Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
File: 34352e3132392e33342e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: dRA1+jhoHcMmTRDFNaukqkmmj2CK1dYa8XILuSKkKJY=
Subject key identifier: 49:CD:4A:48:ED:A3:2B:B4:B3:2B:82:F3:FE:1B:E3:F2:0C:8A:E2:D3
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 55B56F244B435D170A51A9B1CED4AFC42BDCBFB1
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
Signing time: Mon 26 Feb 2024 08:52:48 +0000
ROA not before: Mon 26 Feb 2024 08:47:48 +0000
ROA not after: Mon 24 Feb 2025 08:52:48 +0000
asID: 19437
IP address blocks: 45.129.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 07:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b5:6f:24:4b:43:5d:17:0a:51:a9:b1:ce:d4:af:c4:2b:dc:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:48 2024 GMT
Not After : Feb 24 08:52:48 2025 GMT
Subject: CN=49CD4A48EDA32BB4B32B82F3FE1BE3F20C8AE2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:30:df:da:78:03:2c:1d:06:9e:a1:6d:36:
7a:77:ad:4d:23:45:f8:40:08:c8:95:c2:d7:69:06:
90:53:76:88:7e:2a:39:c5:bd:a4:2f:69:e0:07:e7:
72:8b:02:b2:9d:5a:5c:d0:db:e3:e5:41:50:fd:d2:
66:3a:c8:80:92:78:92:94:b0:8c:21:f7:c7:1b:d0:
59:51:0e:ab:dc:8a:c9:99:0a:87:e8:73:1e:39:fe:
8b:44:3c:c0:de:23:3e:94:5b:d4:17:7d:0b:5a:de:
90:a2:54:52:fd:09:c9:b9:69:c8:38:36:02:97:4e:
ba:af:61:89:46:18:b5:fe:fe:c2:c1:b3:e2:53:1e:
d2:31:1a:dd:6e:e8:20:a4:b9:c5:bf:be:89:9f:bc:
17:7a:4c:5c:7a:7b:93:bc:a9:cd:83:eb:ac:83:e9:
ad:8e:35:5e:5f:e7:20:07:0b:f5:9b:b3:bc:60:f4:
16:50:f8:f7:f0:7d:79:42:fd:50:90:7e:db:c2:cd:
18:de:f2:16:a3:26:68:cf:46:03:7e:40:26:f6:cc:
ce:c2:eb:d7:77:ad:2a:2f:3a:bd:b7:7e:d3:d5:92:
fd:ea:cd:81:82:ed:8c:9e:0c:ec:f6:2d:99:5a:ea:
34:7f:5b:6a:55:fe:ac:dd:dd:69:45:00:f3:0f:bc:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:4A:48:ED:A3:2B:B4:B3:2B:82:F3:FE:1B:E3:F2:0C:8A:E2:D3
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33342e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.34.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7c:3b:6d:7c:40:5c:1e:16:3f:fb:13:71:f0:17:ce:95:39:
b6:64:aa:82:b3:13:c4:bf:a9:d7:20:ec:be:99:69:45:b0:de:
99:97:1e:56:c0:75:2e:22:0a:ac:33:68:41:68:3c:17:4b:0c:
ff:29:04:8a:5b:49:bc:67:96:cc:1d:da:cc:e2:ca:7e:84:a2:
ff:0c:3a:f4:74:40:c0:a4:28:3d:a0:59:b5:d8:cc:74:88:35:
8c:33:7c:51:36:1a:af:67:c6:57:0b:15:b2:06:55:cf:99:69:
80:cc:de:45:33:53:97:10:a0:6d:0c:d5:e9:15:7c:d9:57:a0:
61:ca:8d:50:bf:d1:ef:6e:eb:c0:e0:e6:be:2b:b8:01:8d:24:
8a:7e:a9:82:bc:2b:3e:6c:13:06:c9:7d:ad:55:3e:ad:ca:e6:
85:89:dc:14:7f:07:ef:46:37:7e:00:55:ff:bc:84:e9:97:6d:
96:0d:a6:9d:ff:ec:67:77:8f:fb:75:c0:7d:49:50:42:05:41:
e1:8e:59:ad:a1:70:50:74:fa:12:c5:da:dd:be:a6:fe:e3:7e:
75:2b:1a:7c:c6:8b:27:94:24:ac:b0:f8:c1:5f:6f:75:ff:34:
70:f9:cd:ed:51:df:23:d0:3a:56:c1:f2:be:74:0c:0f:3a:b6:
39:cc:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 11:50:13 2024 by rpki-client on console-fra.rpki-client.org