Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323037363333.roa
File: 34352e3135352e3135392e302f32342d3234203d3e20323037363333.roa (raw, json)
Hash identifier: 1Rzkjg+5MvU743uoCOhmhADnazI0L7l1YFI/VjTJWoA=
Subject key identifier: B5:0D:2A:7B:BB:1A:A4:13:A1:00:CD:E8:B8:DA:41:AB:BE:36:B4:1C
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 08B2A93D32013CE62151ADF8AD8EB0C8C3157638
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323037363333.roa
Signing time: Wed 18 Jan 2023 06:08:10 +0000
ROA not before: Wed 18 Jan 2023 06:03:10 +0000
ROA not after: Wed 17 Jan 2024 06:08:10 +0000
asID: 207633
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b2:a9:3d:32:01:3c:e6:21:51:ad:f8:ad:8e:b0:c8:c3:15:76:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 18 06:03:10 2023 GMT
Not After : Jan 17 06:08:10 2024 GMT
Subject: CN=B50D2A7BBB1AA413A100CDE8B8DA41ABBE36B41C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:4c:89:8d:92:31:28:55:d2:55:30:c9:56:
b6:e4:cc:19:c8:06:b1:05:c2:d5:29:56:5e:33:2a:
c5:c1:84:e0:77:da:c6:a1:10:f7:cf:b1:fe:0c:f7:
5a:88:d5:a8:2b:b0:d6:49:05:42:9c:05:cb:52:c6:
a1:8b:88:50:45:fd:7f:99:58:a0:a3:bf:eb:c7:41:
fa:e3:66:35:3c:3b:e3:ed:30:dc:2b:ef:ab:16:8c:
64:0b:b5:8c:2b:80:ad:0b:7c:e1:6b:90:1f:43:fe:
7d:e8:1c:ec:56:09:c2:aa:ac:ad:13:0e:d8:da:e4:
eb:cb:d9:b7:fe:5f:15:2f:3b:02:ce:05:83:7d:16:
5d:ac:b7:6d:09:88:e6:c7:b6:72:0e:ee:74:19:41:
ff:7f:df:b3:93:85:63:e3:5b:a5:7f:44:91:eb:3e:
b5:20:18:de:44:61:5f:04:a1:12:d0:c9:3d:c6:57:
e0:b0:a5:9f:ea:d2:0d:49:c1:f2:dc:1b:91:f8:b7:
4a:3e:52:1f:72:42:7a:62:85:97:e6:f0:06:86:81:
5e:c9:8c:0b:4e:7f:bc:75:dd:89:bf:63:df:3b:87:
43:d4:7c:96:a5:a0:ba:9e:6f:bf:17:18:42:45:0a:
ab:90:15:80:98:d1:e2:4c:ce:0b:b4:26:87:a3:1b:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0D:2A:7B:BB:1A:A4:13:A1:00:CD:E8:B8:DA:41:AB:BE:36:B4:1C
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323037363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
90:46:45:dc:ff:b4:d1:03:a2:8c:97:5e:7d:07:4c:19:89:44:
ca:b2:46:6f:22:b7:95:a9:2a:cc:7f:bf:9d:c9:d6:52:7d:52:
6e:77:bf:bc:0b:71:4b:66:3d:00:4b:9d:aa:cf:14:87:10:df:
1d:2c:e9:05:fd:9f:6b:e1:d5:a0:1e:42:71:0c:5b:82:79:b1:
15:43:db:b9:52:ba:ae:ea:32:da:33:84:76:a4:c0:8a:3b:f1:
2a:a3:f4:0a:bd:99:92:61:66:9d:d2:d5:e6:52:01:81:57:54:
b0:59:96:33:6a:98:52:92:c8:b1:2f:49:20:ce:be:2b:2a:83:
fb:1b:53:bb:98:17:0c:09:c1:4f:8f:35:00:03:78:7d:02:42:
6d:18:cb:c2:98:4b:94:d0:d5:a4:74:c1:2f:8d:57:73:dd:24:
ca:91:f1:02:7d:1e:bd:26:dc:02:eb:8b:fa:f6:52:2d:81:cd:
c5:dc:0f:e7:ec:c9:9e:32:76:1a:27:9a:5c:eb:20:47:ca:95:
ec:79:2f:ff:33:c6:75:31:f2:6a:01:ac:fe:07:3b:39:9b:b3:
40:e5:88:e8:1a:b3:17:21:37:31:7c:13:0d:a1:19:31:cd:6c:
71:8f:db:5e:fd:c9:97:57:86:26:55:c8:b9:19:a0:b0:50:05:
e8:1f:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-fra.rpki-client.org