Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: LPO4uFo8fF96i5DelAN0qg5gROHp+hJQjHX5fMpS74A=
Subject key identifier: 32:81:40:57:1F:C7:2E:00:6B:90:52:0E:8A:2D:A4:30:5B:62:27:36
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 1D029402A621455750771AFE0444CC648D3B48BA
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3234203d3e20383334.roa
Signing time: Mon 15 May 2023 15:00:03 +0000
ROA not before: Mon 15 May 2023 14:55:03 +0000
ROA not after: Mon 13 May 2024 15:00:03 +0000
asID: 834
IP address blocks: 45.65.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:02:94:02:a6:21:45:57:50:77:1a:fe:04:44:cc:64:8d:3b:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: May 15 14:55:03 2023 GMT
Not After : May 13 15:00:03 2024 GMT
Subject: CN=328140571FC72E006B90520E8A2DA4305B622736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:40:b0:22:41:4d:09:ee:99:e5:18:fd:07:
39:b4:1e:48:be:5d:ef:4d:e4:4a:f3:a5:47:6e:ea:
65:04:4b:e9:aa:9d:22:a4:3c:7c:87:67:62:34:95:
71:9d:e6:a3:c7:6e:8d:7e:d7:46:95:77:fc:df:ca:
76:8d:2f:58:2d:f0:04:d7:f6:8b:05:e5:14:5b:fb:
95:19:f8:85:2c:c2:e9:cd:b4:43:68:e1:c9:b3:56:
56:8f:32:3e:ee:13:ee:06:87:6d:83:06:64:d6:51:
d7:a4:ae:92:b7:6e:9a:d7:74:54:65:a5:ea:f9:2b:
87:17:16:67:3f:72:a9:84:0f:60:47:87:18:5c:4e:
0c:6b:f3:69:21:2d:52:b6:40:61:e5:3f:be:f9:25:
55:d4:e3:78:0c:3c:05:b4:7d:2c:93:0a:35:7a:71:
95:c9:c3:bf:b1:7d:37:b0:fc:8e:02:61:4c:56:7b:
6b:b1:11:6f:7c:d8:83:9a:e2:03:a4:2f:d7:d6:8b:
da:c7:2d:62:7c:5e:74:a5:2c:75:98:a2:19:9e:8f:
dd:64:ee:60:b1:6b:b0:8d:c8:c7:7e:d5:7e:45:d7:
66:4e:86:0a:f2:2d:a6:71:9a:b5:19:52:14:40:e7:
75:f0:3e:63:d0:d3:9a:0d:18:77:af:75:24:72:92:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:40:57:1F:C7:2E:00:6B:90:52:0E:8A:2D:A4:30:5B:62:27:36
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
46:57:ac:93:86:98:c5:cf:ba:ba:3b:00:84:75:a3:5f:b8:bc:
b4:74:f8:ba:6d:3e:ad:d7:0d:d0:74:e8:0b:31:66:a3:88:bb:
4a:48:76:60:ec:8d:09:31:a0:bf:6f:a3:cc:36:6e:d5:ea:1b:
e9:7d:5e:47:a3:8f:4f:8b:8a:96:c0:c6:ab:11:6e:74:aa:2b:
11:3b:c6:b1:2a:2c:f1:32:f2:34:ae:f1:29:74:8a:83:d5:04:
f2:7c:1a:f3:b5:a0:53:07:bc:70:83:00:35:21:03:c4:17:3e:
22:d3:e5:98:9d:9b:38:b2:d5:36:bd:d4:68:bf:02:bd:41:86:
db:ff:46:c7:3c:72:7a:46:d0:78:1f:f1:ad:04:dc:67:23:d3:
df:a1:0d:52:49:fc:55:49:b5:30:b4:1b:24:de:e4:95:34:3c:
66:b8:68:da:2f:54:44:0c:c9:96:02:29:51:29:29:84:4d:f9:
39:2e:7f:a9:c9:e2:3e:51:d8:23:c2:52:e9:f6:a6:ea:ac:9d:
6e:8a:97:04:67:07:c5:30:3e:3c:08:f6:69:36:40:a7:39:7a:
30:93:d1:9a:4e:6f:d3:1a:e0:2f:a1:85:22:96:80:4b:f5:8a:
8c:99:9f:06:fa:5a:14:ad:25:7d:a7:37:db:cd:ac:4f:b3:4c:
74:78:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org