Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
File: 34352e38372e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qPTG9VKw0fxYmpX1UBhel5ceOFfXrJUzW//DTVEVnik=
Subject key identifier: 69:29:0B:0D:0B:15:3E:92:46:DC:D6:00:06:5D:4F:32:C6:D5:86:30
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 39674B93E8D30AB3FA2CD768A150893FA11AC002
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Jul 2024 00:02:53 +0000
ROA not before: Thu 04 Jul 2024 23:57:53 +0000
ROA not after: Fri 04 Jul 2025 00:02:53 +0000
asID: 834
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:67:4b:93:e8:d3:0a:b3:fa:2c:d7:68:a1:50:89:3f:a1:1a:c0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 4 23:57:53 2024 GMT
Not After : Jul 4 00:02:53 2025 GMT
Subject: CN=69290B0D0B153E9246DCD600065D4F32C6D58630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:58:34:b2:fe:10:12:1a:f6:59:52:2d:db:
df:f7:74:22:5e:3e:48:c7:2b:74:26:95:71:e2:80:
4a:e8:89:38:fb:0a:20:3e:c3:4a:86:5d:c1:6a:25:
95:1d:1e:22:6f:50:5a:51:68:05:3a:be:ba:4d:2b:
f3:eb:6a:1e:58:78:19:50:2b:5b:48:8f:e7:ee:59:
be:81:42:51:e1:a2:01:7b:da:1d:14:7c:28:ee:98:
d8:ff:63:54:a1:03:5b:93:e0:97:49:0f:ea:63:1e:
1c:be:46:5a:1c:7a:c9:e8:8f:0b:5a:8b:b4:2d:41:
eb:03:16:50:00:ce:55:4f:02:ca:26:dc:9a:55:1c:
9b:b5:8f:56:82:2a:a8:0b:78:05:1a:6d:50:af:2d:
92:7d:6e:82:1b:b0:3a:bf:08:ef:f0:f6:3b:2d:4a:
c2:30:d3:9a:74:e4:96:c3:82:d7:15:7f:e3:66:aa:
e1:c1:cd:6d:cc:09:2e:70:7c:7d:2e:b1:4a:c3:4d:
40:1f:33:39:2f:49:18:d4:c3:dd:03:cd:cd:f3:09:
67:c4:a8:b9:33:17:1a:83:f5:c1:87:ab:8f:f6:87:
16:6d:4d:a5:a7:a1:0c:dd:2c:f1:e0:f6:6f:27:f6:
18:6f:b5:23:6c:ec:26:fe:3e:76:01:44:a9:df:da:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:0B:0D:0B:15:3E:92:46:DC:D6:00:06:5D:4F:32:C6:D5:86:30
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:af:cd:2a:fe:b8:6b:bc:43:88:24:c9:8f:7d:81:a0:ce:f5:
9e:f1:48:0b:30:ff:87:f3:99:27:96:1a:8a:1b:ec:0b:3e:89:
f7:57:9a:bb:0a:4d:8a:46:0f:24:fa:d6:23:11:5c:ff:90:5b:
7a:57:7a:b8:6a:a9:69:15:86:f2:dc:6c:16:89:33:81:13:29:
a1:cb:9b:23:a9:07:a8:6e:10:ab:3b:09:66:29:fb:83:a6:3b:
2f:10:46:3f:2e:30:83:e9:db:8b:2a:88:8d:92:39:99:5d:6f:
ea:8f:7b:0e:3e:a5:9f:ee:33:39:64:e7:f1:5d:a6:f8:ef:95:
8e:1d:c1:0e:7f:10:24:86:fe:34:0e:d1:c3:65:0c:77:10:d9:
3b:b0:a5:6a:0d:f3:03:f4:3a:61:20:8f:68:31:47:32:38:0b:
a8:99:cd:79:e2:84:36:17:10:a8:39:e4:b1:ae:ee:31:64:16:
dc:0d:d8:89:e8:81:49:f2:3a:7d:4b:c4:61:2f:f6:e5:eb:3f:
61:cc:15:56:e7:de:a6:72:4c:12:2e:e5:f9:46:11:f2:4b:f9:
ea:89:34:b5:bc:62:89:dc:dc:30:76:ef:08:0c:80:eb:50:32:
53:7f:35:2b:9a:47:43:c9:aa:a3:35:56:96:e2:6c:a6:13:ef:
b3:a8:72:b1
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 5 07:32:22 2024 by rpki-client on console-ams.rpki-client.org