Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e20383334.roa
File: 34352e31302e3135392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NPAMteAf3NSLoyiMq4OpMwETVWyR8nkcNsXix/Fpl2g=
Subject key identifier: 4B:A6:03:9D:4D:35:B9:4A:5D:04:31:D3:DD:FE:85:61:B5:42:FA:DF
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 17040600C3191E5A4B0E18DAE8F13AC38C2F02C2
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Jun 2023 08:39:51 +0000
ROA not before: Fri 30 Jun 2023 08:34:51 +0000
ROA not after: Fri 28 Jun 2024 08:39:51 +0000
asID: 834
IP address blocks: 45.10.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:04:06:00:c3:19:1e:5a:4b:0e:18:da:e8:f1:3a:c3:8c:2f:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 30 08:34:51 2023 GMT
Not After : Jun 28 08:39:51 2024 GMT
Subject: CN=4BA6039D4D35B94A5D0431D3DDFE8561B542FADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:1b:aa:ba:26:79:a3:ad:68:2e:fa:5c:31:
65:52:21:3c:12:df:0c:f2:13:35:d0:b0:b5:80:a6:
ac:74:a1:b8:3b:7e:2f:e5:ec:19:f4:3f:d2:52:d0:
fa:67:a9:25:d1:a2:4e:d8:e2:81:0a:0e:c8:95:67:
19:8a:66:bf:d6:38:a0:08:b9:48:9b:57:20:a7:ba:
f3:51:68:28:f2:ac:5a:ad:a1:c4:75:b6:71:5a:0b:
1a:dd:53:a6:e5:ef:1c:ce:41:ac:36:85:f8:5c:15:
7f:ba:6d:20:29:6a:09:65:b4:22:4b:b8:d7:2b:3d:
01:3a:ef:15:7b:f9:7c:13:76:36:61:e8:48:f8:ec:
b4:4b:98:71:b2:73:e7:0e:6c:55:7a:9f:04:4e:35:
4c:dd:62:d1:cd:47:9a:65:cc:c6:4e:b0:c0:99:9f:
67:e0:1b:27:89:31:20:35:4a:ad:39:8c:52:65:ff:
3e:b6:10:b9:40:50:62:bd:18:47:06:73:45:54:d4:
17:11:a3:22:fa:be:61:88:12:33:d1:f5:54:e8:ba:
fe:8a:9c:83:b7:90:50:11:ff:91:07:ec:5f:28:1a:
fa:94:c4:3a:36:eb:bd:41:e6:17:98:33:be:9c:d0:
8f:51:12:9c:4a:6c:37:4e:ca:da:60:78:8a:6c:8c:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:03:9D:4D:35:B9:4A:5D:04:31:D3:DD:FE:85:61:B5:42:FA:DF
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.159.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c5:9d:95:a9:6e:e4:84:ea:89:db:10:51:8b:5b:c7:5e:ef:
ab:94:9d:b0:58:ef:f0:bb:72:ab:ce:9e:19:3f:27:4a:75:4d:
5e:ea:30:05:7e:37:17:8c:b3:21:f4:df:42:2a:eb:1e:c4:f4:
27:a8:b7:d4:a6:25:08:5b:70:3d:c7:78:75:0f:58:2d:5f:2f:
3b:e2:59:5b:9f:29:62:8a:7e:1d:70:d5:57:60:52:27:2a:d5:
d1:57:00:6f:96:bc:77:65:9a:bc:2b:61:b0:f0:2b:31:ff:95:
b2:44:e0:2e:0b:29:bb:88:c4:ae:21:63:f6:bb:35:cb:15:4f:
41:46:0d:6f:2f:ad:8c:11:92:07:aa:b3:c8:17:4a:6e:ed:b0:
7f:0e:ae:2e:ea:6a:46:8c:02:d2:7e:bf:ef:79:ae:29:c9:0b:
a4:70:d7:13:e6:7c:bb:16:4a:a2:54:76:fb:63:ac:2c:24:3d:
06:8a:16:df:80:ab:26:58:79:ce:91:80:56:f5:d4:28:1e:18:
06:5b:1d:bd:9e:c4:78:23:ea:99:9e:d1:e9:f0:c1:50:27:9e:
c4:71:b9:d4:ca:22:7b:ca:49:b1:89:77:ec:77:f3:81:79:bf:
10:59:e1:4e:52:ea:eb:88:17:e4:3e:1b:8a:3d:7f:d2:6b:31:
58:6e:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org