Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e20383334.roa
File: 34352e3134312e32302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zIWxAdkI5ycadTrZ3+xR0mpV3sfqoqnnSuNtHZGi/Fs=
Subject key identifier: 24:CD:3B:6D:DF:A1:AA:36:AC:FD:C2:23:16:83:8E:DF:C2:99:33:04
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 0F660CBD14A4DC4DF638C8F49F4A1A2B244A2486
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e20383334.roa
Signing time: Tue 30 May 2023 06:51:06 +0000
ROA not before: Tue 30 May 2023 06:46:06 +0000
ROA not after: Tue 28 May 2024 06:51:06 +0000
asID: 834
IP address blocks: 45.141.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:66:0c:bd:14:a4:dc:4d:f6:38:c8:f4:9f:4a:1a:2b:24:4a:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: May 30 06:46:06 2023 GMT
Not After : May 28 06:51:06 2024 GMT
Subject: CN=24CD3B6DDFA1AA36ACFDC22316838EDFC2993304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:ef:a5:82:86:0d:4f:d7:5f:9e:f5:98:92:
cb:89:5d:4f:ec:9a:54:fe:c2:64:5d:1c:43:30:38:
2e:2a:5b:01:34:3d:46:f7:8b:b3:ab:c8:41:f3:fc:
e0:9d:d7:77:95:fd:59:e7:df:e2:78:e0:80:c6:a4:
95:87:5d:ce:08:68:1d:c4:dc:df:84:01:6c:40:99:
25:f7:f8:fe:06:fd:29:05:05:c0:0d:f4:b0:51:cd:
97:b0:fc:19:f7:e8:61:51:1b:d9:24:d1:b5:07:c7:
3d:62:ff:c9:23:e4:00:27:84:28:d6:a5:f0:75:f6:
1b:98:69:0e:f5:30:7a:8e:5c:11:6d:b1:18:68:a7:
12:b1:92:9a:7d:16:6c:9e:d8:ce:76:4a:63:7b:0a:
56:19:c7:e3:c2:58:81:3a:da:e2:da:81:f7:0a:7b:
6c:aa:80:f6:9e:04:8d:3a:46:d6:fd:89:9a:b0:1d:
88:49:94:ee:83:ed:b1:70:2a:e0:9a:be:fa:4d:26:
a8:19:67:a7:f0:44:57:40:59:90:18:29:a8:e8:27:
77:bc:46:97:cf:cd:bf:12:88:71:6b:60:85:85:a5:
09:a0:e0:40:a4:77:71:8d:cf:1f:b7:16:cc:c4:fa:
19:2e:2b:e8:cf:d5:70:21:71:ee:b2:e0:d6:c8:07:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:3B:6D:DF:A1:AA:36:AC:FD:C2:23:16:83:8E:DF:C2:99:33:04
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
70:06:1f:c0:50:e8:ab:c3:a4:36:50:40:56:05:81:2b:7d:66:
13:6e:17:6c:43:8a:fc:84:a1:fa:86:03:44:18:fa:ad:fe:3e:
31:3b:bb:8d:e1:49:bb:64:93:89:92:ce:7c:42:13:74:77:d7:
99:4a:03:73:fa:97:dd:92:cf:67:73:bd:41:84:1a:a5:3c:76:
1e:54:5a:c5:ea:cb:fd:77:93:ad:4c:7e:8b:03:0b:b8:aa:d0:
8c:b3:6a:62:2a:5d:6b:5c:1f:16:b8:9a:1c:d1:b3:f3:f4:60:
36:98:0c:2e:fb:38:26:1c:fb:50:18:68:6e:e4:73:2b:44:3f:
0a:e1:b9:e2:e3:44:b4:35:91:45:ea:46:29:17:6e:a8:f1:df:
95:d8:f6:bb:9b:0b:04:4a:4f:72:98:55:f2:60:d8:da:7d:86:
ab:b1:49:ed:a7:3d:cd:2c:ac:99:bd:50:c5:2a:0e:39:83:3e:
0c:d1:d1:3b:38:34:37:8f:4c:85:98:ec:7b:ec:1e:98:a8:a2:
ee:85:32:d8:16:85:c5:57:39:ae:49:2d:0c:ff:10:62:b9:21:
1b:a3:ec:c0:40:ff:41:c8:9f:72:7f:81:1b:0a:18:10:80:25:
d1:fd:2e:0b:11:6b:e7:04:93:03:a4:a3:01:2f:9e:d5:aa:e1:
3e:3e:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org