44:ef:b1:a9:77:14:01:65:48:83:a4:7d:d6:
26:9e:bd:4c:0f:b2:05:fd:e7:16:0b:7b:ea:fd:8d:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:C8:CE:8F:47:E8:5D:75:6C:E6:28:10:B9:5E:49:6E:0A:D7:82
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:01:16:fa:82:8a:86:fd:34:3f:9f:ce:d9:21:58:cc:ca:b3:
49:a0:99:e0:1f:ed:ab:b6:60:87:30:18:f5:21:66:bf:15:a8:
c8:89:c5:61:a1:e3:28:72:e4:df:d1:3a:05:21:d5:44:e7:67:
59:6e:b0:16:43:6e:d7:40:58:3c:65:61:7b:ad:02:a2:49:30:
32:c0:8c:e8:f5:41:53:8a:75:d3:55:8b:05:db:d3:4f:03:f3:
4f:f8:0b:1f:fa:85:ae:a7:75:4f:e0:5f:ec:a5:83:ae:c2:fd:
6e:40:b1:b3:61:e0:83:f5:f7:14:52:e4:c3:61:cc:77:f1:76:
d6:16:18:0d:77:2b:30:85:18:3c:47:29:b5:c8:11:2e:ca:67:
2b:d9:11:2a:50:0a:91:98:09:47:44:d6:f3:17:6e:76:c4:b1:
97:d4:75:32:80:15:70:4e:a7:0a:f3:ea:cb:f5:af:1c:93:29:
30:13:01:0d:92:97:0e:f2:9f:d3:03:5c:c7:3e:fd:72:7d:99:
f0:3e:1c:2d:3c:20:57:3d:7b:35:94:0f:c0:c8:21:a4:a4:f1:
2c:dc:1b:11:32:f8:a4:ec:c8:4e:60:b2:01:6f:16:95:fe:58:
10:46:af:44:79:58:2b:2f:24:0f:ae:13:c8:66:9c:d4:c7:85:
e5:89:74:5f
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 23 10:01:03 2024 by rpki-client on console-ams.rpki-client.org