Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa
File: 34352e38312e35382e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier: 7wqosIaxJiP5Ysu/dd9FrlA3GVYRvUEyoql5Ng1Wlpg=
Subject key identifier: C6:52:EF:3E:DB:13:C4:82:3C:CC:86:6E:AC:A1:52:FD:28:F8:E0:C8
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 1BF33AB338588B3A311DA1ED0B88F4CF74B9A732
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa
Signing time: Wed 15 May 2024 16:26:49 +0000
ROA not before: Wed 15 May 2024 16:21:49 +0000
ROA not after: Wed 14 May 2025 16:26:49 +0000
asID: 1
IP address blocks: 45.81.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 17:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f3:3a:b3:38:58:8b:3a:31:1d:a1:ed:0b:88:f4:cf:74:b9:a7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: May 15 16:21:49 2024 GMT
Not After : May 14 16:26:49 2025 GMT
Subject: CN=C652EF3EDB13C4823CCC866EACA152FD28F8E0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:8a:d9:e1:fa:3c:74:ad:b1:53:51:59:fe:
6a:50:05:16:9e:61:a2:af:1e:fc:44:b4:1a:d9:c1:
5f:15:ad:b0:85:f6:38:bf:e7:1d:34:49:eb:2c:4f:
27:c2:10:1f:b0:ff:b0:1a:51:5c:c6:dc:e7:e1:4c:
81:ae:29:c8:f5:7b:84:8d:97:92:b2:09:0c:95:b1:
20:6c:58:ed:46:22:0a:71:f6:41:5a:cd:07:b8:d8:
bd:7f:a5:33:e0:ee:e3:2a:ad:0f:12:d8:80:46:51:
8b:94:af:2f:24:ae:c3:d3:8c:6d:c9:f6:cb:c3:cc:
1b:4d:5b:b2:5f:6b:69:a4:51:ff:0b:cf:a6:4e:9b:
a8:23:1e:85:e2:ab:8a:89:10:6d:41:87:e9:5a:f9:
83:2e:f0:c1:98:0b:40:5e:a5:69:10:b9:3f:6e:d4:
60:fa:09:14:bc:68:1a:2c:a5:b8:ef:4e:58:ca:5b:
63:25:dd:9e:cb:c1:b7:7b:fc:5b:2c:6a:67:6c:06:
28:60:1f:d1:3f:39:8d:36:81:3a:dc:01:11:e2:4f:
c7:1d:24:07:83:c4:70:ab:de:28:c3:ab:06:79:ea:
66:45:e4:07:cf:c8:f8:6c:fe:05:3b:ba:8c:fd:17:
84:20:a3:1e:fc:60:1e:62:6b:a3:87:3d:1a:9d:08:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:EF:3E:DB:13:C4:82:3C:CC:86:6E:AC:A1:52:FD:28:F8:E0:C8
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:86:00:ed:06:5f:85:71:5d:e9:05:65:8c:59:0e:8f:4d:8d:
e2:6f:c8:3b:32:ae:4e:0b:cb:6a:75:df:b0:47:31:6a:e7:9e:
68:a1:78:29:30:db:80:f1:4d:e7:ec:ee:10:55:68:b7:af:48:
aa:32:2d:0f:9d:2f:4a:e0:e1:bb:27:79:28:5a:f9:bd:f7:d4:
1c:8e:b7:8f:95:16:57:4a:20:ee:57:f2:b2:43:32:20:7f:6e:
d6:e0:8d:cb:ba:a4:fa:99:e3:63:54:25:fb:34:19:40:e8:2d:
70:fc:92:ed:cc:45:f4:8b:1f:ba:4f:3e:d8:3a:d9:4c:f8:67:
78:f0:49:a1:24:5f:02:2d:23:87:ba:d4:e5:a8:a9:72:b7:a9:
9a:7f:51:1c:21:bd:9f:bc:18:2c:7b:94:25:80:a9:1e:4f:9c:
5a:66:fe:cf:de:b6:5d:32:e1:cf:aa:e4:55:17:5c:19:03:98:
14:f9:43:b9:15:6c:91:f7:77:f1:35:75:c3:51:09:34:28:d4:
21:b1:af:5b:cc:34:40:a8:0d:ce:a6:e9:cf:a6:cc:88:48:56:
81:0c:0f:f5:65:fa:ad:bd:ca:cf:da:b6:f3:f8:9a:7d:73:cd:
6e:86:2f:75:3b:d0:4f:65:2f:ea:99:b1:8b:b8:b4:26:f0:68:
a8:fb:f8:b9
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUG/M6szhYizoxHaHtC4j0z3S5pzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy
ZTkwZGRmZTAeFw0yNDA1MTUxNjIxNDlaFw0yNTA1MTQxNjI2NDlaMDMxMTAvBgNV
BAMTKEM2NTJFRjNFREIxM0M0ODIzQ0NDODY2RUFDQTE1MkZEMjhGOEUwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EIrZ4fo8dK2xU1FZ/mpQBRae
YaKvHvxEtBrZwV8VrbCF9ji/5x00SessTyfCEB+w/7AaUVzG3OfhTIGuKcj1e4SN
l5KyCQyVsSBsWO1GIgpx9kFazQe42L1/pTPg7uMqrQ8S2IBGUYuUry8krsPTjG3J
9svDzBtNW7Jfa2mkUf8Lz6ZOm6gjHoXiq4qJEG1Bh+la+YMu8MGYC0BepWkQuT9u
1GD6CRS8aBospbjvTljKW2Ml3Z7Lwbd7/FssamdsBihgH9E/OY02gTrcARHiT8cd
JAeDxHCr3ijDqwZ56mZF5AfPyPhs/gU7uoz9F4Qgox78YB5ia6OHPRqdCMt7AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUxlLvPtsTxII8zIZurKFS/Sj44MgwHwYDVR0j
BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj
Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2
UTNmNC5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It
N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVE6MA0GCSqGSIb3
DQEBCwUAA4IBAQBehgDtBl+FcV3pBWWMWQ6PTY3ib8g7Mq5OC8tqdd+wRzFq555o
oXgpMNuA8U3n7O4QVWi3r0iqMi0PnS9K4OG7J3koWvm999QcjrePlRZXSiDuV/Ky
QzIgf27W4I3LuqT6meNjVCX7NBlA6C1w/JLtzEX0ix+6Tz7YOtlM+Gd48EmhJF8C
LSOHutTlqKlyt6maf1EcIb2fvBgse5QlgKkeT5xaZv7P3rZdMuHPquRVF1wZA5gU
+UO5FWyR93fxNXXDUQk0KNQhsa9bzDRAqA3OpunPpsyISFaBDA/1ZfqtvcrP2rbz
+Jp9c81uhi91O9BPZS/qmbGLuLQm8Gio+/i5
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:58 2025 by rpki-client