Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa
File: 34352e3133372e3139352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 8RN7SUZmfsL/N27n44Sqbuj4eLiMq8WJFooWdPl3TWM=
Subject key identifier: 49:A1:E9:6A:E1:B7:DE:89:57:D7:FE:59:AB:E2:9A:6A:37:E3:43:B5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 664BAD1B90165B9FC1A653563F4654D1E8EB919E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 61317
IP address blocks: 45.137.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Feb 2025 10:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4b:ad:1b:90:16:5b:9f:c1:a6:53:56:3f:46:54:d1:e8:eb:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=49A1E96AE1B7DE8957D7FE59ABE29A6A37E343B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:7e:ed:bd:69:40:04:a3:e3:40:2a:ad:44:
94:a6:98:08:74:68:eb:f5:1f:ee:08:e1:b7:8a:31:
8c:e8:71:27:76:2d:02:30:55:08:fc:78:44:d2:cf:
07:3c:26:e2:63:7e:db:de:d2:b8:da:07:ad:75:5a:
0f:c3:ff:d5:b0:4f:a4:74:dc:d6:d9:7f:eb:d3:d8:
ec:4b:84:de:4c:24:9e:c2:44:a4:c4:02:7a:47:49:
27:94:0f:8b:5b:2c:6f:9a:c4:5d:62:c4:b5:e0:98:
f5:a5:f4:ab:e4:99:1f:d4:f0:3d:75:7d:a1:21:6e:
be:17:36:89:39:1b:27:68:0f:25:53:d3:7d:16:7f:
f7:9c:5a:03:fd:85:82:21:8e:4a:80:e9:a4:a5:b1:
12:c5:ce:87:6d:46:0e:59:81:55:7c:22:af:a7:71:
2e:44:92:21:e1:e3:96:9d:75:db:01:64:75:77:37:
48:8e:fc:d2:15:ee:61:52:96:69:55:33:4c:0a:b5:
81:3c:6e:62:aa:24:43:4a:55:bd:b9:c5:9d:d4:87:
4d:96:46:da:fe:95:3e:c6:56:69:e8:4c:48:cf:6c:
3c:30:59:cc:cb:79:8b:94:03:cb:6c:6c:d8:24:be:
1a:6e:ae:1c:8d:2d:d1:8e:db:f2:01:13:d6:07:0a:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:E9:6A:E1:B7:DE:89:57:D7:FE:59:AB:E2:9A:6A:37:E3:43:B5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.195.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:64:86:0a:d4:ce:f5:77:49:06:37:79:e7:80:09:48:13:
56:40:86:96:20:3f:07:dc:a6:c8:fc:82:2a:73:9a:c4:c7:ed:
07:69:6d:09:59:bf:1e:a0:00:95:ad:cf:3c:b6:b0:fa:2f:dd:
db:8f:5f:6a:56:cd:13:d8:5f:b2:32:a2:55:9b:ac:6c:21:23:
da:6b:e7:81:83:be:3d:3e:b8:31:4d:2f:32:0f:ce:97:6a:5f:
0d:5e:69:cf:70:ec:55:a8:1c:1d:50:dc:d2:a7:83:fb:f2:e3:
b1:17:eb:14:74:1b:20:30:76:ef:0f:9a:78:6f:78:36:8e:7d:
37:1f:4c:54:46:4b:0c:f3:5a:6a:dc:78:ec:40:48:56:55:9d:
16:8c:a0:22:30:1e:d3:a8:aa:a4:44:21:0d:57:b4:75:71:ba:
f0:c0:d1:18:85:2f:fa:c0:73:f0:fe:64:66:d1:90:91:7f:9c:
89:21:48:db:53:39:df:51:fe:20:11:8f:85:c1:36:73:4b:ba:
3f:48:e8:0b:40:03:2f:80:3f:45:2a:48:12:2b:cd:09:b0:c8:
e0:02:4e:c3:6c:b7:87:1c:ca:4a:2b:4e:04:32:6d:79:9c:32:
a4:05:ef:6a:b1:a9:d6:40:bd:78:35:14:b3:48:3a:c6:ff:7c:
a2:33:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:12:57 2025 by rpki-client