Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e20383334.roa
File: 34352e382e3231392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TQOosEsrnZJ9cvrDdtz/6OeerBTbHlZz9GBtb8EbSyU=
Subject key identifier: 71:15:77:16:28:C8:29:B6:77:FE:F5:0A:92:CB:75:E0:D3:D2:2B:9B
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2942BB118299671218846800964A88A64A95C17E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e20383334.roa
Signing time: Sat 11 Nov 2023 00:00:08 +0000
ROA not before: Fri 10 Nov 2023 23:55:08 +0000
ROA not after: Sat 09 Nov 2024 00:00:08 +0000
asID: 834
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:42:bb:11:82:99:67:12:18:84:68:00:96:4a:88:a6:4a:95:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 10 23:55:08 2023 GMT
Not After : Nov 9 00:00:08 2024 GMT
Subject: CN=7115771628C829B677FEF50A92CB75E0D3D22B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:c9:ac:5a:95:49:1e:77:4f:69:51:f2:32:
b4:7e:46:90:11:a7:17:43:42:a6:95:bc:20:8a:8f:
c4:32:af:10:71:d4:dc:f9:37:c8:52:05:08:13:cf:
af:6e:93:84:1e:c7:64:21:48:0f:72:0c:62:5c:69:
98:f9:9b:ed:58:14:54:01:2e:35:89:a8:b5:1f:8c:
ea:cc:ca:06:df:7d:1e:39:7f:21:7f:c9:78:71:31:
8c:01:e7:dd:37:46:7e:e1:be:7c:b3:4a:1b:53:57:
ca:6c:3f:77:75:39:4d:22:d5:24:01:a7:48:cf:1d:
4e:d5:f0:04:69:4c:f7:68:42:14:69:87:b4:aa:3d:
e1:2f:64:2c:37:2b:98:3a:5f:b0:a4:e8:3b:80:12:
df:71:d1:f5:79:c2:c3:c3:9a:0a:f8:9e:57:fb:69:
d1:cf:79:4c:1b:04:41:44:ad:b8:01:98:80:25:39:
e2:8c:56:03:a2:db:b7:f1:6d:9a:b6:4a:21:0e:ef:
8d:36:14:fe:20:60:f1:a5:4d:7e:fd:72:db:8e:21:
87:74:e2:10:94:12:bc:40:ed:0e:02:2f:8c:80:96:
31:03:90:82:23:de:ba:f4:c8:73:e2:c6:bc:57:c0:
9a:e5:6a:55:36:8b:d2:70:f5:64:91:13:09:b1:36:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:77:16:28:C8:29:B6:77:FE:F5:0A:92:CB:75:E0:D3:D2:2B:9B
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ed:00:ec:47:85:5a:bc:16:03:f0:45:50:46:ce:7c:c2:5c:
62:e0:76:ea:b9:b3:6b:44:69:98:4c:36:07:6a:f3:79:33:53:
63:85:bf:8a:62:a8:15:62:2b:74:c6:b8:03:d3:47:a9:7a:11:
d7:0d:2f:f7:31:0d:96:4f:28:71:67:5b:65:ad:9d:97:25:7f:
e1:f7:dc:e1:95:9a:07:1c:90:4b:cf:86:9d:f9:05:8f:5c:7d:
2f:51:a8:25:86:37:94:b8:ce:c8:25:a1:05:13:93:d0:71:10:
37:2a:4e:8f:3d:09:94:49:ba:6c:4d:1b:15:d7:36:06:e7:47:
22:31:dd:0e:4f:4d:37:55:f0:09:08:13:66:1e:e8:cc:64:29:
78:2f:ae:a0:7b:e7:4c:7a:b0:a1:ce:df:68:c2:2d:2a:f9:3c:
90:92:fa:97:3c:76:c4:8a:22:8a:ad:33:38:e3:5c:9f:b3:d0:
f4:40:dd:b0:f5:ef:ca:3d:16:35:f7:8b:20:36:6c:58:8c:17:
e9:f6:a0:77:e1:af:34:82:63:93:3c:0e:4c:3c:22:63:42:f2:
7b:1d:a5:f1:18:89:a8:b7:03:d0:ae:af:93:5d:ea:c4:d3:a0:
cc:90:ba:12:8e:57:c2:30:40:ef:b0:31:ce:6b:46:d1:d8:91:
7c:0c:18:ce
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 15 11:07:38 2023 by rpki-client on console-fra.rpki-client.org