Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20323032333538.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20323032333538.roa (raw, json)
Hash identifier: kPNf/cGil1FZXcMnPkl3JjUFOPQJCq7W8uZV0sXDZgc=
Subject key identifier: CF:58:63:22:04:77:89:25:CC:91:07:D4:04:4A:54:F6:81:5E:DD:47
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 3645815C6E1D317BA6CB8B93EDA060E31A2641B6
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20323032333538.roa
Signing time: Wed 04 Jan 2023 10:44:35 +0000
ROA not before: Wed 04 Jan 2023 10:39:35 +0000
ROA not after: Wed 03 Jan 2024 10:44:35 +0000
asID: 202358
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:45:81:5c:6e:1d:31:7b:a6:cb:8b:93:ed:a0:60:e3:1a:26:41:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:35 2023 GMT
Not After : Jan 3 10:44:35 2024 GMT
Subject: CN=CF58632204778925CC9107D4044A54F6815EDD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:b0:72:f7:ab:2d:55:0a:0e:21:34:87:83:
7e:bd:84:65:a4:71:b6:18:50:da:cd:da:f6:82:ff:
1e:38:44:06:2c:8e:b8:05:d5:fd:6d:78:f4:87:f3:
cc:2e:37:13:d1:03:cb:22:1c:05:f6:39:61:7b:99:
54:a2:64:a9:0b:a2:db:00:1a:52:c7:c0:4f:55:57:
df:b9:35:0b:46:54:07:ed:81:43:03:cc:9f:59:fd:
8c:61:98:54:64:c1:3f:d0:78:9f:a9:2c:98:cd:8a:
5b:8f:1a:fa:f5:36:7f:94:c3:c4:6c:ff:aa:25:d8:
af:dd:82:e1:a4:59:4b:8c:54:31:2f:6a:a4:0a:f1:
c2:e6:2f:01:cf:bc:5e:1d:ae:32:e4:95:ab:ab:7e:
c7:ae:55:43:64:79:e9:27:e0:36:00:6d:85:d1:3d:
c5:5d:63:b5:a7:8c:09:05:ca:16:7a:cb:32:71:23:
b2:63:17:71:40:96:30:ef:a3:f1:2f:7e:cc:d8:9e:
0a:d6:8c:b4:70:1d:05:43:08:1e:a5:4e:0e:f8:ca:
82:f7:43:41:eb:22:47:d2:01:96:fa:7c:70:94:82:
b4:79:03:4a:22:9b:c4:39:d6:60:64:27:49:bb:b7:
c9:4b:cd:3f:f8:0c:2a:43:b9:34:81:3b:ea:4f:b9:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:63:22:04:77:89:25:CC:91:07:D4:04:4A:54:F6:81:5E:DD:47
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20323032333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f1:63:88:c6:12:7d:33:93:d1:9f:54:1c:5e:1e:c7:ec:d7:
5f:cd:e5:03:a5:ef:c5:ef:a6:09:6f:5e:35:43:c4:14:00:cb:
2a:31:5d:d4:20:28:c8:d1:c4:03:51:88:7f:c2:12:90:f4:6a:
78:9f:80:86:90:42:be:a0:1a:9e:8c:44:47:62:79:72:54:6d:
47:e9:08:1a:06:43:a7:ef:07:15:30:5a:ed:f8:b0:a4:f3:82:
9c:8a:f6:6c:45:e4:7b:11:96:b4:4d:0f:5c:6f:df:94:9a:54:
af:5b:2c:4d:41:77:d7:bc:82:61:a7:73:c9:bb:4f:a7:99:c1:
5a:5b:c8:3d:ef:27:c8:df:b0:f6:b2:57:21:dd:d3:47:a4:db:
b6:f9:99:39:a6:11:b6:42:7d:41:a4:82:5c:9f:e5:5f:f3:e3:
75:ce:88:de:98:fa:aa:04:16:9d:d4:1a:91:81:a3:32:02:e5:
23:d7:99:bf:ac:b8:d3:5a:2a:82:f1:d1:95:ac:0a:e7:07:45:
9c:4c:3b:5d:ae:05:7a:da:4a:b9:22:28:eb:32:bd:49:8e:e0:
ff:b6:bb:cb:63:9a:45:21:6c:0f:98:82:93:a6:c1:29:92:10:
dc:f3:4d:0d:e1:fd:76:b9:aa:6e:57:9b:57:df:b7:82:68:1e:
d6:5e:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org