Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e203234383735.roa
File: 34352e3134382e3134302e302f32342d3234203d3e203234383735.roa (raw, json)
Hash identifier: 7iL20gGE9PysPx6P9frQa8ujghf6IuJ30G24ASv33mU=
Subject key identifier: 50:2D:17:E8:EB:38:06:DD:54:BD:66:25:2D:D8:7F:D8:D6:48:C7:9F
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 0EAD74941B5CBE5BE5435AAF175710BBBF9006A3
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e203234383735.roa
Signing time: Wed 04 Jan 2023 10:43:23 +0000
ROA not before: Wed 04 Jan 2023 10:38:23 +0000
ROA not after: Wed 03 Jan 2024 10:43:23 +0000
asID: 24875
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ad:74:94:1b:5c:be:5b:e5:43:5a:af:17:57:10:bb:bf:90:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:23 2023 GMT
Not After : Jan 3 10:43:23 2024 GMT
Subject: CN=502D17E8EB3806DD54BD66252DD87FD8D648C79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:21:2a:c0:76:ee:82:7d:61:7e:7b:8e:aa:
d9:58:54:1b:bb:06:c9:2f:65:a7:bb:d9:d3:10:91:
b2:4c:1e:04:66:ae:ea:fe:c6:b9:6a:fc:79:a5:1a:
74:f5:17:cd:42:e5:36:2a:4f:7f:64:c4:6c:93:82:
61:44:ad:36:a4:d2:12:27:23:7c:ef:ff:f9:00:87:
51:44:82:c8:f2:a1:43:82:10:c5:43:9f:8b:5c:ff:
ea:c7:f3:6b:53:e7:1d:03:44:0b:73:d6:65:a4:e7:
43:b8:be:9d:df:a4:5e:e5:c2:42:1e:92:60:48:ff:
40:e1:da:60:28:8f:ae:7a:97:4f:d9:4f:f6:a1:f4:
43:ec:84:a5:3e:24:b5:b4:fd:d7:c3:22:c7:fc:c4:
35:9f:ee:60:0c:3b:f3:6a:a9:29:08:c8:ad:ba:ea:
99:56:ea:11:85:95:46:dc:fd:bb:a6:77:e8:8e:09:
36:8b:48:4d:4e:3e:40:fe:c0:e8:44:30:f6:93:c1:
0c:29:ec:f0:f1:3c:0e:33:c3:34:05:d3:73:58:67:
67:3f:6f:ce:67:66:4c:cd:43:6b:28:4c:c9:20:11:
6d:25:c8:19:3d:a8:58:df:ef:ca:0c:bb:ef:b8:04:
38:36:8e:b5:1c:0f:f5:f2:ff:f6:68:f1:6f:7a:d2:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:17:E8:EB:38:06:DD:54:BD:66:25:2D:D8:7F:D8:D6:48:C7:9F
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e203234383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bd:ff:5c:0a:74:a6:1a:85:65:91:53:b4:07:c6:5c:df:a7:
4c:b5:02:0a:33:a8:a7:00:af:3e:e1:08:e5:b3:5f:48:08:25:
e2:6a:24:d6:70:bb:8c:7f:87:95:ce:7d:ac:a4:db:7d:98:13:
fd:fc:77:5c:69:c6:97:98:b8:ce:87:3e:9f:d9:09:79:64:c3:
68:29:47:b4:92:59:e9:32:2e:90:61:74:d2:c1:ca:ac:40:cf:
1a:54:67:6b:f7:a7:22:b6:c0:f6:0f:85:2f:13:26:7b:cc:99:
50:47:be:09:da:3d:70:99:42:67:ea:5b:65:f2:36:c8:07:3b:
e3:4a:aa:69:c8:25:77:cf:37:83:b4:9e:6d:10:da:9b:2c:0d:
20:8b:07:2b:52:35:db:39:35:a8:f2:15:07:57:e1:f8:1e:13:
7e:6b:ad:ac:40:aa:3a:32:f9:b1:74:ac:1a:69:4b:08:2f:1f:
2c:6c:a4:d1:dc:23:2c:a3:2f:e5:a5:6d:8c:b1:a7:76:03:1b:
32:fb:9f:7e:e7:30:d6:ae:fe:09:6f:85:aa:74:7e:a0:24:fc:
dc:e6:87:68:53:8b:a5:b4:9a:45:f3:93:2d:7d:53:86:fa:e2:
25:2d:a5:80:3e:5a:b1:fc:49:bc:59:d8:34:a8:a4:6a:fc:e2:
7c:14:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org