Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203432303933.roa
File: 34352e3134382e3134332e302f32342d3234203d3e203432303933.roa (raw, json)
Hash identifier: HJx2peOEX4OyI9LtM+IQ2RU3bsRn3hb3eFMcd3ISGBM=
Subject key identifier: A1:3E:CB:35:65:D1:87:E2:3E:8C:5D:9F:A7:23:64:E5:B7:79:AD:75
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 5A51634ADDDF490845958E918F47525F3A50B969
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203432303933.roa
Signing time: Wed 04 Jan 2023 10:43:25 +0000
ROA not before: Wed 04 Jan 2023 10:38:25 +0000
ROA not after: Wed 03 Jan 2024 10:43:25 +0000
asID: 42093
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:51:63:4a:dd:df:49:08:45:95:8e:91:8f:47:52:5f:3a:50:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:25 2023 GMT
Not After : Jan 3 10:43:25 2024 GMT
Subject: CN=A13ECB3565D187E23E8C5D9FA72364E5B779AD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:68:f3:09:f6:8e:f2:5c:54:f8:d4:26:81:
4f:49:53:9e:67:6d:bc:e8:fa:50:d9:40:27:0d:ad:
4a:49:46:9c:d2:c9:5a:00:ee:91:23:e2:db:24:2c:
87:46:99:27:3c:6c:b7:f4:10:e5:49:2e:d8:71:1a:
b6:30:c6:62:ec:d0:72:76:ff:d6:21:3d:0a:58:2c:
1d:f4:6f:42:17:a1:67:e1:ac:3b:60:cf:72:43:c7:
79:88:9b:d1:58:79:5b:51:d0:9e:31:44:e5:30:8d:
1f:0d:53:48:3a:34:7d:15:3b:45:61:ad:d5:9d:73:
51:75:9e:26:90:2a:1e:b1:77:2e:8d:0f:cd:33:62:
a0:52:ae:3f:e0:53:54:87:30:40:b6:1a:94:c8:6c:
6c:7d:ff:48:49:23:66:5a:9e:8a:8c:54:78:f5:7b:
bf:c5:e1:d6:9e:35:88:fc:8f:3b:52:13:72:d6:4c:
0b:be:2d:d1:db:46:41:b9:c7:63:8e:2a:29:6d:64:
74:fe:8c:a3:a1:be:61:17:a7:08:7f:5b:44:c7:43:
c7:b6:53:69:17:ea:b4:53:fd:f0:6d:8d:ff:c4:43:
85:28:8d:1b:7b:f4:30:8d:76:01:6b:31:d0:e2:dc:
71:46:30:6c:a4:f3:a1:18:a9:0c:85:e7:95:e2:a8:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:CB:35:65:D1:87:E2:3E:8C:5D:9F:A7:23:64:E5:B7:79:AD:75
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e203432303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cd:d9:4f:88:90:b6:ee:04:ff:f7:30:48:8c:17:8f:d6:2e:
a7:f2:3f:24:8a:00:96:dc:a5:aa:1f:66:65:79:6e:dd:2b:72:
5b:e8:b1:e6:e8:0d:ed:47:3a:e3:41:0e:ec:31:7a:ca:03:bf:
e4:c7:8a:10:ea:fd:83:47:24:88:84:df:3f:61:93:ed:12:27:
b3:91:f5:f0:fd:00:82:a0:3e:11:49:c6:4d:72:b2:11:6e:b6:
a8:80:5c:e1:94:99:94:6e:fa:be:0e:e2:18:0d:18:72:0e:34:
33:6d:0e:30:9f:5c:ec:0d:2d:12:1c:2a:2e:4a:0c:61:ab:1c:
6b:d4:0c:d7:97:c0:ae:fa:7a:00:b7:24:b7:e2:a7:bb:46:ad:
ab:6c:10:45:13:8f:6d:9b:3f:7c:6d:88:93:51:f8:0b:38:30:
f5:46:fd:5d:78:8d:85:15:4b:96:25:c7:4a:ce:7c:73:94:fe:
a6:22:92:77:03:32:13:86:09:0a:f1:14:b9:54:d8:ef:09:0a:
55:7e:9b:9d:02:2e:0d:c7:67:36:a4:3a:6a:f7:ef:31:5a:77:
6c:0d:dc:71:b3:f3:f5:f4:46:92:c0:42:c1:c6:7d:c7:bd:a3:
fa:71:e5:2a:b0:bb:ae:ad:38:5a:67:f7:55:36:fd:a9:78:bb:
70:ce:54:fe
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 24 13:16:10 2023 by rpki-client on console-ams.rpki-client.org