Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203336313133.roa
File: 34352e3134382e3134332e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier: 7RXIKi+Da3HE/CGmlRX13ckbMRQt17ipHQI/3oZy5lY=
Subject key identifier: 11:FD:A4:79:7E:54:5C:9E:5A:B2:CD:01:7D:81:05:2E:CB:FD:A1:90
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 48F064B35588AC0ACA8383FBCBD24FC42E565A47
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203336313133.roa
Signing time: Tue 29 Aug 2023 11:48:39 +0000
ROA not before: Tue 29 Aug 2023 11:43:39 +0000
ROA not after: Tue 27 Aug 2024 11:48:39 +0000
asID: 36113
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f0:64:b3:55:88:ac:0a:ca:83:83:fb:cb:d2:4f:c4:2e:56:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 29 11:43:39 2023 GMT
Not After : Aug 27 11:48:39 2024 GMT
Subject: CN=11FDA4797E545C9E5AB2CD017D81052ECBFDA190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:f7:c3:fc:83:ce:8e:48:45:54:04:26:5d:
3c:cc:86:ca:62:d6:2c:c9:a4:9f:4c:eb:1b:0c:0f:
9d:ad:20:06:34:78:b3:e1:0b:95:29:6c:77:e7:1f:
c6:2f:6d:e0:d8:f0:84:e5:43:1e:d4:57:80:8a:ad:
4f:da:6a:69:c1:34:a9:53:83:3b:5d:ff:ee:fb:0a:
45:6d:50:6f:a1:dc:4b:7d:16:6f:75:db:52:33:5d:
f2:fe:3b:2c:e6:26:a5:e9:1a:22:a1:30:38:e2:4b:
51:5e:ca:b0:b4:29:f2:f3:41:a4:a6:fc:61:f3:5a:
ff:b6:39:e6:8a:4d:ef:0a:61:10:93:5e:bc:2f:c9:
d4:cc:56:81:be:9d:a0:7a:a4:48:64:bb:48:58:45:
7f:63:c1:0e:19:2f:45:bd:cf:63:f7:bc:e3:0e:d8:
61:f4:92:65:63:1a:cb:8f:02:28:1a:c8:41:e2:f8:
d8:c7:b7:53:7d:0d:87:8b:bf:9e:b5:75:56:db:02:
aa:66:ac:32:e0:5a:68:53:0c:bf:3f:c5:31:fd:55:
6c:f7:0e:65:f8:b6:2d:a7:de:1c:c1:be:c1:cc:eb:
3d:d9:a5:e6:52:08:e1:de:78:d4:f0:e0:d9:b9:20:
c1:fb:e3:0c:cc:21:45:b3:eb:9f:f7:19:ea:df:08:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:A4:79:7E:54:5C:9E:5A:B2:CD:01:7D:81:05:2E:CB:FD:A1:90
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203336313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:72:b0:fd:a9:a7:d4:1a:de:93:ca:ca:ca:51:b2:6e:58:f3:
12:34:c5:61:51:28:0d:d9:51:6c:ec:09:36:44:13:09:f4:da:
9a:88:84:a0:33:88:d3:06:8a:d8:51:93:2e:16:f4:21:82:e3:
54:8e:a4:b7:96:01:e7:13:57:fa:c0:ee:06:87:9b:15:09:a8:
0c:64:81:30:68:77:3a:46:d2:3e:53:c2:37:97:30:1b:f6:bb:
7d:0e:26:cb:f1:1e:10:5b:82:e5:a7:36:06:36:f3:f6:ea:10:
4b:bb:92:39:f7:fb:12:bf:eb:8c:2a:2e:56:70:4e:ac:07:48:
f7:6a:57:f2:ca:f1:15:cd:fc:3c:3f:e0:b7:06:cd:75:f1:59:
09:04:9d:11:8c:8e:12:23:13:72:e5:a5:69:89:ba:9a:bf:96:
ee:93:f8:2e:c5:f7:2e:b2:00:a5:81:6b:15:25:4f:0f:59:f1:
4f:fe:b0:0b:ae:0d:14:3a:32:0e:70:91:7f:45:e6:81:54:23:
4f:8d:82:e3:c2:93:7e:ef:15:8a:c8:d7:d2:62:a8:e8:c1:25:
06:ae:f7:6f:bc:e2:62:2a:8b:c3:e7:18:9b:93:16:08:b0:c8:
0b:98:01:21:24:95:e2:e1:17:ce:46:ec:e6:69:15:69:5d:bd:
03:ea:2e:79
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 27 13:00:16 2023 by rpki-client on console-fra.rpki-client.org