Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: oHwqyW3xz503jiBbYsCkpe9GBcwawMZoHVhKNSiAvQw=
Subject key identifier: D3:5B:49:E6:0C:C9:88:FD:C0:51:1B:18:03:1D:11:5F:2C:C7:C1:31
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6AFDCABCF5F1C4C8FF522DD73E7E269E610A9FA1
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Feb 2025 00:02:36 +0000
ROA not before: Tue 11 Feb 2025 23:57:36 +0000
ROA not after: Wed 11 Feb 2026 00:02:36 +0000
asID: 834
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 13:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fd:ca:bc:f5:f1:c4:c8:ff:52:2d:d7:3e:7e:26:9e:61:0a:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 11 23:57:36 2025 GMT
Not After : Feb 11 00:02:36 2026 GMT
Subject: CN=D35B49E60CC988FDC0511B18031D115F2CC7C131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:12:df:49:a2:55:ea:df:e1:0c:5f:fc:b7:
38:ff:71:86:e1:fd:ba:fb:8f:1c:3b:1b:37:69:1e:
6b:6e:87:73:f0:2e:1f:3a:80:f6:be:03:9f:e1:f2:
d5:69:b8:9c:65:85:68:86:0d:e7:5d:27:62:a5:83:
0f:5b:2f:5c:4c:b4:37:1d:da:a8:ab:09:c5:d9:31:
4e:c2:5a:57:92:a9:d8:f4:cc:01:d1:cf:bf:bf:6a:
64:75:0c:06:22:ff:24:3c:20:14:e6:68:75:83:d9:
fc:2b:40:ef:4f:58:75:be:eb:77:1e:81:c6:9c:2f:
10:97:c2:57:56:9b:4d:27:bb:2a:78:09:e0:91:ed:
41:3d:ca:88:52:54:f2:3e:69:2f:92:e9:df:04:55:
19:b5:3c:03:a9:ce:89:25:fb:22:43:10:2b:3d:94:
6c:14:41:3f:a3:2d:ca:eb:60:c2:cf:f9:1e:37:df:
eb:8e:10:9f:68:fd:08:f8:39:85:5a:79:1e:cd:52:
a4:5e:14:99:52:d5:26:e2:df:c8:ad:6a:00:91:ef:
53:a7:8e:8b:d4:f9:ea:2a:32:7c:25:39:19:f3:ed:
cf:aa:24:17:64:4f:3d:ff:60:e2:79:db:bb:5e:96:
6d:c0:76:52:d1:7c:36:0e:62:7f:00:58:74:fd:8c:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:49:E6:0C:C9:88:FD:C0:51:1B:18:03:1D:11:5F:2C:C7:C1:31
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
31:aa:ef:ba:35:57:ef:11:48:7d:b2:60:63:fd:06:43:e6:c7:
e0:2d:da:54:6e:71:01:f7:98:65:41:f9:7f:14:d2:b2:f6:be:
ac:8a:29:02:17:7c:20:84:32:b7:6b:5d:b2:80:b8:49:b8:46:
46:01:de:0e:7b:e7:51:fd:f3:54:4b:7a:2e:d3:01:7a:c4:ff:
34:ec:9d:39:da:3b:d0:9e:aa:fc:08:42:1a:23:73:a5:b6:f3:
86:61:7b:3c:e8:ca:31:13:4e:0b:ff:a4:fa:30:9d:38:14:df:
c7:7f:59:92:4e:57:5c:28:6c:49:71:7f:3d:24:7f:5e:a8:2e:
8d:aa:4a:73:cb:2e:fd:1b:59:70:0a:57:5e:9a:7b:9e:1c:9d:
a6:d7:c2:15:97:b4:4c:d6:3c:18:52:70:b3:dc:ff:68:5e:6d:
7e:93:39:5b:73:95:ee:13:4c:91:eb:40:65:a4:f6:f2:a3:33:
6e:5e:b6:0e:13:15:52:32:f3:e7:64:ce:91:7c:cb:3e:bc:52:
94:f5:3b:9d:d5:62:3e:53:15:08:2d:9a:c3:3c:54:f1:96:3d:
27:7e:6b:a9:5d:2f:e6:b7:b2:02:ba:67:e5:e4:71:8a:bd:e5:
f0:e2:01:ac:73:0f:2d:2b:57:70:13:19:68:2e:04:b8:df:9a:
82:da:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:56:53 2025 by rpki-client