Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3232203d3e2035303839.roa
File: 34352e36352e3131362e302f32322d3232203d3e2035303839.roa (raw, json)
Hash identifier: iGUpqIPSAGEUPpFG4nf38SFNLdwx6fCadtY8iu7Ihd4=
Subject key identifier: 38:1B:96:69:0D:B6:8F:2E:B1:D7:21:CA:EC:A0:8E:CB:65:67:43:90
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 30705831A3C85AD866B3D121ECE3FAF8C63D3048
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3232203d3e2035303839.roa
Signing time: Wed 04 Jan 2023 10:43:18 +0000
ROA not before: Wed 04 Jan 2023 10:38:18 +0000
ROA not after: Wed 03 Jan 2024 10:43:18 +0000
asID: 5089
IP address blocks: 45.65.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:70:58:31:a3:c8:5a:d8:66:b3:d1:21:ec:e3:fa:f8:c6:3d:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:18 2023 GMT
Not After : Jan 3 10:43:18 2024 GMT
Subject: CN=381B96690DB68F2EB1D721CAECA08ECB65674390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:5d:b2:14:4d:36:d7:34:40:7d:a7:6b:99:
7b:ef:1d:27:d8:53:e8:60:ac:a8:60:43:4c:24:4b:
4f:e7:c9:10:29:d0:cf:0d:28:72:24:96:66:8e:0c:
45:de:b8:26:de:0e:a2:e5:56:ed:b3:d0:1c:93:5b:
bc:93:3e:2c:70:03:95:8c:16:28:54:5b:e1:c0:98:
e6:17:65:19:9d:aa:3c:69:ac:50:ab:0c:7f:ef:9c:
68:85:12:79:32:fe:c0:91:70:e4:e2:49:f4:b2:a2:
4a:28:5f:3e:73:1f:1e:d3:62:79:9e:cc:2a:02:12:
7e:3f:88:19:72:8a:6f:46:9a:8d:c8:b9:ed:6b:07:
82:f4:c5:0e:1e:f5:46:44:cc:74:9c:ee:5b:1d:fc:
a6:ce:ba:7a:ec:04:36:9f:b3:49:ec:7f:74:a7:6c:
6c:c5:ac:5d:4c:f6:5f:80:70:37:0e:17:7a:0d:9a:
5f:f0:24:b0:69:bc:0a:95:b6:cd:8f:3e:dc:80:af:
4f:84:f2:9f:e9:40:20:50:cb:30:6f:a2:5e:76:10:
bb:70:0a:6d:06:60:91:17:02:16:42:55:f0:3b:66:
00:43:f3:ef:8f:bf:a7:62:e6:b4:dc:e9:48:f4:1a:
83:84:2d:b8:89:56:a3:87:59:e5:ed:07:e3:a3:93:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:96:69:0D:B6:8F:2E:B1:D7:21:CA:EC:A0:8E:CB:65:67:43:90
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3232203d3e2035303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:de:93:f0:42:ea:7d:58:bc:a5:da:e7:d7:1a:3a:aa:d6:46:
01:d9:bc:a4:27:f9:a5:0f:0d:57:0d:ef:0a:33:1a:71:a4:0c:
59:9f:dd:77:6a:b2:a3:2b:f1:f6:e4:3a:b8:12:c3:11:db:2f:
cc:5d:87:37:01:78:3f:a6:e1:65:6c:df:56:c2:45:a7:6f:90:
71:8d:88:83:88:9c:a2:88:a4:bf:10:8a:29:2e:9c:ad:b7:e3:
fa:ed:32:c5:b9:30:e9:8c:68:72:4c:ec:5d:3d:44:60:96:bf:
dd:2b:53:c8:f9:34:e2:3e:60:7e:d6:ad:50:3b:d9:b1:92:f8:
ac:c4:50:ae:f4:56:1a:96:a0:1e:e7:5e:4d:52:94:59:b1:f4:
1d:d1:75:e1:e8:ec:76:cd:c8:bf:e3:c5:53:71:70:13:89:cd:
dd:02:bc:09:7c:28:3c:ec:b8:03:f4:2a:7f:18:c4:dc:00:fd:
92:df:ed:b1:12:9c:7d:89:18:4c:54:69:9f:78:3b:ff:fc:52:
d6:04:b2:52:fa:e6:3f:e9:11:5f:07:b6:2b:30:13:86:46:1d:
78:ae:f0:bb:b3:f5:25:be:a3:40:c1:e9:4d:78:4e:cc:9f:b4:
ea:6a:28:ac:90:ae:b9:81:45:1f:52:35:d9:f3:63:7c:0e:38:
ea:30:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org