Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32332d3233203d3e20383334.roa
File: 34352e36362e36302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: /umUgljmV8Z2yY5lm3SEnTzHTlhjGJFU/WBPhnsUAdU=
Subject key identifier: 0A:BC:61:3A:A7:1C:3B:C1:8B:B6:FB:6C:30:AD:26:87:0E:95:43:94
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 672D0982C66385DA728A7ED80F52563075FE587E
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32332d3233203d3e20383334.roa
Signing time: Wed 05 Feb 2025 13:16:56 +0000
ROA not before: Wed 05 Feb 2025 13:11:56 +0000
ROA not after: Wed 04 Feb 2026 13:16:56 +0000
asID: 834
IP address blocks: 45.66.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Feb 2025 18:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2d:09:82:c6:63:85:da:72:8a:7e:d8:0f:52:56:30:75:fe:58:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Feb 5 13:11:56 2025 GMT
Not After : Feb 4 13:16:56 2026 GMT
Subject: CN=0ABC613AA71C3BC18BB6FB6C30AD26870E954394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:84:25:a9:53:60:fb:ae:50:cc:13:2a:ff:
0a:5c:5a:5a:55:0f:2c:89:b3:b3:b7:9c:2d:04:17:
32:17:db:a6:66:16:8a:f5:8f:af:6a:ec:35:73:29:
49:ec:28:29:26:b9:7e:a7:c7:2f:d0:5c:ad:82:43:
08:f8:70:12:fb:f7:c7:8a:33:d3:ff:54:6b:75:f6:
bf:ef:5d:c6:0b:c0:61:d9:00:51:d4:aa:a3:68:28:
d1:32:51:7c:a6:f5:fe:9d:26:63:26:21:41:1c:90:
82:a0:c8:8d:67:11:5c:93:e9:c5:91:94:12:55:3a:
5b:fd:45:37:89:f2:42:b3:05:db:68:26:41:a2:14:
6f:a7:91:85:99:de:5e:8f:ac:be:26:b4:43:c2:39:
f0:c4:93:7e:44:d1:aa:a7:14:f2:eb:d5:6d:93:54:
20:65:b7:a4:80:08:79:61:75:f5:ca:09:b7:88:70:
78:c3:f5:32:bd:f4:92:00:1b:5b:48:94:ff:09:fa:
63:db:80:9d:9e:19:df:6d:cb:79:e1:dc:c3:22:10:
95:1f:ed:e5:c0:33:7c:69:ce:8f:6e:09:10:df:d8:
ff:c4:b6:1e:aa:aa:10:b4:38:04:81:24:fb:41:05:
7f:2a:a7:e2:9e:f2:95:e3:46:26:35:7a:5a:21:dc:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:61:3A:A7:1C:3B:C1:8B:B6:FB:6C:30:AD:26:87:0E:95:43:94
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a3:c9:89:0d:21:b4:eb:62:66:42:de:de:67:c8:40:43:e3:
fa:e3:1b:1d:2b:bb:62:62:7d:43:9f:1e:fe:85:d8:8c:9f:98:
d2:b4:ca:0d:b2:ef:f3:cd:2b:62:84:98:fe:99:d0:a4:2d:ac:
38:36:31:ef:91:88:e6:16:65:71:35:4b:f5:fd:76:41:c9:ce:
12:25:8d:a9:7a:b1:21:f7:81:c0:3e:e9:e3:1e:b6:54:73:aa:
29:98:b6:d6:05:0c:cb:d7:e8:c5:06:ef:5b:79:40:9f:e8:83:
54:f4:15:6d:9a:74:61:9f:56:f1:1d:42:b6:92:98:5c:b9:3d:
44:d3:c3:fd:ad:06:ff:83:84:43:f5:d2:8b:fd:a6:3f:1e:c9:
5d:34:36:a2:c3:27:c6:0a:15:df:15:32:cd:d1:a1:51:99:d9:
5d:07:28:dd:ab:db:ce:c5:1e:4f:58:6d:ef:70:48:04:ea:05:
f6:8b:40:1f:73:f3:30:2c:9c:39:65:94:b2:12:98:34:80:83:
cf:47:6a:86:3d:fc:6f:c2:f8:7a:91:e2:b5:02:db:6a:96:35:
5f:05:8e:15:17:97:c0:ba:43:49:c1:d6:5b:59:0e:88:45:c1:
9f:11:7e:56:5d:0d:58:85:84:44:3a:5d:35:93:ca:77:2b:12:
3e:c2:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:00 2025 by rpki-client