Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FO2VSQEo4in8n5xUOohkE1TuArHQyZKqHsqmIO0EPEc=
Subject key identifier: 92:1D:62:56:4F:AC:ED:8A:36:0E:ED:5B:06:E4:A7:D6:E8:6F:6B:48
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 485C0E9FAFEE1A058064933BDE2E5F2DD6123EDE
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:26:51 +0000
ROA not before: Thu 11 Jul 2024 09:21:51 +0000
ROA not after: Thu 10 Jul 2025 09:26:51 +0000
asID: 834
IP address blocks: 45.146.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 12:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5c:0e:9f:af:ee:1a:05:80:64:93:3b:de:2e:5f:2d:d6:12:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 11 09:21:51 2024 GMT
Not After : Jul 10 09:26:51 2025 GMT
Subject: CN=921D62564FACED8A360EED5B06E4A7D6E86F6B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:85:f8:fa:54:78:45:e4:d4:ee:cc:07:27:
ec:02:35:8d:7c:2d:52:ca:6c:a9:88:d5:70:c8:27:
0d:9c:20:45:15:57:84:69:7f:3b:6c:54:ed:78:8a:
06:bb:43:d4:a2:1f:e1:8a:c4:c0:82:6e:4e:3c:d5:
11:85:55:65:2a:76:0c:ed:63:ed:52:61:1f:5e:9f:
1b:f2:42:c3:62:b5:21:89:0a:44:ec:67:30:d8:aa:
a6:f7:e2:36:19:59:e2:89:ec:a9:1b:ca:ee:b3:6f:
d6:a0:3f:84:b3:6a:ef:54:79:1f:c0:a6:cd:94:34:
74:0d:bf:d7:11:6b:2a:06:06:28:96:ad:01:ac:c4:
d3:a3:47:f1:fe:50:41:88:73:05:72:e8:2b:f9:c3:
e4:a9:96:29:51:4e:c9:69:51:cc:27:e5:49:65:c7:
2d:d5:ee:11:a7:31:73:dc:ed:d3:17:bf:5f:62:03:
d4:c8:45:3a:ec:9b:2a:47:dc:a8:64:50:07:95:27:
ba:33:ef:74:a5:9f:e5:3c:d1:c3:3e:fa:2c:91:63:
3d:82:29:25:a7:9c:73:5d:03:9a:fd:ca:7e:1c:bb:
40:87:50:97:f8:f0:13:69:85:34:c0:b9:bd:e2:86:
c9:d8:bf:e7:98:72:c1:e6:f8:08:b9:10:4e:33:6f:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1D:62:56:4F:AC:ED:8A:36:0E:ED:5B:06:E4:A7:D6:E8:6F:6B:48
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:90:79:a9:51:a1:6f:12:2e:f6:3a:ab:77:3c:67:b9:d5:e3:
32:73:07:75:72:18:c6:59:91:46:79:6c:95:91:71:30:52:6f:
ee:22:f4:73:6b:c0:a9:c0:e9:cb:2f:bd:d4:98:e8:1d:9a:15:
21:da:6a:3a:2b:63:4b:97:3a:b4:f1:07:a2:5f:51:e1:6b:79:
ae:94:68:4b:3e:76:14:79:e7:7e:b2:0f:0f:ae:45:d3:5b:24:
7b:ef:c7:b2:1b:54:3e:b9:45:26:a8:7e:74:e4:b1:d7:9c:51:
ff:3b:35:9e:89:3b:d4:65:e0:07:ac:a6:df:c7:8d:5f:36:88:
47:49:dd:92:26:4b:42:d3:e8:6e:2e:d0:b7:a5:c5:7d:03:ea:
b9:a7:79:96:e9:6a:37:e9:0e:10:33:d0:34:38:a9:a5:96:d0:
dc:1c:58:a5:79:da:20:61:68:1b:04:a5:8c:f0:55:c8:a8:52:
3b:14:8d:b4:40:99:62:83:f0:24:43:69:41:59:45:c1:17:b4:
b6:22:d5:b8:72:e4:c9:82:ee:4f:80:64:fd:25:e2:96:c1:b2:
96:8a:a1:b3:a6:35:12:74:b7:96:36:4a:7d:f5:d3:46:d4:82:
58:9d:79:43:53:a0:5e:e6:4d:4f:28:be:18:87:ef:8b:8e:a6:
09:4e:7e:68
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSFwOn6/uGgWAZJM73i5fLdYSPt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNDA3MTEwOTIxNTFaFw0yNTA3MTAwOTI2NTFaMDMxMTAvBgNV
BAMTKDkyMUQ2MjU2NEZBQ0VEOEEzNjBFRUQ1QjA2RTRBN0Q2RTg2RjZCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvjIX4+lR4ReTU7swHJ+wCNY18
LVLKbKmI1XDIJw2cIEUVV4RpfztsVO14iga7Q9SiH+GKxMCCbk481RGFVWUqdgzt
Y+1SYR9enxvyQsNitSGJCkTsZzDYqqb34jYZWeKJ7Kkbyu6zb9agP4Szau9UeR/A
ps2UNHQNv9cRayoGBiiWrQGsxNOjR/H+UEGIcwVy6Cv5w+SplilRTslpUcwn5Ull
xy3V7hGnMXPc7dMXv19iA9TIRTrsmypH3KhkUAeVJ7oz73Sln+U80cM++iyRYz2C
KSWnnHNdA5r9yn4cu0CHUJf48BNphTTAub3ihsnYv+eYcsHm+Ai5EE4zb+qDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUkh1iVk+s7Yo2Du1bBuSn1uhva0gwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkmow
DQYJKoZIhvcNAQELBQADggEBAA6QealRoW8SLvY6q3c8Z7nV4zJzB3VyGMZZkUZ5
bJWRcTBSb+4i9HNrwKnA6csvvdSY6B2aFSHaajorY0uXOrTxB6JfUeFrea6UaEs+
dhR5536yDw+uRdNbJHvvx7IbVD65RSaofnTksdecUf87NZ6JO9Rl4Aespt/HjV82
iEdJ3ZImS0LT6G4u0LelxX0D6rmneZbpajfpDhAz0DQ4qaWW0NwcWKV52iBhaBsE
pYzwVcioUjsUjbRAmWKD8CRDaUFZRcEXtLYi1bhy5MmC7k+AZP0l4pbBspaKobOm
NRJ0t5Y2Sn3100bUglideUNToF7mTU8ovhiH74uOpglOfmg=
Generated at Thu Jul 11 14:48:01 2024 by rpki-client on console-fra.rpki-client.org