Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203630313137.roa
File: 34352e3135302e372e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier: S5lO6r964wT96z6kx7vpSJ0a/eGjdctGfy+kuHhHsx4=
Subject key identifier: 8C:2F:D7:CC:49:D5:3F:D9:B1:06:E1:17:9F:C4:57:CB:7D:5E:31:22
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 1D25B992AE0B87171568654E818814CA67B80E02
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203630313137.roa
Signing time: Tue 07 May 2024 18:15:37 +0000
ROA not before: Tue 07 May 2024 18:10:37 +0000
ROA not after: Tue 06 May 2025 18:15:37 +0000
asID: 60117
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:25:b9:92:ae:0b:87:17:15:68:65:4e:81:88:14:ca:67:b8:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: May 7 18:10:37 2024 GMT
Not After : May 6 18:15:37 2025 GMT
Subject: CN=8C2FD7CC49D53FD9B106E1179FC457CB7D5E3122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:31:a8:45:a9:c7:cd:23:5d:7d:c3:fd:ac:
1e:36:bb:df:9f:68:09:0a:c4:fa:fe:99:5f:d7:11:
5a:c1:cf:86:51:ef:a8:b1:e0:5a:fb:52:f5:b9:c5:
4a:76:24:88:71:15:c9:df:b3:31:8e:52:91:a0:d3:
7b:a1:0f:d9:a2:18:25:af:ee:df:6f:e7:ad:9a:10:
13:dc:db:f3:3d:3f:74:61:b5:05:25:7d:7e:7d:22:
a2:52:9b:4c:07:44:15:ed:e3:70:bc:0b:07:9c:9e:
50:99:fd:15:ea:79:41:8a:d4:15:0e:9e:b0:79:91:
ff:ac:3d:19:31:d1:5d:10:17:dc:24:ee:7e:f8:7d:
d2:cf:c4:aa:69:2e:3c:c5:32:04:75:15:ef:cf:0b:
e4:4b:fa:ac:10:b7:6c:f2:65:62:11:5a:5c:ed:99:
79:d2:87:3a:7a:24:db:7a:98:a9:c5:31:1f:07:60:
f9:72:ec:bd:d3:51:19:0f:14:23:e5:30:7e:76:68:
ec:33:44:cd:f4:e5:f3:60:b9:bd:3a:8e:7d:01:36:
b1:56:6c:51:20:78:d5:36:c6:7b:66:83:26:68:66:
4d:f3:06:57:f6:77:95:1b:0a:88:f8:a9:28:91:16:
77:72:51:5d:9c:51:7e:69:7f:d4:f4:17:cf:13:c4:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:D7:CC:49:D5:3F:D9:B1:06:E1:17:9F:C4:57:CB:7D:5E:31:22
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203630313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d9:26:db:a8:89:b0:4e:b3:90:db:29:bb:64:d1:92:05:35:
65:df:f6:dc:f0:c2:19:13:2f:0d:2e:fb:4b:3c:53:70:a8:ae:
77:06:b1:db:bd:9d:9f:cd:86:c4:95:cd:c5:1a:1c:c0:b5:c4:
0b:da:16:ab:a2:fe:01:52:63:19:a8:94:95:67:35:74:12:25:
65:93:2c:fe:26:31:1a:0f:cd:cb:21:f9:27:4b:49:5e:61:0a:
46:89:2c:6b:db:1a:e1:3a:ad:e5:d2:bf:43:c9:8d:8b:ca:be:
4d:64:da:00:e0:8b:82:89:2f:8b:04:f9:33:41:75:cc:d0:fa:
41:d8:41:e2:e0:9d:0c:64:17:58:5e:5c:a7:cb:bc:e6:79:fc:
cd:01:4f:64:ff:d0:41:b7:c0:27:9e:55:13:c1:b5:0e:22:1e:
78:1c:74:78:c3:d3:bd:c1:34:70:9a:a7:e6:60:9d:84:44:dc:
21:59:76:1d:5d:1f:55:d0:28:04:44:bb:e9:c5:a5:d0:30:f6:
d6:40:8d:36:d0:5d:c7:ac:47:d4:a7:7b:c8:6b:45:ce:1d:92:
15:fc:c7:fe:9c:a0:2f:93:27:62:2b:c7:74:69:e5:12:7f:a3:
fd:df:e9:7c:46:01:d9:9b:c7:85:e5:5f:6f:60:aa:d6:d8:cb:
90:ca:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org