Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323131353835.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier: Z9QIiXbRKmELUkmG7o0FQO64G/9D2/73kyDbMQX/wXw=
Subject key identifier: D7:62:CC:6C:26:3D:C9:4C:9B:41:27:06:2E:E3:45:B7:40:B4:CB:73
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 1CE2126404C46C6BA15FC87082BC37109D433685
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323131353835.roa
Signing time: Sun 07 May 2023 13:15:36 +0000
ROA not before: Sun 07 May 2023 13:10:36 +0000
ROA not after: Sun 05 May 2024 13:15:36 +0000
asID: 211585
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e2:12:64:04:c4:6c:6b:a1:5f:c8:70:82:bc:37:10:9d:43:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: May 7 13:10:36 2023 GMT
Not After : May 5 13:15:36 2024 GMT
Subject: CN=D762CC6C263DC94C9B4127062EE345B740B4CB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:3d:57:c7:85:e3:c3:84:c1:60:ac:dc:cf:
20:14:92:8f:5b:d6:f7:37:82:d9:3e:2b:d9:86:a8:
e1:40:71:49:96:9a:f8:e5:75:ad:29:56:c8:4c:44:
ed:0d:17:bd:7e:69:df:4c:be:5b:c9:61:a5:f5:c9:
bf:03:1a:76:4b:c3:d8:da:61:e6:65:98:a9:c6:24:
ad:84:02:5c:42:72:10:d9:67:fb:93:6b:f5:42:b9:
83:03:78:a5:8e:69:5b:99:f0:a0:93:55:5b:74:87:
c9:eb:b6:1f:a7:cb:be:79:57:b5:b2:23:4f:ea:f5:
b4:be:f3:68:e2:78:3d:a1:0d:1c:79:24:fb:9e:b5:
d0:02:72:f3:4a:ab:8b:9d:f9:46:97:4f:60:cf:25:
2e:80:cb:a3:3c:4c:70:9f:27:c7:46:28:f1:3e:d0:
a6:ed:19:09:ac:f3:66:4b:bc:df:7c:48:d8:b1:36:
de:9e:f8:85:44:0e:2e:46:b8:10:c4:45:e9:a1:49:
6e:ad:f9:fa:3c:2f:98:14:9c:e6:9d:18:91:29:5b:
2e:ad:1c:4c:f2:5c:60:1c:bf:99:43:7e:53:64:51:
6e:26:9e:d8:cc:52:53:68:44:5f:be:8f:e5:c0:ba:
39:be:86:5a:e3:6a:e4:49:51:e2:fc:5a:79:7a:8e:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:CC:6C:26:3D:C9:4C:9B:41:27:06:2E:E3:45:B7:40:B4:CB:73
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
74:19:18:f3:34:85:00:2a:17:cd:73:ba:f5:15:d9:7e:a8:96:
d8:e8:43:df:9e:4b:55:99:d8:df:6a:c6:f1:b3:11:ae:e9:69:
23:eb:07:34:47:46:ce:1a:bc:b1:0f:16:da:20:1e:10:e0:78:
b9:ad:68:79:18:d5:9a:7a:bd:da:4e:7a:8f:50:40:e5:48:da:
a6:81:85:43:04:ed:8a:5d:4f:04:c3:8a:88:58:e4:e9:1f:1e:
df:eb:5a:2b:fa:4c:78:ee:fc:ca:2e:da:b1:3f:23:4f:f5:c2:
63:84:d0:7a:f4:43:3c:63:24:32:75:37:02:db:7d:44:38:d5:
82:93:55:ca:c6:d2:f2:50:cb:d0:e8:9b:ea:26:9f:27:c2:8f:
e5:8a:43:f2:15:1b:28:23:90:9f:2b:48:00:0d:d9:38:d2:02:
a0:26:9c:78:8e:c9:ab:eb:01:f7:73:d9:3d:7b:6b:d3:88:80:
3e:07:21:29:60:28:1f:73:cc:5b:b8:f0:70:1a:65:c0:31:40:
f2:d3:68:35:d2:e5:e8:ad:ba:f3:3a:a0:f2:1a:a1:97:c8:ec:
00:cc:d1:a9:0a:c4:d2:5f:03:f6:3c:19:c6:96:be:18:d6:7b:
12:ac:88:07:75:c2:4a:ea:24:88:bd:5f:ed:3d:30:d5:76:79:
ac:cf:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org