Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203230303139.roa
File: 34352e39352e3231352e302f32342d3234203d3e203230303139.roa (raw, json)
Hash identifier: pre2o7dkTIsMnEYN4P1Zz0GqbbpBnjblKUQsteov7aM=
Subject key identifier: 2C:08:25:32:46:AD:1A:83:35:27:01:5C:F0:A4:7F:A3:35:25:7C:4C
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 798B67F997075C966209EB15824257EBAEBDCA50
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203230303139.roa
Signing time: Wed 30 Aug 2023 13:00:41 +0000
ROA not before: Wed 30 Aug 2023 12:55:41 +0000
ROA not after: Wed 28 Aug 2024 13:00:41 +0000
asID: 20019
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8b:67:f9:97:07:5c:96:62:09:eb:15:82:42:57:eb:ae:bd:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 30 12:55:41 2023 GMT
Not After : Aug 28 13:00:41 2024 GMT
Subject: CN=2C08253246AD1A833527015CF0A47FA335257C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1d:26:28:f3:da:f8:e9:73:fa:a2:30:d8:0e:
4b:f3:55:c0:f8:cd:0e:1c:8b:7a:7c:b5:a9:54:0a:
63:67:f3:81:0a:5b:91:8d:33:76:b4:1c:c5:a9:23:
3d:aa:04:2d:36:3f:d2:55:04:1e:25:8d:32:07:ac:
a6:fe:1a:7f:2c:47:0c:d1:41:ea:3b:68:06:ef:ce:
40:b8:11:0f:52:9a:2d:8e:84:0d:04:9a:dd:f6:bb:
dd:6f:f7:05:80:49:6c:89:b3:61:01:cf:a0:66:01:
0a:43:5e:b4:c3:fe:c7:a8:5e:a1:d9:83:83:79:1b:
82:b0:26:75:04:68:41:97:43:23:28:e8:44:90:44:
c3:e3:98:57:6d:6f:7c:73:a6:54:78:a1:19:2a:46:
b7:e8:66:04:10:d6:92:23:9b:4d:6e:8c:76:be:0b:
59:a7:82:12:89:13:38:0d:6a:e1:27:33:c9:04:f7:
07:fa:2a:f8:cd:98:72:53:9a:6d:8a:d4:21:ee:13:
da:54:95:25:5a:48:2c:34:b6:95:60:19:c3:c3:88:
f4:9c:25:74:25:63:97:93:05:62:03:3c:7f:91:22:
03:ca:5c:9b:9e:2e:e4:3a:15:28:62:14:c3:2f:2e:
59:54:e7:be:60:a0:ff:bc:c8:32:3d:9b:64:66:a5:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:25:32:46:AD:1A:83:35:27:01:5C:F0:A4:7F:A3:35:25:7C:4C
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203230303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:58:3c:55:ce:fa:28:9e:7b:a8:7a:d0:71:fb:73:d8:2e:
bf:51:c3:7c:f2:33:4c:a9:6e:8f:78:22:06:09:49:21:f7:5e:
81:7e:98:e1:97:b4:70:cc:ba:a2:ef:b9:60:d5:31:30:5c:30:
68:12:d8:5a:dc:7e:58:0d:8f:2a:c2:13:5a:13:31:25:d0:b3:
a7:17:59:fc:1c:3d:f0:82:db:91:91:59:09:a5:46:1e:36:98:
13:ac:c8:2c:c9:49:1d:80:7f:b9:05:bc:0f:be:e5:52:d2:7a:
57:75:54:d0:6a:00:07:20:51:2d:f3:5d:c2:95:1f:8d:07:ac:
92:64:2d:a7:c3:d2:60:ac:04:27:93:5b:ee:30:24:d9:29:3d:
b2:79:71:0e:31:12:5f:e7:86:59:bf:94:86:c8:d5:b6:78:c6:
9c:df:10:ea:a8:2c:93:fe:ba:7b:73:44:af:f6:ef:d3:1e:13:
cf:8e:d1:b9:d5:e4:aa:0c:d3:4b:30:1e:68:5a:c7:71:90:a4:
5b:7f:59:c7:37:d9:48:57:6d:3d:99:2b:71:85:67:53:6f:2e:
ed:a0:fb:85:6d:01:d2:b8:64:57:26:34:9a:d6:5c:36:9b:8a:
d5:7e:76:ee:f6:2a:fe:56:aa:67:05:a8:86:15:0b:12:62:e0:
9b:47:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 30 00:53:12 2023 by rpki-client on console-fra.rpki-client.org