Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203231383539.roa
File: 34352e3134362e3130372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 9LgDTcPC5BxmDQ6ImIWdF3tT4JLfhwqWgrWVbU5Fbfk=
Subject key identifier: 89:61:FC:3C:12:88:AB:A3:24:32:90:C2:6F:8D:6E:D7:BC:82:94:CE
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5ABC72F5FA3F284D8ECD7F20A2AA6B23D2D04269
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203231383539.roa
Signing time: Sun 12 Jan 2025 11:47:56 +0000
ROA not before: Sun 12 Jan 2025 11:42:56 +0000
ROA not after: Sun 11 Jan 2026 11:47:56 +0000
asID: 21859
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bc:72:f5:fa:3f:28:4d:8e:cd:7f:20:a2:aa:6b:23:d2:d0:42:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jan 12 11:42:56 2025 GMT
Not After : Jan 11 11:47:56 2026 GMT
Subject: CN=8961FC3C1288ABA3243290C26F8D6ED7BC8294CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:7e:ec:33:a4:13:ec:70:79:32:72:6e:18:
59:9d:7f:90:f4:5f:dd:43:86:31:92:0b:8f:0d:3c:
4d:3c:6a:46:d9:cf:02:8f:52:dd:9b:59:d2:cd:3c:
17:6d:c2:58:52:10:75:ea:29:92:29:f8:b6:35:15:
01:81:85:5b:ef:cd:ba:8c:fb:39:98:bc:0f:34:eb:
f5:21:d9:b3:63:80:ed:4f:b6:59:d4:1f:48:61:c4:
2d:d2:9a:40:ad:41:4c:52:01:63:d9:b4:1f:73:2e:
f0:42:f8:9c:81:b3:de:cd:19:cd:0a:fb:ed:62:9c:
92:37:8c:55:36:7d:73:90:00:d8:d4:15:23:e7:a7:
8f:e5:e6:56:12:6c:78:54:f9:68:8f:1a:2d:a8:15:
fb:b5:ed:c1:46:a2:1f:5c:d8:20:3f:03:33:44:a7:
85:81:f2:1f:a3:4d:33:62:30:74:b7:06:7c:f5:8b:
be:1b:57:2f:0f:d8:5b:e5:8b:f7:a1:d6:ab:2c:7a:
a9:3b:73:69:2b:0c:cd:40:92:14:8a:90:80:2c:21:
b9:15:95:f6:c8:a1:de:a6:24:0b:f1:4b:21:60:9c:
6c:24:79:bd:98:ec:6a:59:cd:4d:ff:1f:b6:90:3a:
e1:df:a2:bb:3e:44:29:5b:7d:7d:9d:ab:9c:5d:bf:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:FC:3C:12:88:AB:A3:24:32:90:C2:6F:8D:6E:D7:BC:82:94:CE
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
77:12:18:41:52:9d:c7:c0:cd:d6:c1:49:3e:6a:67:7b:73:62:
c0:db:c4:46:bb:b7:35:c0:4a:e6:7e:05:5b:8c:62:5d:a8:38:
b5:46:cf:de:7c:7b:b0:93:07:15:bd:e6:42:e8:1d:f8:c3:2a:
d5:0a:6d:3b:55:28:ca:4d:86:87:7c:e0:39:51:5a:a1:8f:9f:
de:58:d4:0b:d9:62:6c:a0:ab:4a:7d:24:84:cb:73:f7:e9:6e:
09:b8:b8:ff:60:db:9e:b6:23:31:e8:3f:85:7b:35:a2:90:6e:
54:fd:1e:92:b7:55:a5:8a:ae:34:ce:2a:84:e6:3d:17:87:e0:
05:44:b4:5e:82:f1:96:6a:33:68:b8:02:ae:55:2d:d5:b1:67:
26:57:b0:29:1c:71:17:83:87:34:7a:8b:54:7d:a4:86:9f:8f:
f6:4c:7c:9e:c6:8c:00:c3:a1:8d:7a:79:f2:b8:5e:fe:67:58:
35:28:dd:6c:b9:8e:b9:48:b9:34:7b:5f:8b:a6:cb:89:04:e2:
3d:48:90:a2:12:1e:39:1f:bb:96:f7:24:d6:d8:12:ae:5b:de:
ce:c0:93:dc:d6:77:2f:5c:87:86:50:26:56:64:60:7d:b9:48:
ff:06:4a:0d:af:9f:15:f7:01:1d:9c:f6:72:6c:1d:d1:c6:c8:
73:6c:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:01:52 2025 by rpki-client