Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135382e302f32342d3234203d3e20383334.roa
File: 34352e31302e3135382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KVtA0YlidDKBxmXNJzrC8p9wIHBnm0cb/uPLToIXTJs=
Subject key identifier: 87:62:7B:04:64:B5:B7:13:7A:6A:B8:41:FD:84:E2:FA:BA:8B:B7:C4
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 01FB124D29D4426DACB626957934F145FDC37C05
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135382e302f32342d3234203d3e20383334.roa
Signing time: Sat 13 May 2023 09:50:57 +0000
ROA not before: Sat 13 May 2023 09:45:57 +0000
ROA not after: Sat 11 May 2024 09:50:57 +0000
asID: 834
IP address blocks: 45.10.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fb:12:4d:29:d4:42:6d:ac:b6:26:95:79:34:f1:45:fd:c3:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: May 13 09:45:57 2023 GMT
Not After : May 11 09:50:57 2024 GMT
Subject: CN=87627B0464B5B7137A6AB841FD84E2FABA8BB7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:af:f4:02:c2:e6:b6:de:86:81:8a:15:2c:
8b:d8:20:97:ee:cd:d2:38:cf:07:87:2b:a9:0d:06:
59:af:ab:0f:b9:4d:09:18:c9:94:a0:e0:41:8c:78:
26:fa:e7:92:85:5d:d1:24:22:af:56:9e:07:59:e1:
3e:ee:bd:c6:f8:02:06:4e:fa:5b:01:95:a2:26:18:
89:c1:54:6c:7f:7e:5b:a6:fa:80:eb:d8:f8:9d:8f:
3a:71:6b:cb:08:c8:1a:24:83:a9:68:9c:c3:80:4d:
5e:e3:36:9d:28:c7:60:78:06:73:73:8d:72:72:45:
c6:cb:c9:3d:8b:7f:9f:ea:c0:f4:c6:bb:bd:a7:6d:
49:ff:e8:ee:55:f7:07:6d:87:b4:a9:d8:32:1f:91:
7b:67:fd:26:fa:ee:f0:ef:83:7c:70:75:d7:db:b4:
b0:c8:be:57:12:ce:69:1d:f7:e5:f5:43:ad:38:25:
50:ff:08:61:5e:f2:df:ab:91:85:c3:e5:69:a5:cd:
15:5e:ea:eb:43:18:d9:c1:c9:58:fa:29:76:37:5c:
76:dc:38:14:35:6a:3e:ef:cb:2e:85:a5:49:2f:b8:
10:32:48:72:90:9b:ea:4f:76:5c:d9:b0:aa:e1:c8:
f3:95:25:31:3b:ef:64:94:6e:6a:12:7e:43:1e:f2:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:62:7B:04:64:B5:B7:13:7A:6A:B8:41:FD:84:E2:FA:BA:8B:B7:C4
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:9e:96:b8:e6:90:f8:f4:ff:68:66:a3:b5:99:0e:01:b0:
f1:d9:23:03:12:41:17:14:b1:ef:a1:09:37:45:22:d5:e9:90:
27:1d:3f:0e:a2:e4:78:92:39:df:d1:7f:3c:5b:49:2e:b0:d6:
03:af:30:e1:3d:a6:ce:9b:43:c3:57:db:bc:b9:5b:ae:fe:79:
05:0d:ae:c9:be:9e:b2:cb:ce:de:0c:d1:70:ea:e1:6c:50:74:
09:f6:52:3c:82:80:ef:bb:27:a2:e5:32:29:b4:e6:74:4a:be:
0d:ae:39:38:d0:75:8b:ba:e9:6d:db:3b:3a:39:1c:b3:c4:e0:
76:ef:31:f1:25:2a:3f:17:64:d4:ed:06:3f:e4:8c:91:e9:f5:
65:3e:64:59:e0:f5:eb:63:62:5f:fe:61:99:6a:5d:0a:4e:31:
b8:89:a6:ce:3e:46:a4:c6:71:0c:25:7b:02:b5:f3:25:fc:e0:
f7:25:9c:69:5b:6d:0c:a9:29:73:cf:ff:f8:16:da:fc:73:a6:
02:db:3e:b6:2f:c1:65:9c:78:dc:7e:af:22:af:be:f6:41:93:
b5:91:48:44:b1:9b:35:9d:42:d6:b1:3e:07:b7:a7:65:08:c6:
68:5b:9d:12:ac:10:8e:49:b4:03:a5:c8:f9:08:9a:47:46:4a:
61:2c:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org