Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa
File: 34352e3135352e34322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 7jOHovbt7KggzYj6OBxNPaIaqMtI06bPqMgN14M0cqs=
Subject key identifier: 98:14:F4:7A:F5:37:90:00:1C:E3:F0:D0:B3:CB:67:18:2B:D1:73:80
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 0B3A2F37550443EA35E0BDB245A1380100D23F75
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 19 Jun 2023 16:34:13 +0000
ROA not before: Mon 19 Jun 2023 16:29:13 +0000
ROA not after: Mon 17 Jun 2024 16:34:13 +0000
asID: 136787
IP address blocks: 45.155.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3a:2f:37:55:04:43:ea:35:e0:bd:b2:45:a1:38:01:00:d2:3f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Jun 19 16:29:13 2023 GMT
Not After : Jun 17 16:34:13 2024 GMT
Subject: CN=9814F47AF53790001CE3F0D0B3CB67182BD17380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:60:cb:b8:a6:25:c7:ce:fb:23:6d:c2:2b:
d7:46:f7:55:a8:43:38:87:d6:67:84:57:06:71:79:
77:53:67:58:33:16:59:27:37:43:68:1c:a2:72:4e:
f1:c6:49:20:a5:c2:d5:95:08:6a:ab:dd:4b:92:b3:
8f:42:6e:b3:aa:4d:10:28:75:94:ad:7f:e1:e1:4a:
4e:d8:c2:40:cf:d8:ef:14:00:48:19:1d:bb:3b:1e:
68:86:c0:62:53:5c:6b:1f:68:a8:ee:64:fa:43:c1:
26:94:5b:ca:3c:64:e9:d2:1b:db:0d:c2:d5:47:fc:
8d:7f:ed:48:d8:9f:fc:76:5b:1f:91:c9:43:9c:a9:
0e:a2:dd:d8:91:ee:36:b7:8e:e1:30:0d:f2:68:54:
a5:40:0d:45:c2:de:76:48:ec:0f:99:86:e8:ab:95:
6b:af:69:35:3f:01:12:5a:01:ac:2c:d0:3b:57:88:
a1:a6:21:71:66:c8:a3:16:c3:e6:d2:7a:74:41:07:
01:9c:66:23:9c:b0:7c:e9:b3:3a:9b:eb:ae:30:6e:
c3:fe:a9:7f:05:24:84:c9:10:2e:81:1c:d1:12:6f:
82:49:11:98:a0:3d:03:ea:b9:f3:d7:28:d2:cb:56:
4e:92:92:2e:fe:18:19:21:8d:29:ea:f0:4b:fa:94:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:F4:7A:F5:37:90:00:1C:E3:F0:D0:B3:CB:67:18:2B:D1:73:80
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:97:ba:98:52:51:3e:35:b7:6f:1d:bd:8b:2a:3a:b4:d8:ee:
cd:eb:20:87:1e:8e:e8:cc:96:53:73:33:0e:f2:a5:43:b3:c7:
6b:70:f3:e6:cd:c4:45:83:7f:27:ba:64:36:04:0a:5d:67:e8:
db:cb:5b:89:ee:71:af:92:8c:e6:8f:ed:e2:63:05:8d:5c:61:
d3:62:f1:c7:cc:5b:c6:0b:68:25:44:5d:30:44:6b:f2:88:5f:
c6:06:2d:1d:2f:9b:54:8b:55:6a:98:e3:3b:69:b6:49:42:bb:
67:b3:b9:90:65:8d:12:13:8b:29:fc:5d:d5:92:e6:83:33:7e:
09:3b:1f:7f:29:0e:3e:7b:35:ad:3c:17:27:da:ba:ab:28:d8:
d0:03:89:5e:92:4f:d5:dc:0c:aa:59:4a:2f:c0:f5:ac:7d:e7:
74:f5:25:c6:7e:ad:cb:6a:37:13:b8:82:3d:a4:d2:ae:a1:e0:
9b:18:56:03:32:37:26:fa:5a:7b:39:02:ba:fb:00:60:c0:f2:
a4:7b:70:ec:c9:bc:bc:40:4c:3c:fc:56:85:42:5d:d4:7e:44:
6b:c0:8c:90:0a:61:b1:21:ff:36:21:41:3f:d8:c0:a7:49:a9:
dc:85:85:18:4d:14:c6:14:cf:7e:3c:ab:4b:41:3b:8f:cd:fd:
2e:fc:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org