Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20383334.roa
File: 34352e39352e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Xz8SggdErHt5nq40nPWXVXr1RuT6ND9nhcbja1p//YA=
Subject key identifier: 65:66:A5:82:DC:86:3E:D1:F0:DE:F0:6B:67:3B:A2:05:6D:3C:15:1D
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 663D02D02DEB5E1CDDE94C3196153B98A4408857
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20383334.roa
Signing time: Sat 30 Sep 2023 00:00:11 +0000
ROA not before: Fri 29 Sep 2023 23:55:11 +0000
ROA not after: Sat 28 Sep 2024 00:00:11 +0000
asID: 834
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3d:02:d0:2d:eb:5e:1c:dd:e9:4c:31:96:15:3b:98:a4:40:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 29 23:55:11 2023 GMT
Not After : Sep 28 00:00:11 2024 GMT
Subject: CN=6566A582DC863ED1F0DEF06B673BA2056D3C151D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:cf:ad:e5:37:24:08:a2:d4:64:ae:2f:e2:
af:db:ca:db:16:a2:d2:d5:f2:6a:c8:9c:3f:f2:dc:
9f:ff:92:fe:87:e0:cf:1f:60:2e:62:8c:3b:76:da:
02:4f:09:53:f4:df:2a:01:3e:43:11:b6:32:80:c9:
59:3b:d3:98:5c:db:4c:ef:69:fd:b8:04:81:b7:86:
5c:db:59:39:53:12:6a:36:01:21:c6:57:51:7f:96:
d7:3b:bc:d4:0e:ae:18:66:6a:90:72:ed:a2:20:0a:
3c:a8:e5:c1:d5:46:db:b6:e3:07:0d:0c:cf:c3:5c:
0a:0c:bf:b8:51:14:1e:fa:73:a4:6e:75:3f:a4:9b:
de:26:27:91:f2:c0:c1:11:f3:0a:2d:e5:1c:c4:4e:
4b:44:6f:27:00:f4:eb:d0:4f:79:b4:8c:db:c0:6f:
24:07:77:4d:4a:da:ed:f4:0c:cf:81:d8:ee:e2:2b:
5a:3f:e0:d5:21:1c:43:fd:bb:de:51:02:c8:4e:be:
e1:2b:c5:30:08:ad:b3:34:d7:83:37:e5:31:bc:83:
f9:3b:17:bf:bc:1b:e8:a6:97:d6:a2:1f:8a:e9:02:
d9:d2:21:85:82:1d:40:02:d9:d5:6b:9e:30:f1:3b:
ac:ce:20:48:59:b4:ed:e5:89:51:b3:c6:f7:53:f3:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:A5:82:DC:86:3E:D1:F0:DE:F0:6B:67:3B:A2:05:6D:3C:15:1D
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e5:4c:65:30:7f:15:f0:d1:99:b4:bd:e0:6f:11:69:66:e7:
c5:1d:75:f8:d1:e0:19:ab:f2:72:bf:1a:8f:7f:0e:80:56:23:
1c:5a:be:f1:dc:a1:53:cc:28:81:40:5b:7d:4a:2c:47:23:36:
f3:fd:6c:b7:f8:13:57:e7:05:f9:d0:13:1a:15:e8:38:6e:a3:
22:51:c4:3b:2e:96:9b:c7:3a:43:d6:d7:71:4e:15:8c:db:5d:
5c:6e:08:50:55:00:c6:63:87:cd:6d:d2:4f:95:98:49:a1:6c:
68:c4:c5:d7:ee:84:05:11:87:46:0b:45:6c:be:e8:90:91:62:
16:f4:53:ba:47:27:fc:b1:5b:80:35:b5:4b:e2:71:c4:30:75:
55:d3:c5:69:fc:a9:75:a7:84:6a:c1:ea:53:eb:cc:68:c6:bf:
ce:9e:b3:4b:11:58:04:1a:25:32:27:a4:f1:2e:dc:ce:e5:f1:
86:47:07:01:f6:9c:71:88:3b:e9:6b:0b:0f:22:4a:06:64:4d:
6a:2b:b5:d1:64:59:e5:d1:6a:3e:4f:ed:9d:05:8d:c4:e5:67:
78:86:c8:a9:77:a1:b3:b9:e4:df:98:93:7d:ea:db:6b:f3:35:
d7:96:37:8b:cc:e7:d8:71:a6:dc:a0:75:dc:5f:1a:ec:2f:92:
35:56:9b:8d
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 5 11:32:36 2023 by rpki-client on console-ams.rpki-client.org