Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e20383334.roa
File: 34352e3134312e32312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HYg81NWI7p7S1tKLmX4VmOCBZPv1Q7QcHVFYRAz1Xn8=
Subject key identifier: 8A:20:FD:B6:31:8A:CA:A3:13:F7:C5:2E:96:D8:2D:9E:45:ED:12:C6
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6C26C86B1726DDB2DDC354D8E7C94CF3CC5F2D8A
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Aug 2023 05:07:48 +0000
ROA not before: Sat 19 Aug 2023 05:02:48 +0000
ROA not after: Sat 17 Aug 2024 05:07:48 +0000
asID: 834
IP address blocks: 45.141.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:26:c8:6b:17:26:dd:b2:dd:c3:54:d8:e7:c9:4c:f3:cc:5f:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Aug 19 05:02:48 2023 GMT
Not After : Aug 17 05:07:48 2024 GMT
Subject: CN=8A20FDB6318ACAA313F7C52E96D82D9E45ED12C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:35:75:b9:91:d9:89:c1:b6:12:2c:d2:8b:
1a:be:4b:34:99:50:80:a2:49:87:80:f4:df:79:a7:
68:fe:ac:3b:ba:0e:83:be:1c:d5:6b:af:3b:d6:c9:
e2:23:d9:4e:87:28:77:51:6e:39:63:f2:53:f8:1c:
c2:47:93:3c:86:a7:dd:e8:2c:f8:0a:c5:de:b7:74:
69:e1:58:b5:8a:4c:46:67:c3:3c:36:c5:c9:9f:9e:
32:81:19:30:8d:c4:1b:52:a9:54:2e:70:31:a1:e3:
1f:26:cc:21:54:5b:b8:c4:57:8a:02:05:d1:43:45:
d6:97:15:05:00:97:38:23:40:86:87:cd:55:6c:42:
4d:29:a6:f6:cd:86:c1:2a:2e:17:8c:2f:9d:08:62:
a0:a3:46:79:09:26:c9:f0:0d:8a:64:0c:cf:b9:bc:
c9:ed:29:ac:7a:1c:e6:3f:0f:11:5c:7a:66:db:58:
fd:01:55:19:54:8c:24:31:4c:b1:fb:d9:f8:2f:53:
85:7e:8f:31:a9:c7:cd:10:ec:8e:cb:09:a6:3f:6c:
a8:55:9a:82:bb:01:ee:9f:0f:6a:5e:09:00:fe:dc:
53:ec:15:76:bd:59:27:fe:58:25:2b:ee:71:4c:3e:
b4:c4:ab:50:1b:87:96:9b:cd:21:86:7b:49:a9:53:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:FD:B6:31:8A:CA:A3:13:F7:C5:2E:96:D8:2D:9E:45:ED:12:C6
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b2:c3:3c:fc:3d:3a:0d:21:05:d1:0e:0e:46:dc:03:24:ce:
80:41:c1:20:8f:9c:a4:9d:08:88:db:df:62:20:36:5e:98:0f:
e1:dd:75:b6:a6:44:99:c6:b3:bf:96:9c:de:7e:78:70:2f:eb:
cc:25:c7:d7:cd:e4:00:8f:15:f8:e1:68:1f:c1:90:e5:43:18:
a1:4d:46:37:99:3e:28:d5:1b:34:53:f4:09:36:86:a6:d2:dc:
81:26:ab:8e:63:1e:56:65:65:c7:f2:cc:80:29:2b:b0:b9:c1:
35:e5:e4:49:5a:2b:c2:d1:be:a5:db:57:9d:d6:7c:67:26:23:
0c:08:ed:78:8e:13:16:8e:c4:77:70:5e:37:91:ad:0b:fd:8a:
46:8e:db:d8:0c:25:ac:f3:0b:1d:22:25:84:f1:47:a9:6d:cd:
e1:5a:e5:55:3f:3f:12:73:84:fc:f7:46:8a:1e:ba:5e:9a:8b:
ef:ae:ae:82:4e:02:3d:df:a7:87:bd:5f:71:04:78:c7:89:aa:
45:3b:50:ba:63:cc:6e:07:c2:c8:48:a5:fd:8e:29:3d:ea:b7:
1c:97:2a:5a:cc:24:2b:be:bf:24:b7:e1:13:e5:57:94:d8:6b:
1f:7e:67:66:a2:97:52:e8:44:72:22:12:8f:2f:56:fb:df:46:
67:a8:1b:2f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUbCbIaxcm3bLdw1TY58lM88xfLYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzA4MTkwNTAyNDhaFw0yNDA4MTcwNTA3NDhaMDMxMTAvBgNV
BAMTKDhBMjBGREI2MzE4QUNBQTMxM0Y3QzUyRTk2RDgyRDlFNDVFRDEyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqTV1uZHZicG2EizSixq+SzSZ
UICiSYeA9N95p2j+rDu6DoO+HNVrrzvWyeIj2U6HKHdRbjlj8lP4HMJHkzyGp93o
LPgKxd63dGnhWLWKTEZnwzw2xcmfnjKBGTCNxBtSqVQucDGh4x8mzCFUW7jEV4oC
BdFDRdaXFQUAlzgjQIaHzVVsQk0ppvbNhsEqLheML50IYqCjRnkJJsnwDYpkDM+5
vMntKax6HOY/DxFcembbWP0BVRlUjCQxTLH72fgvU4V+jzGpx80Q7I7LCaY/bKhV
moK7Ae6fD2peCQD+3FPsFXa9WSf+WCUr7nFMPrTEq1Abh5abzSGGe0mpU0m3AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUiiD9tjGKyqMT98UultgtnkXtEsYwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzEzNDMxMmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY0VMA0G
CSqGSIb3DQEBCwUAA4IBAQAossM8/D06DSEF0Q4ORtwDJM6AQcEgj5yknQiI299i
IDZemA/h3XW2pkSZxrO/lpzefnhwL+vMJcfXzeQAjxX44WgfwZDlQxihTUY3mT4o
1Rs0U/QJNoam0tyBJquOYx5WZWXH8syAKSuwucE15eRJWivC0b6l21ed1nxnJiMM
CO14jhMWjsR3cF43ka0L/YpGjtvYDCWs8wsdIiWE8Uepbc3hWuVVPz8Sc4T890aK
Hrpemovvrq6CTgI936eHvV9xBHjHiapFO1C6Y8xuB8LISKX9jik96rcclypazCQr
vr8kt+ET5VeU2GsffmdmopdS6ERyIhKPL1b730ZnqBsv
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org