Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e203432333636.roa
File: 34352e38312e342e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: 5IoQBlg5lKnjtcy5ipCy2wzEXM+mUsMXAMb+eQDovdI=
Subject key identifier: 54:41:D1:63:2A:E4:B8:36:FD:02:44:B3:5A:8A:00:9A:A3:55:D4:07
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 0ADE8A1A6CB25A5DF4C012E2ADBFAFC990207497
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:24:26 +0000
ROA not before: Mon 17 Apr 2023 11:19:26 +0000
ROA not after: Mon 15 Apr 2024 11:24:26 +0000
asID: 42366
IP address blocks: 45.81.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:de:8a:1a:6c:b2:5a:5d:f4:c0:12:e2:ad:bf:af:c9:90:20:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:19:26 2023 GMT
Not After : Apr 15 11:24:26 2024 GMT
Subject: CN=5441D1632AE4B836FD0244B35A8A009AA355D407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:49:8a:3c:7d:f8:2d:81:ce:aa:d2:31:1f:
ad:e5:b0:e1:82:bc:a5:35:f7:31:3e:fe:a8:43:7c:
44:37:56:d0:01:35:48:11:a6:28:94:63:08:d0:75:
a6:8c:03:e5:78:10:d3:9a:2a:09:47:81:62:3a:a9:
09:9b:6f:38:78:4a:f7:ed:cf:19:b5:a3:e6:3c:67:
a3:84:9a:ea:ce:61:d9:ba:38:3d:29:92:cf:77:e2:
c8:dc:81:e1:a1:ae:3c:bb:d4:71:d1:a1:36:c6:ea:
76:3a:bc:66:ea:9b:a5:51:93:c5:7d:ad:f5:e9:35:
07:60:53:b4:8d:76:84:1d:17:a6:06:5f:37:4a:4f:
97:ad:12:69:8f:36:2b:dd:01:3d:75:81:61:a0:8d:
eb:6d:ff:bc:79:07:a4:9f:2a:9c:ab:18:5a:d0:4d:
84:b4:c4:b1:8a:e9:de:63:0d:0e:50:ae:47:fc:79:
df:30:d4:7e:a7:a4:3f:85:04:91:34:21:8e:39:a9:
80:d8:00:aa:e7:ca:87:f5:5f:48:6c:35:10:86:11:
67:59:f9:24:8a:de:a7:f8:20:07:0c:cb:43:16:52:
48:55:48:9d:30:62:78:7e:29:89:28:26:34:6e:c1:
b9:8d:50:f7:78:a7:9f:9c:f9:3d:0f:a1:85:97:5f:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:D1:63:2A:E4:B8:36:FD:02:44:B3:5A:8A:00:9A:A3:55:D4:07
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.4.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d6:91:d2:27:f6:2d:c4:d1:2e:c5:d7:4f:ea:03:8d:35:2f:
26:ae:01:8a:19:13:08:06:08:87:7c:32:07:9d:a1:56:33:b6:
92:d0:53:05:c2:12:f4:7c:52:4a:13:e6:a4:1e:59:66:2d:1f:
03:ef:55:41:db:be:51:d4:4e:de:d4:f7:8b:64:d4:07:02:1f:
d7:12:2d:52:af:9e:d0:c2:7f:57:d2:a4:35:88:8d:82:01:7e:
81:e7:ef:3e:e5:aa:6c:69:f1:ab:81:eb:47:8e:f6:b8:56:df:
96:a9:70:33:33:7f:fc:d9:26:ff:a5:5e:79:12:97:43:81:d3:
fa:5a:e7:63:d2:c7:28:50:67:73:aa:9a:9d:a4:42:c2:47:79:
97:64:27:93:31:29:cb:cf:cd:ef:24:13:25:b7:0b:41:44:9b:
22:b9:62:4b:90:57:31:96:44:f7:82:a0:63:68:92:4a:68:d2:
f4:b3:be:81:ac:df:3b:f7:9c:65:40:4f:f7:86:66:a9:74:c7:
8f:0f:0c:e9:89:d5:8b:ce:41:3f:08:00:05:51:1e:a9:a2:8e:
e6:dc:89:00:b5:31:c4:7c:a0:da:58:8b:64:f9:b7:16:b7:f2:
5c:91:f9:e4:d8:77:93:ce:34:4e:11:2d:83:c0:af:26:a9:fa:
17:eb:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:43:49 2024 by rpki-client on console-fra.rpki-client.org