Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20383334.roa
File: 34352e3135322e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 06M+cEqhX19fL5enhh2OC1qz/qY53hHrYHJhtQokcD4=
Subject key identifier: 64:E6:18:15:10:3D:A4:E6:C9:80:F7:8C:41:A6:DA:79:D9:4C:0F:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6240C988D6695651C1ABB756D2292D8F4EE84AAC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Sep 2024 06:32:21 +0000
ROA not before: Thu 26 Sep 2024 06:27:21 +0000
ROA not after: Thu 25 Sep 2025 06:32:21 +0000
asID: 834
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 05:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:40:c9:88:d6:69:56:51:c1:ab:b7:56:d2:29:2d:8f:4e:e8:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 26 06:27:21 2024 GMT
Not After : Sep 25 06:32:21 2025 GMT
Subject: CN=64E61815103DA4E6C980F78C41A6DA79D94C0F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:e1:b2:e5:9d:b1:9d:99:b5:b7:59:a6:78:
69:cf:51:f3:5a:73:a8:20:0c:93:3f:b3:06:20:a0:
37:c5:7d:88:1a:58:11:83:f7:a7:53:aa:b4:08:22:
8a:25:0f:3f:bb:a1:51:44:4f:11:ca:96:85:60:b9:
f6:e0:bf:e5:b1:57:73:a5:34:90:49:9e:75:39:87:
da:36:3b:3e:f2:01:32:aa:87:11:8c:b8:c2:5d:03:
98:31:39:cf:5f:5a:f0:67:b1:81:0f:39:fa:b2:1f:
d7:9f:85:ec:98:3e:03:e8:04:ea:92:e6:3f:fe:f0:
9e:e1:29:16:33:f0:f7:ae:9c:fe:1d:7e:5c:11:2c:
e8:18:84:b3:66:f3:8c:6d:2f:7f:35:7a:2d:96:4b:
16:4a:4e:82:fc:7e:63:22:c8:d8:2b:37:a2:a0:bf:
83:55:1e:b1:03:bc:f7:ab:c9:41:45:f3:98:c7:61:
16:62:8d:e4:d3:e6:71:a5:32:88:b8:a5:f9:e3:48:
8c:12:b3:17:1c:a1:4a:ff:09:8a:77:c3:16:20:6d:
94:74:b0:24:59:84:37:6c:d3:e2:95:f3:e8:50:62:
be:a7:52:5d:d2:66:7a:95:ff:b9:58:08:5b:a3:05:
f8:1d:29:a8:7d:e9:d5:94:41:cb:78:83:31:6c:97:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:18:15:10:3D:A4:E6:C9:80:F7:8C:41:A6:DA:79:D9:4C:0F:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fd:75:c1:13:e3:2d:89:d0:16:2a:da:b5:c5:6d:fc:fb:c8:
14:b9:de:85:b1:9c:a4:9c:a8:26:98:50:cc:5f:b9:e3:fe:cc:
09:3f:22:e5:2a:07:da:df:84:60:28:68:44:af:cd:ed:db:6f:
69:be:6d:55:2b:a8:30:41:b8:9d:54:f6:79:f5:0c:0f:a5:c2:
dd:6d:a8:e7:1c:21:39:3b:9b:5e:61:70:9c:c2:ba:19:2c:ca:
b8:ba:ad:72:11:7d:de:54:34:02:6a:b3:34:49:8e:99:76:18:
d6:f9:e7:9e:f6:1e:5b:5e:0a:3d:e4:da:a9:5b:fc:cc:b9:a2:
f5:0a:cc:11:b3:e7:bb:83:ea:d8:77:72:2a:c2:38:e0:7c:b7:
69:64:46:14:b9:04:7b:8f:ef:bd:a0:54:5d:2b:e3:3d:98:4e:
f6:1b:d3:75:30:9c:b2:70:74:64:45:fe:f2:44:97:ac:d0:b2:
3b:78:00:27:a4:71:f4:1b:7b:2a:6d:fd:5a:c5:4f:75:06:8d:
2e:57:d6:0f:ae:5a:6d:73:d5:97:a9:a9:1d:6d:87:b1:c3:b3:
f6:a6:6f:10:bb:ec:0e:1e:6d:4b:b3:51:b1:a9:1b:75:bf:2f:
ab:e7:e5:32:90:3e:ff:0e:33:56:d7:86:e7:71:98:73:25:86:
67:c5:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:19 2025 by rpki-client