Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e20383334.roa
File: 34352e39352e38302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: N4gL5a8zkkDQAS0QNiZNekYFH4u4VEuM7Uj//DQhMW4=
Subject key identifier: 51:87:84:31:33:DC:BD:7D:23:8C:45:0F:00:AC:14:84:17:B9:55:2A
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 6485B82E10B607E46B46D95AAF08FDA27B321915
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Nov 2024 00:00:58 +0000
ROA not before: Sun 24 Nov 2024 23:55:58 +0000
ROA not after: Mon 24 Nov 2025 00:00:58 +0000
asID: 834
IP address blocks: 45.95.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 03:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:85:b8:2e:10:b6:07:e4:6b:46:d9:5a:af:08:fd:a2:7b:32:19:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 24 23:55:58 2024 GMT
Not After : Nov 24 00:00:58 2025 GMT
Subject: CN=5187843133DCBD7D238C450F00AC148417B9552A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:c5:0c:9a:15:00:ef:3c:69:28:e9:ef:d0:
41:8a:92:50:73:fb:29:87:0b:b2:f2:7d:29:ce:9d:
f2:98:ae:95:74:49:e7:9e:2f:66:9d:5b:2c:2f:59:
52:4a:c9:1d:5a:e5:4a:03:1a:42:dd:26:2e:9c:85:
ee:d8:0c:48:60:ec:44:43:22:01:58:31:c0:87:88:
9d:58:d4:cf:74:fe:79:ec:b2:e6:37:79:24:06:ce:
89:b9:49:08:90:7d:8f:74:78:af:a8:b1:b6:11:c0:
da:3d:30:9c:d8:9c:a6:df:85:e8:da:3c:f2:1a:54:
4a:80:90:bd:ee:af:7f:76:88:48:fb:50:47:19:31:
a4:c7:94:0a:03:6c:eb:76:5c:a9:2b:c7:f6:d9:38:
20:cf:c3:ea:c9:d3:b6:56:6a:bf:92:ab:98:f6:18:
24:d1:fd:20:0e:c6:b7:5d:d4:fa:3d:23:d6:b9:cf:
6f:bb:f3:69:3c:c3:7f:dc:2e:fe:4a:e8:c7:69:e5:
b8:e3:d6:12:2d:c2:6d:aa:49:62:a5:06:26:aa:1b:
7e:65:e1:02:bc:8a:c3:64:15:b2:ac:f8:ff:e9:80:
8e:9a:48:1e:d9:1e:53:bf:02:57:b2:a8:c9:32:3b:
72:ad:d8:b6:91:fe:19:a5:e8:30:97:04:cc:c8:aa:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:84:31:33:DC:BD:7D:23:8C:45:0F:00:AC:14:84:17:B9:55:2A
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c7:6a:d2:11:13:a5:50:e0:ef:ee:cf:21:61:a3:15:3c:cf:
d1:31:5f:41:b6:b4:7f:c3:d1:ec:3a:37:28:17:95:32:0b:9f:
08:bf:30:96:f5:fb:ec:a8:6e:d3:29:e8:e7:c0:86:46:60:f1:
3a:66:5a:9d:67:1e:ad:43:4a:7c:e7:d7:67:57:6b:a4:a9:77:
6e:47:e6:d4:d1:2e:05:93:10:66:6d:72:fe:6e:a1:d9:27:0d:
be:bc:00:e2:6f:e5:fa:e5:1a:fb:69:7e:13:c5:08:1f:9c:6a:
af:2d:cf:e3:f4:1a:24:75:19:df:ca:da:f9:74:3f:b3:48:30:
d0:48:68:f0:e1:16:35:f3:1d:78:b9:3f:5b:38:4c:c7:47:c5:
a9:75:f8:a6:09:bc:16:1f:b4:7e:20:b3:57:4c:5c:97:a7:23:
34:ba:e3:0f:9f:78:6c:20:e0:86:09:7a:7e:7c:b3:f9:9d:63:
f8:6f:a7:1c:f3:fd:92:f8:51:8c:3c:64:08:ce:4d:30:1e:79:
68:65:59:d7:18:c2:43:3f:51:9a:9c:0e:8b:8d:34:3f:44:3c:
a4:8b:96:08:9e:b6:2b:c4:55:69:f3:79:3c:89:85:c0:23:91:
70:32:57:26:0a:b6:93:44:cb:e7:fc:20:03:8c:bc:3f:50:a2:
a5:da:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:41 2025 by rpki-client