Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
File: 34352e3135302e372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1gl/ip6KHOo2n/w8kqN6QUGUCLSjDOQW+Ov7Szv/HqE=
Subject key identifier: A1:C5:50:F9:9A:DA:14:D7:B6:5D:55:4C:DB:8B:9B:71:8B:99:B0:66
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 5148A90B89197CEF7EE12406603D99F593128AEF
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 May 2024 00:03:05 +0000
ROA not before: Thu 30 May 2024 23:58:05 +0000
ROA not after: Fri 30 May 2025 00:03:05 +0000
asID: 834
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:48:a9:0b:89:19:7c:ef:7e:e1:24:06:60:3d:99:f5:93:12:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: May 30 23:58:05 2024 GMT
Not After : May 30 00:03:05 2025 GMT
Subject: CN=A1C550F99ADA14D7B65D554CDB8B9B718B99B066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:43:99:f5:50:99:3d:e0:a9:72:1f:fe:9c:
b6:18:0f:56:c1:c8:0d:9a:10:4d:eb:5d:84:9c:fe:
e6:0e:13:d3:03:24:78:d2:64:80:5d:bb:ee:92:f4:
41:6e:7f:ce:c9:f0:e9:f7:d1:55:83:da:de:99:a4:
51:f7:4f:92:3d:96:59:03:c2:9f:97:0e:68:bd:93:
bd:c7:94:43:70:19:42:36:78:f2:94:95:ef:73:dc:
fa:17:99:f9:78:67:4e:b4:52:37:83:88:3d:99:78:
fa:af:25:2c:2d:c3:69:9b:1a:fe:88:ca:fb:13:54:
43:7e:be:cb:d7:37:15:27:ae:8f:28:26:df:d4:cf:
9b:10:a2:7f:83:b1:0e:fa:ff:c2:42:e9:4f:2e:ac:
94:6a:cd:40:16:1e:22:c1:af:a7:71:39:9c:8a:16:
ea:20:f7:02:47:73:95:93:fb:c2:f7:87:27:b8:ca:
fc:71:4d:95:d1:26:23:e4:0d:6d:18:38:e3:93:bd:
44:d3:b5:cc:5b:4b:81:86:d9:81:0d:41:eb:11:13:
9b:f3:d6:b1:9c:1d:fe:43:49:9a:79:d9:5a:c0:7f:
94:0e:67:77:aa:d4:60:d7:8f:46:5f:53:de:c1:86:
52:9c:25:3a:c8:9e:8c:37:02:92:7d:95:fb:96:a5:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:50:F9:9A:DA:14:D7:B6:5D:55:4C:DB:8B:9B:71:8B:99:B0:66
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
65:45:8a:60:69:d3:50:22:f9:87:17:c5:1f:6a:f5:0b:b8:db:
5f:d3:ab:2b:d0:a8:ea:71:71:ea:ad:26:03:7b:4c:de:a9:43:
9d:21:95:bc:3f:80:38:5e:d1:cd:13:52:78:29:bf:3b:c9:d9:
69:ac:86:37:67:b4:ba:50:52:a9:02:1e:b6:f5:a6:ce:02:94:
fb:5e:ce:54:44:97:8a:4e:a8:fb:88:4c:62:60:04:7c:22:9a:
d0:ad:00:02:11:dc:83:77:1a:19:a1:c5:f0:8d:97:cd:57:95:
c8:1e:44:e8:fe:a8:c5:c7:7e:49:97:b8:69:1e:5a:44:6e:45:
7b:cc:94:d3:72:52:21:30:2e:20:ff:be:b6:55:69:c4:df:f8:
59:d5:b4:f0:5d:d1:80:6a:c6:62:3e:dc:a6:a0:f5:1e:b2:18:
82:b8:d1:35:a3:ed:16:6d:72:c9:0a:3e:d2:b9:d0:5d:99:3f:
89:2e:56:48:6c:ef:a2:47:ec:74:96:98:61:44:95:a0:10:d4:
8a:27:a3:2b:a8:e7:58:86:4c:80:fb:ff:82:ee:41:b0:78:eb:
a8:7a:0d:c7:2e:0e:96:2d:40:30:b1:e2:a3:c9:3d:92:6c:78:
a8:36:f9:5e:b6:cb:6d:42:7f:4f:f8:11:af:7f:59:f3:34:0e:
3f:82:ac:12
-----BEGIN CERTIFICATE-----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Generated at Tue Jun 11 12:31:52 2024 by rpki-client on console.sobornost.net