Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323135333234.roa
File: 34352e3133322e39392e302f32342d3234203d3e20323135333234.roa (raw, json)
Hash identifier: JtpF1jMPJ4v2DztE0yYp3jOBFVfrEU4abZh1E1BFiTk=
Subject key identifier: 2C:51:D3:DE:F6:A7:40:A3:80:8F:FE:24:A8:D6:EC:85:0D:10:77:B4
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 625CE6B3152AE59AD7E4699386C6EFC0C6E60BAB
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323135333234.roa
Signing time: Wed 26 Jun 2024 16:00:53 +0000
ROA not before: Wed 26 Jun 2024 15:55:53 +0000
ROA not after: Wed 25 Jun 2025 16:00:53 +0000
asID: 215324
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5c:e6:b3:15:2a:e5:9a:d7:e4:69:93:86:c6:ef:c0:c6:e6:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 26 15:55:53 2024 GMT
Not After : Jun 25 16:00:53 2025 GMT
Subject: CN=2C51D3DEF6A740A3808FFE24A8D6EC850D1077B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:7e:1b:1a:a9:31:a9:d6:89:a3:e7:e1:99:
e7:b7:78:ae:9a:5e:1a:7c:5b:ef:61:f7:c5:0a:83:
43:e6:34:0e:f1:35:d3:0e:2c:83:88:33:b2:92:62:
ab:4a:b6:1c:45:32:b7:20:2a:00:b3:7c:8a:40:a2:
59:64:3d:69:99:6b:62:45:84:5b:9f:b5:5f:22:78:
33:00:c5:43:50:2c:d5:b0:eb:f3:fd:b4:3d:71:b8:
bf:a2:fe:a8:35:93:44:fb:62:ee:b9:0c:3e:9a:6a:
93:fa:f3:4f:cb:8a:23:d9:4d:97:4f:dc:86:78:4f:
73:20:2f:66:98:57:9d:93:b7:53:b3:bd:5a:d0:e1:
d8:6e:7e:8a:df:5c:48:f0:f0:1a:6f:25:00:85:4b:
69:89:e7:81:af:6c:e7:e1:81:23:4e:54:ae:26:87:
2d:08:a5:15:e5:fc:a9:ae:ab:bd:5a:26:48:79:6c:
48:9f:b2:16:e7:f6:5a:0c:12:9f:e2:74:94:99:a6:
58:0b:6a:ab:20:6a:76:86:1c:bd:30:6a:18:53:e6:
b6:32:c8:b9:7a:a9:d6:5b:9f:7e:d6:90:9a:eb:71:
09:1d:c3:da:07:84:98:c8:54:ba:a6:ea:eb:99:63:
db:76:41:92:5e:73:9e:5a:3c:45:1d:92:6a:78:9b:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:D3:DE:F6:A7:40:A3:80:8F:FE:24:A8:D6:EC:85:0D:10:77:B4
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323135333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:56:76:59:7e:9a:2d:ec:8c:93:04:b2:64:1d:f6:60:1e:82:
5c:1f:e8:e1:18:b8:77:d9:7a:34:a2:ff:cd:2b:c6:25:92:bb:
91:99:0f:13:19:2b:0a:07:30:5a:e8:e2:96:17:1e:c5:f5:be:
95:2a:4c:dd:4d:5d:56:06:8b:b5:98:0e:c0:a0:8f:c6:00:b5:
d8:4d:86:08:05:51:94:ae:1d:74:69:8c:db:cb:15:9c:c4:ed:
bd:1d:f1:f5:91:9d:b7:6f:f3:9d:0d:1f:74:3e:48:f5:b5:2e:
f8:d2:9e:8b:97:9d:87:06:96:c0:b4:9f:cd:58:79:c0:dc:e6:
ad:28:c8:25:7f:a8:45:d8:0d:b4:c0:e6:1a:fa:40:39:4f:f8:
ae:7b:c0:66:84:c3:8e:96:98:a9:48:6c:9e:34:83:81:70:44:
a4:94:f7:ed:a6:95:da:5a:b2:d6:36:0b:71:c5:0b:83:91:dd:
02:a0:88:0d:96:61:24:1c:14:7b:41:71:78:97:82:cc:e9:e3:
84:a1:4b:2c:5a:05:ec:39:66:f5:b9:51:ef:24:bc:d3:9b:6d:
97:6b:9a:5e:95:0d:67:88:b9:83:4a:4c:7c:ae:03:0b:cb:a5:
2c:32:b6:c6:16:ba:c3:d5:60:b6:ee:09:c2:33:48:41:46:a4:
57:85:df:c1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUYlzmsxUq5ZrX5GmThsbvwMbmC6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNDA2MjYxNTU1NTNaFw0yNTA2MjUxNjAwNTNaMDMxMTAvBgNV
BAMTKDJDNTFEM0RFRjZBNzQwQTM4MDhGRkUyNEE4RDZFQzg1MEQxMDc3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyX4bGqkxqdaJo+fhmee3eK6a
Xhp8W+9h98UKg0PmNA7xNdMOLIOIM7KSYqtKthxFMrcgKgCzfIpAollkPWmZa2JF
hFuftV8ieDMAxUNQLNWw6/P9tD1xuL+i/qg1k0T7Yu65DD6aapP680/LiiPZTZdP
3IZ4T3MgL2aYV52Tt1OzvVrQ4dhuforfXEjw8BpvJQCFS2mJ54GvbOfhgSNOVK4m
hy0IpRXl/Kmuq71aJkh5bEifshbn9loMEp/idJSZplgLaqsganaGHL0wahhT5rYy
yLl6qdZbn37WkJrrcQkdw9oHhJjIVLqm6uuZY9t2QZJec55aPEUdkmp4mx+nAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULFHT3vanQKOAj/4kqNbshQ0Qd7QwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzMzMyMmUzOTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzMzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYRjMA0GCSqGSIb3DQEBCwUAA4IBAQCaVnZZfpot7IyTBLJkHfZgHoJcH+jhGLh3
2Xo0ov/NK8YlkruRmQ8TGSsKBzBa6OKWFx7F9b6VKkzdTV1WBou1mA7AoI/GALXY
TYYIBVGUrh10aYzbyxWcxO29HfH1kZ23b/OdDR90Pkj1tS740p6Ll52HBpbAtJ/N
WHnA3OatKMglf6hF2A20wOYa+kA5T/iue8BmhMOOlpipSGyeNIOBcESklPftppXa
WrLWNgtxxQuDkd0CoIgNlmEkHBR7QXF4l4LM6eOEoUssWgXsOWb1uVHvJLzTm22X
a5pelQ1niLmDSkx8rgMLy6UsMrbGFrrD1WC27gnCM0hBRqRXhd/B
Generated at Mon Aug 26 01:30:27 2024 by rpki-client on console-fra.rpki-client.org