Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HCPgZQOdX8fyniMKOwOAH7WJFxnux3gOrhoOJlR/hJo=
Subject key identifier: 16:1A:5C:42:91:6D:1A:B4:06:BA:33:11:3B:96:FE:21:1D:8A:3A:F3
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0E9DC23BD0B19A7E550A13AD565F69A8D073CC01
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Jun 2024 09:26:27 +0000
ROA not before: Mon 10 Jun 2024 09:21:27 +0000
ROA not after: Mon 09 Jun 2025 09:26:27 +0000
asID: 834
IP address blocks: 45.146.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9d:c2:3b:d0:b1:9a:7e:55:0a:13:ad:56:5f:69:a8:d0:73:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 10 09:21:27 2024 GMT
Not After : Jun 9 09:26:27 2025 GMT
Subject: CN=161A5C42916D1AB406BA33113B96FE211D8A3AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:e9:e6:61:5a:d5:1c:75:3f:63:7b:03:78:
97:b5:9b:38:ac:91:76:61:3e:7b:aa:68:04:a0:73:
d9:cd:6c:5f:3e:33:4b:eb:a9:41:55:f9:d7:73:11:
0d:de:8a:f2:3e:9a:c4:ea:7f:4c:08:58:0e:28:15:
d7:56:b5:d1:db:5a:e2:12:65:34:09:7f:22:e1:75:
7e:8c:0c:08:40:65:6b:1c:db:d2:50:a0:e5:08:07:
b5:eb:b8:02:88:b1:67:f4:b8:ae:c2:18:68:10:13:
95:d3:d7:ea:19:1c:a7:ab:ee:3e:16:c9:3d:55:6a:
52:86:8c:36:82:74:e6:dd:be:fb:81:88:68:06:b8:
03:de:10:66:99:a1:2e:db:66:5c:b7:a6:07:15:9d:
30:05:5d:01:39:3e:93:c5:71:9c:ac:26:69:43:ad:
3e:f3:b6:57:01:5a:63:76:9a:ad:2b:89:02:a2:41:
5c:99:00:f1:22:06:7b:6d:e4:31:08:84:52:c7:16:
f0:14:1b:d9:5f:3c:dc:26:7a:ac:15:2f:d0:86:60:
5c:97:fe:12:93:3e:7b:e7:53:da:35:ca:c9:0e:f7:
1d:5c:99:79:4c:a4:27:be:95:0c:12:ac:18:8c:af:
97:bf:c9:c4:79:ad:03:29:ce:87:73:3b:f9:58:55:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:5C:42:91:6D:1A:B4:06:BA:33:11:3B:96:FE:21:1D:8A:3A:F3
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:84:9a:ac:dd:f2:77:d5:94:fa:fb:cd:1e:0a:91:6b:af:4a:
8f:b3:d2:b0:34:a6:32:de:1b:d7:85:76:d4:58:7d:55:6f:45:
0a:92:95:3b:44:46:d2:d0:a3:e5:24:0b:0a:ff:60:9d:ae:4d:
2d:a5:dd:9d:e1:e7:13:06:bc:bd:9c:4c:d4:b6:65:0f:d5:86:
40:f3:ef:0d:fa:6f:0b:f2:3c:78:96:4a:e4:5f:dd:80:85:8a:
4f:a3:17:70:68:67:40:a5:74:1d:46:f5:7a:31:6d:ca:77:51:
77:8a:b0:d5:8b:e6:7f:9a:9a:e9:0b:61:34:0c:0f:9b:d4:e6:
d6:73:ff:a1:d7:fc:fa:8a:af:bf:fe:26:76:5e:63:dc:b6:6c:
7c:e5:2c:6e:e4:a9:f7:7f:50:07:3a:c9:11:5e:c6:14:ba:e9:
b0:00:34:95:93:5b:a2:1b:6d:c4:16:17:c4:78:ac:71:f9:1a:
42:c8:d7:6e:c5:b4:f7:15:a6:e0:b1:27:8e:91:89:a3:40:6f:
4b:b1:a1:9e:a1:a0:c2:40:6f:2b:9f:3d:18:7d:72:6f:73:28:
84:ba:62:10:ee:3f:75:19:45:0b:12:40:84:cf:f2:f7:e6:de:
b3:ac:56:21:a4:e1:ef:c6:92:e6:e0:4e:14:20:af:99:13:de:
bc:83:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:31:52 2024 by rpki-client on console.sobornost.net