Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
File: 34352e3135302e372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2AhN27KrZULsdDIf4aWqYHbmSfkiTC+Pg+sbOFteL1s=
Subject key identifier: 9F:B9:EF:73:47:EF:3F:6B:A1:18:27:F8:4E:F1:EC:C3:98:66:F2:B4
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 580F09A403CAE9E17767054F1110BD207C1AD4CE
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
Signing time: Sun 11 Aug 2024 00:02:45 +0000
ROA not before: Sat 10 Aug 2024 23:57:45 +0000
ROA not after: Sun 10 Aug 2025 00:02:45 +0000
asID: 834
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 23:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0f:09:a4:03:ca:e9:e1:77:67:05:4f:11:10:bd:20:7c:1a:d4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Aug 10 23:57:45 2024 GMT
Not After : Aug 10 00:02:45 2025 GMT
Subject: CN=9FB9EF7347EF3F6BA11827F84EF1ECC39866F2B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:9a:6f:44:e4:4d:49:99:85:32:97:ae:81:
0a:5a:50:f4:25:54:b4:97:36:cc:8d:3c:b1:c1:38:
c0:c4:7c:29:2b:70:48:5f:c6:f3:7a:88:10:83:4d:
b9:84:ba:d0:07:38:39:d2:13:8b:4f:5f:56:60:0c:
ec:e6:68:ec:f8:e7:c7:14:e4:2b:65:b7:f8:42:be:
7f:0e:51:df:d3:f6:2a:01:fb:6d:c0:59:f0:43:a6:
09:e2:18:4a:9b:0e:8c:d5:cb:53:69:09:ee:2b:78:
e6:d6:c7:57:a1:68:67:9e:e5:6d:f2:90:ca:b5:fe:
cc:38:93:79:2a:65:7b:95:8b:4d:ff:4d:79:61:84:
44:fc:c8:72:65:81:8b:64:06:f0:11:ca:cf:87:39:
3f:bc:96:07:8e:e4:ce:c1:20:bc:70:49:d7:70:77:
ba:21:08:a8:46:a8:f0:fa:ff:ab:e1:0d:5b:4e:2e:
23:dd:f7:4c:90:cb:0c:b2:07:4b:58:d4:04:13:2f:
7e:e0:1a:31:59:c6:f3:e7:ec:47:01:9c:be:7b:17:
33:f1:9d:95:d3:98:ec:1d:48:18:b2:fa:ad:d7:d1:
8d:cd:f5:b9:ff:f9:13:01:76:74:4a:bb:4e:2a:d9:
92:00:4c:7e:b6:02:93:81:c3:db:2c:5d:8a:82:be:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:EF:73:47:EF:3F:6B:A1:18:27:F8:4E:F1:EC:C3:98:66:F2:B4
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:90:5e:75:a4:d9:0d:dd:a6:5d:2f:70:35:e6:19:1a:31:
7c:c7:25:35:12:fa:83:fc:57:6d:ab:80:32:01:21:3b:a4:66:
e7:80:99:cf:66:fe:81:2d:23:05:79:80:2c:ec:93:0a:b0:88:
5d:6b:08:01:5d:5d:4a:84:06:d6:52:96:c2:0a:40:4e:ff:42:
53:25:03:fd:64:f3:8e:8d:78:dc:f5:3a:dc:4a:29:6f:35:6b:
1b:ad:b5:e1:9d:2e:0c:22:2b:e6:8d:5b:0e:17:bf:79:34:22:
f4:64:17:36:2e:a4:01:55:ef:33:a7:35:db:ca:3d:d5:a1:3b:
f1:e7:f8:37:55:72:ea:8a:8c:0b:57:ab:b6:8b:64:8d:39:c1:
01:fb:70:64:d1:9c:5f:84:75:4b:d5:62:8c:6d:a7:52:ad:62:
72:df:21:be:11:e5:ca:d4:f3:15:02:23:b1:bc:4c:a2:d5:fc:
b7:9b:4f:95:35:bd:8f:fc:20:99:30:96:f5:c1:22:f8:d1:1b:
8b:4f:01:64:7d:d7:b0:0b:d8:d5:26:ef:61:c3:df:68:98:eb:
02:dd:08:11:47:f7:45:6d:69:47:70:13:9f:0d:67:fe:c3:62:
96:67:af:74:47:ef:4b:e5:70:32:28:e0:63:84:3f:b5:dd:1c:
50:ab:d3:f4
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 14 02:33:03 2024 by rpki-client on console-ams.rpki-client.org