Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e20383334.roa
File: 34352e3135302e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QmrMpWGiFBd3WzGS2CRIA+q8JKmr8T0lL8/M7/LdVNo=
Subject key identifier: 0D:83:0F:A4:69:41:D6:41:B6:42:CF:54:58:92:20:0F:6A:E7:B0:2A
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 087C407ED1D65D55D77EA2B9A697F68DBD3513A7
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e20383334.roa
Signing time: Sun 03 Nov 2024 00:02:19 +0000
ROA not before: Sat 02 Nov 2024 23:57:19 +0000
ROA not after: Sun 02 Nov 2025 00:02:19 +0000
asID: 834
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 19:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7c:40:7e:d1:d6:5d:55:d7:7e:a2:b9:a6:97:f6:8d:bd:35:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Nov 2 23:57:19 2024 GMT
Not After : Nov 2 00:02:19 2025 GMT
Subject: CN=0D830FA46941D641B642CF545892200F6AE7B02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:49:2e:7a:7f:b0:81:ba:73:4e:ff:08:e1:
0b:0d:ea:9a:4d:56:c3:b2:60:68:42:e4:02:0e:a7:
4a:d7:78:67:b4:47:72:a0:cd:16:ff:51:a7:20:eb:
ed:25:ac:79:76:d2:5a:2a:ea:cc:f7:ce:85:84:30:
ad:18:d4:f5:84:7a:af:2e:08:8c:c9:02:24:9e:2e:
f0:1c:8f:59:ca:91:71:b2:bb:2d:87:24:98:22:2a:
6b:c3:f0:75:95:11:96:87:bc:54:21:b9:39:33:4b:
78:6b:dd:e2:5a:b8:99:31:c4:3c:df:9c:11:5d:cd:
c1:37:21:7b:9c:30:31:9a:e7:b2:13:15:31:41:09:
fb:4c:33:66:7c:fa:2d:d3:a1:b2:15:89:4b:a1:4c:
94:2a:36:a7:7b:51:d4:a6:fe:9c:7a:5b:9f:b5:e7:
68:a1:9f:a7:e4:d6:4b:d3:91:d5:38:47:96:a3:24:
e6:e3:7f:3d:10:51:24:37:47:a2:f2:fb:6c:44:16:
96:ef:67:c6:4f:28:45:ca:bb:1b:5d:24:87:fa:57:
84:18:f2:c9:09:ad:92:9a:98:f8:ec:84:73:95:8d:
c6:c5:7a:f8:6e:33:55:ff:03:4e:48:e0:0b:1e:23:
35:69:f4:b6:55:d6:0d:84:02:b2:72:c0:7e:57:c2:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:83:0F:A4:69:41:D6:41:B6:42:CF:54:58:92:20:0F:6A:E7:B0:2A
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
08:01:7d:db:29:b8:78:1b:ce:35:fe:ac:ff:bc:ff:53:c4:1d:
0c:62:12:ee:ef:7f:ce:dd:35:2b:8e:7e:39:14:5b:7e:d6:6e:
72:c9:ef:ad:e9:11:3f:88:81:6f:15:5b:25:64:1c:4d:2d:07:
b2:b8:1b:87:03:69:ea:d1:95:66:c1:5d:72:3c:ee:70:19:92:
b3:43:a3:44:d9:e6:88:df:eb:ec:7f:49:7b:76:9b:ae:09:13:
3e:a3:b2:91:82:06:e6:d2:d9:a4:ee:74:2e:55:cb:48:50:48:
28:18:66:84:dd:8f:6e:6d:eb:db:cc:4e:bc:9e:78:09:4f:c3:
cf:7b:ce:dd:38:d0:d2:49:bf:81:cd:34:2e:8b:f2:86:65:41:
05:a3:78:6a:73:9e:1d:d3:9b:de:85:d8:5b:9c:50:c0:e9:72:
ac:52:92:ab:e9:d2:09:65:0e:40:de:e9:05:3f:1b:f5:9e:db:
cf:b3:df:cd:1a:76:f8:7d:8b:60:fc:f1:82:c4:e1:9d:50:e2:
84:69:bc:7d:e4:c4:1e:39:6b:7d:a9:73:bf:dc:9f:64:3f:44:
5c:fc:0f:db:27:b0:d9:c5:c7:cc:c8:7a:81:f1:ed:aa:56:66:
5a:03:35:f7:35:f5:67:34:04:7a:dd:4b:ee:75:fd:99:d8:28:
7a:fd:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:25 2025 by rpki-client