Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
File: 34352e38392e3134392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0O3Sr4xnHjDnn2ny4RHNL5pJgVUfS2ecJW/4CzTGUJk=
Subject key identifier: 92:D7:8C:70:05:B6:51:2F:F1:95:F5:F3:14:DC:6B:65:0C:42:29:C5
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4AFB8A943BA8DD24172DE3C120DC1E618301435D
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
Signing time: Mon 18 Dec 2023 07:39:13 +0000
ROA not before: Mon 18 Dec 2023 07:34:13 +0000
ROA not after: Mon 16 Dec 2024 07:39:13 +0000
asID: 834
IP address blocks: 45.89.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fb:8a:94:3b:a8:dd:24:17:2d:e3:c1:20:dc:1e:61:83:01:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Dec 18 07:34:13 2023 GMT
Not After : Dec 16 07:39:13 2024 GMT
Subject: CN=92D78C7005B6512FF195F5F314DC6B650C4229C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:76:17:36:b5:34:fe:57:05:b7:da:53:43:
b3:43:bc:7b:96:e5:98:8f:0b:1c:7a:57:da:25:67:
8b:b3:10:78:84:47:06:df:1b:a6:5f:eb:36:bf:ca:
b1:42:4a:f7:74:c8:94:c0:c7:34:10:05:6a:76:6c:
46:6b:6b:b5:0c:33:03:38:b6:57:9b:4f:e2:6d:bd:
25:93:5b:f9:c5:99:c4:27:f3:e1:d5:97:28:5d:7a:
94:a1:7b:2b:a3:72:ce:50:fc:be:39:bf:6f:73:5d:
43:f0:34:cc:1d:a3:d6:65:77:f1:b5:9e:e5:b4:d4:
48:0e:4a:9a:98:4f:81:3b:95:0f:46:ea:c2:c8:cf:
14:ed:71:88:fd:90:2d:76:6e:4a:83:9a:d8:0c:e8:
42:43:45:82:80:e2:76:6b:bd:b9:13:2a:07:5e:8c:
42:cf:e1:5d:da:4b:4b:86:65:0f:5c:3b:f5:d1:19:
9c:ac:39:19:df:12:30:21:6a:55:a3:3b:b7:2f:4d:
6f:0a:90:af:47:5c:52:f5:58:96:f1:43:67:b5:cf:
8b:99:db:e8:38:3a:03:8b:e0:4f:96:43:ea:3c:c6:
0b:69:2f:05:36:eb:71:69:2d:5d:18:3f:85:21:a2:
c7:37:ae:b6:0d:6b:80:3e:de:42:37:5e:3c:ac:51:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:8C:70:05:B6:51:2F:F1:95:F5:F3:14:DC:6B:65:0C:42:29:C5
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:10:f7:85:9f:69:a6:cd:59:17:70:9f:24:10:87:b0:c9:d8:
82:df:51:4b:dd:dc:55:7f:72:8d:1c:9e:0a:18:40:a6:19:62:
e9:c2:f1:8f:7e:ae:d6:0f:f6:1b:31:58:ed:4a:31:3a:05:4e:
52:bd:16:a4:33:56:99:da:59:d9:6c:51:1c:b9:2a:1c:2f:11:
df:a2:14:3c:5b:0d:f9:68:33:c8:77:82:a5:a8:91:44:23:50:
1e:70:d1:a3:1e:ca:40:3e:43:3b:69:b9:75:5c:4e:82:69:92:
bc:35:14:b6:f3:a9:f5:78:e5:be:08:bb:79:d1:d4:62:73:47:
a4:e4:92:6e:63:8b:f1:bb:aa:83:1a:d4:f8:28:58:73:1b:38:
43:a1:08:b1:e4:d7:63:d8:2b:b3:65:94:e9:20:8b:6c:35:9a:
37:23:c6:c0:fe:d7:54:22:e6:50:0f:08:81:01:8f:69:62:57:
a6:97:3e:0c:de:82:a9:b8:c6:0b:16:fd:10:28:87:65:cf:bb:
df:fe:24:b2:34:dd:86:e9:1f:59:a0:1f:fd:62:cf:6c:81:24:
df:c1:b8:e9:d5:bf:06:42:ee:a7:f0:df:b8:96:d2:7a:1c:3d:
f1:93:5c:8e:99:99:87:7a:50:e5:53:77:55:57:8e:de:3b:64:
88:5e:83:dd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUSvuKlDuo3SQXLePBINweYYMBQ10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzEyMTgwNzM0MTNaFw0yNDEyMTYwNzM5MTNaMDMxMTAvBgNV
BAMTKDkyRDc4QzcwMDVCNjUxMkZGMTk1RjVGMzE0REM2QjY1MEM0MjI5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbHYXNrU0/lcFt9pTQ7NDvHuW
5ZiPCxx6V9olZ4uzEHiERwbfG6Zf6za/yrFCSvd0yJTAxzQQBWp2bEZra7UMMwM4
tlebT+JtvSWTW/nFmcQn8+HVlyhdepSheyujcs5Q/L45v29zXUPwNMwdo9Zld/G1
nuW01EgOSpqYT4E7lQ9G6sLIzxTtcYj9kC12bkqDmtgM6EJDRYKA4nZrvbkTKgde
jELP4V3aS0uGZQ9cO/XRGZysORnfEjAhalWjO7cvTW8KkK9HXFL1WJbxQ2e1z4uZ
2+g4OgOL4E+WQ+o8xgtpLwU263FpLV0YP4Uhosc3rrYNa4A+3kI3XjysUez9AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUkteMcAW2US/xlfXzFNxrZQxCKcUwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzgzOTJlMzEzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVmVMA0G
CSqGSIb3DQEBCwUAA4IBAQA+EPeFn2mmzVkXcJ8kEIewydiC31FL3dxVf3KNHJ4K
GECmGWLpwvGPfq7WD/YbMVjtSjE6BU5SvRakM1aZ2lnZbFEcuSocLxHfohQ8Ww35
aDPId4KlqJFEI1AecNGjHspAPkM7abl1XE6CaZK8NRS286n1eOW+CLt50dRic0ek
5JJuY4vxu6qDGtT4KFhzGzhDoQix5Ndj2CuzZZTpIItsNZo3I8bA/tdUIuZQDwiB
AY9pYlemlz4M3oKpuMYLFv0QKIdlz7vf/iSyNN2G6R9ZoB/9Ys9sgSTfwbjp1b8G
Qu6n8N+4ltJ6HD3xk1yOmZmHelDlU3dVV47eO2SIXoPd
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net