Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323030343135.roa
File: 34352e382e3137322e302f32342d3234203d3e20323030343135.roa (raw, json)
Hash identifier: tkhS4XmfCM5tw4E4pP1/ehmm4LYgc/T+/Dd5VM/Lsnw=
Subject key identifier: 8F:1C:21:CA:E8:B1:32:9A:F8:66:E7:A7:8F:82:CD:E5:95:AF:90:E4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 15FC605336F55FBCE8BDDEB1165B4CEC7B8A75C6
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323030343135.roa
Signing time: Thu 06 Jun 2024 16:27:13 +0000
ROA not before: Thu 06 Jun 2024 16:22:13 +0000
ROA not after: Thu 05 Jun 2025 16:27:13 +0000
asID: 200415
IP address blocks: 45.8.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fc:60:53:36:f5:5f:bc:e8:bd:de:b1:16:5b:4c:ec:7b:8a:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 6 16:22:13 2024 GMT
Not After : Jun 5 16:27:13 2025 GMT
Subject: CN=8F1C21CAE8B1329AF866E7A78F82CDE595AF90E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:73:f4:ad:e4:de:c3:e1:65:be:8a:3a:35:
23:a8:d3:e8:79:a8:36:49:1f:bb:a9:86:fd:1a:bf:
c5:25:29:11:75:27:66:6d:94:03:9c:45:6c:1c:1c:
b8:24:fe:14:d3:00:40:46:1d:7b:76:7b:60:e5:34:
43:6a:17:55:e9:a1:38:a5:ed:62:99:c2:2f:4f:2f:
fd:8b:ea:fb:c9:de:54:a0:26:56:98:65:9d:22:66:
cd:b9:44:cd:12:90:aa:c6:8f:50:69:91:10:b2:31:
3e:9d:57:6b:93:da:62:38:95:af:6b:0f:47:0a:7e:
6a:4c:97:bd:ab:32:5e:4f:bd:4e:2d:e9:f4:6a:96:
16:29:5e:0f:6a:26:af:ad:1f:d7:a2:1f:7a:30:5f:
e1:44:4b:f6:b9:25:64:90:ec:a4:84:09:6d:93:66:
2a:20:fd:06:39:d5:ad:87:81:d9:1c:cb:7c:28:c7:
aa:09:1f:b1:14:7c:fc:16:bb:e2:d3:02:45:f7:18:
e1:9b:3b:8d:53:be:dd:40:60:44:dd:7b:f2:f5:aa:
18:00:95:97:54:60:28:45:54:42:df:46:88:38:4a:
d8:52:92:0c:3e:cd:6a:b3:2f:bd:fa:6a:04:8b:1f:
01:93:dc:6a:bc:7d:78:00:96:32:4a:85:b5:c5:e1:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1C:21:CA:E8:B1:32:9A:F8:66:E7:A7:8F:82:CD:E5:95:AF:90:E4
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323030343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
24:51:3f:ed:d8:7d:48:15:19:77:e5:88:c7:3d:7d:4d:3d:6b:
7f:65:d2:57:da:bc:e1:12:9c:95:48:2d:23:da:25:6e:c7:32:
5d:31:2a:dc:ef:3a:75:f8:15:2f:26:99:02:ef:1f:71:90:1a:
17:bd:a5:88:ba:22:d0:61:24:2d:4a:69:ce:b5:a9:25:bf:4e:
53:6a:e2:d9:2e:2a:42:50:1b:9e:b7:85:27:ec:1a:ce:94:78:
d1:b5:e5:c2:b0:ae:20:89:92:8a:7c:20:91:06:4d:0f:ae:60:
ab:39:9f:8d:cf:ef:96:a0:c7:b3:f6:74:a2:b3:91:05:69:e1:
03:62:e2:d4:31:f7:8e:6b:75:13:18:54:33:d2:54:1b:2b:c3:
1f:a1:0d:13:b0:b8:46:2d:1e:f4:17:0c:2f:47:50:b0:04:df:
59:c9:b5:c7:36:5d:da:cc:3e:4f:b5:69:e2:d6:cd:08:c7:04:
da:c5:20:b7:54:2e:77:a0:82:e6:74:71:88:55:9a:ac:03:81:
4d:c8:2e:03:52:db:37:1a:09:2e:8c:89:f2:b4:87:c0:ea:37:
09:fd:8d:9c:87:25:cb:18:6e:c8:90:57:86:7c:66:3c:2c:25:
c9:44:bd:08:77:61:20:8e:56:6e:8d:e5:89:53:ac:4f:69:fa:
8b:40:b3:4c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFfxgUzb1X7zovd6xFltM7HuKdcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNDA2MDYxNjIyMTNaFw0yNTA2MDUxNjI3MTNaMDMxMTAvBgNV
BAMTKDhGMUMyMUNBRThCMTMyOUFGODY2RTdBNzhGODJDREU1OTVBRjkwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbXP0reTew+Flvoo6NSOo0+h5
qDZJH7uphv0av8UlKRF1J2ZtlAOcRWwcHLgk/hTTAEBGHXt2e2DlNENqF1XpoTil
7WKZwi9PL/2L6vvJ3lSgJlaYZZ0iZs25RM0SkKrGj1BpkRCyMT6dV2uT2mI4la9r
D0cKfmpMl72rMl5PvU4t6fRqlhYpXg9qJq+tH9eiH3owX+FES/a5JWSQ7KSECW2T
Ziog/QY51a2Hgdkcy3wox6oJH7EUfPwWu+LTAkX3GOGbO41Tvt1AYETde/L1qhgA
lZdUYChFVELfRog4SthSkgw+zWqzL736agSLHwGT3Gq8fXgAljJKhbXF4VsXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjxwhyuixMpr4Zuenj4LN5ZWvkOQwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzQzNTJlMzgyZTMxMzczMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMDM0MzEzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0I
rDANBgkqhkiG9w0BAQsFAAOCAQEAJFE/7dh9SBUZd+WIxz19TT1rf2XSV9q84RKc
lUgtI9olbscyXTEq3O86dfgVLyaZAu8fcZAaF72liLoi0GEkLUppzrWpJb9OU2ri
2S4qQlAbnreFJ+wazpR40bXlwrCuIImSinwgkQZND65gqzmfjc/vlqDHs/Z0orOR
BWnhA2Li1DH3jmt1ExhUM9JUGyvDH6ENE7C4Ri0e9BcML0dQsATfWcm1xzZd2sw+
T7Vp4tbNCMcE2sUgt1Qud6CC5nRxiFWarAOBTcguA1LbNxoJLoyJ8rSHwOo3Cf2N
nIclyxhuyJBXhnxmPCwlyUS9CHdhII5Wbo3liVOsT2n6i0CzTA==
-----END CERTIFICATE-----
Generated at Sun Sep 8 02:09:13 2024 by rpki-client on console-fra.rpki-client.org