Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e203231383539.roa
File: 34352e38312e35382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: EnwyB6hsiHL5g1qsUambnLH6hE5WyqBMAeXMhkJ1EeY=
Subject key identifier: FC:64:5E:38:83:26:E8:46:DB:A4:0D:FC:BD:36:A1:CA:2A:57:55:88
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 478CB7F778958B795EE8FC89840744D95F27AA19
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:47:23 +0000
ROA not before: Wed 31 Jan 2024 10:42:23 +0000
ROA not after: Wed 29 Jan 2025 10:47:23 +0000
asID: 21859
IP address blocks: 45.81.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8c:b7:f7:78:95:8b:79:5e:e8:fc:89:84:07:44:d9:5f:27:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Jan 31 10:42:23 2024 GMT
Not After : Jan 29 10:47:23 2025 GMT
Subject: CN=FC645E388326E846DBA40DFCBD36A1CA2A575588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:eb:19:03:8c:eb:86:85:7f:ea:01:12:46:
00:b2:89:6d:34:49:98:a5:ea:4c:fc:e8:d3:d2:7f:
d6:93:37:25:19:cf:b9:60:07:65:5c:df:90:2a:b3:
68:ba:6b:c7:42:50:26:9e:fe:9d:cc:3b:7a:a3:eb:
de:d5:ea:70:11:6a:49:d6:ff:2a:72:9d:8f:6a:c6:
f9:9e:83:45:ef:41:6b:78:bc:82:78:b5:84:8f:aa:
06:ab:59:ab:42:0a:79:6e:12:8f:9e:80:45:bc:9d:
b1:8c:fe:b7:fc:8b:51:e0:24:88:b2:b4:19:7a:9b:
d0:59:35:05:d7:09:7b:4d:e3:3a:e4:78:e8:41:9e:
b4:1c:51:46:76:18:6f:c3:d9:cf:0e:89:7a:11:b2:
bc:84:8d:71:d3:95:d5:f8:b4:e3:33:1f:00:c0:15:
07:f5:b9:d5:f7:a7:0f:36:1f:75:2c:e2:17:55:94:
b5:e6:81:d4:8a:5c:2e:ed:37:d7:8d:e3:60:e0:5d:
15:dc:2d:f1:60:7b:3f:67:28:c3:7a:39:89:3c:89:
f4:69:9b:3f:ed:25:db:d2:3d:30:0e:3e:01:48:77:
db:ef:ea:9a:29:3a:72:df:00:df:45:d1:2f:f0:89:
46:94:d3:1e:48:21:cd:56:2c:c1:55:c3:f6:63:f3:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:5E:38:83:26:E8:46:DB:A4:0D:FC:BD:36:A1:CA:2A:57:55:88
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e2:e6:59:3c:c9:ff:8d:27:aa:37:94:c8:93:74:d6:7e:d4:
e4:0d:03:93:84:e5:67:78:85:c5:2d:64:9c:46:5b:bc:be:0b:
ae:af:e4:30:53:5d:e7:0d:a9:69:36:ec:7a:50:50:44:94:b4:
76:7f:61:2c:f8:9b:36:17:ad:40:db:91:ec:98:a5:8d:1e:5a:
e9:13:94:54:99:d4:42:3a:d0:49:86:27:60:0a:a9:a1:0d:50:
ff:1f:b9:54:6c:26:29:1b:a6:94:6a:d5:91:ae:31:57:42:9d:
aa:03:de:26:9f:a4:37:ff:96:56:8d:0c:47:28:4b:5c:d3:5e:
30:4e:c6:e1:46:3b:c3:b0:b8:61:3a:5e:b8:92:3e:93:70:2f:
21:9b:62:27:01:a1:18:0e:51:ea:86:11:a7:9b:72:ca:6d:08:
be:6e:16:1f:34:94:8b:73:88:ee:8f:ec:b7:a4:9e:4d:4c:ae:
4e:e0:e3:cd:91:be:b4:c1:f7:2d:82:e1:fc:66:e9:6b:89:65:
09:f6:62:07:be:70:5a:b1:d9:5f:f0:11:b7:09:62:97:f0:62:
6e:9c:5b:c6:3c:35:f0:05:3a:a2:80:ef:7e:60:6f:e5:e0:6b:
e6:d0:46:90:b4:3b:17:bb:68:aa:35:9c:81:92:6d:9d:22:a9:
40:d1:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org