Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20333939303733.roa
File: 34352e36352e3131362e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: vLd1xqIvElBP8iewMHHSIU1aB7VH2fi8UxAkPFR5e4w=
Subject key identifier: 6C:86:E1:B8:7D:73:FC:A8:5D:C5:1C:11:31:EA:99:50:19:A0:33:DA
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 28A22C88A574F0EB76688C24289AA1B84D0C3A07
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20333939303733.roa
Signing time: Tue 12 Sep 2023 16:33:44 +0000
ROA not before: Tue 12 Sep 2023 16:28:44 +0000
ROA not after: Tue 10 Sep 2024 16:33:44 +0000
asID: 399073
IP address blocks: 45.65.116.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a2:2c:88:a5:74:f0:eb:76:68:8c:24:28:9a:a1:b8:4d:0c:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 12 16:28:44 2023 GMT
Not After : Sep 10 16:33:44 2024 GMT
Subject: CN=6C86E1B87D73FCA85DC51C1131EA995019A033DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:2c:40:aa:66:81:1e:db:7b:d0:fd:1e:ba:
48:c5:15:7a:f9:b2:b5:f9:10:8f:f9:03:52:e9:85:
7e:27:2e:2e:73:14:a3:bf:98:8c:9f:ee:54:be:ee:
de:ca:86:25:73:23:6c:28:f5:16:78:a1:c8:54:1f:
08:c3:c9:8d:c1:11:00:92:c2:76:a0:3c:3f:2f:8c:
98:3a:7d:10:26:0f:33:9d:da:98:fe:7c:8a:c7:5c:
ee:12:7e:1e:45:20:b5:a7:14:93:36:12:5c:d1:a5:
38:a4:e1:a1:e9:62:f5:d0:3a:bb:29:b0:cd:76:76:
d5:24:8b:c6:26:3a:bd:d6:86:b8:58:ed:73:a5:1d:
ce:17:0e:58:cf:fb:51:a3:a1:e7:f4:f4:45:9a:e3:
5c:c7:9c:24:4c:d1:89:c5:fd:22:16:62:e6:26:0c:
60:6a:da:0e:48:81:99:70:6d:dc:12:de:4e:58:08:
85:c8:82:d8:b0:af:c4:18:18:6b:ae:27:63:c0:d8:
5a:57:31:82:54:8e:d7:32:70:95:65:90:77:ae:99:
b4:0d:2e:54:d7:7d:c8:44:36:93:ee:b1:2d:43:a8:
c6:cf:40:59:48:de:23:f5:88:dc:2c:86:a4:77:f4:
28:df:cc:25:fe:92:cf:62:de:4a:b1:d7:c5:34:f4:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:E1:B8:7D:73:FC:A8:5D:C5:1C:11:31:EA:99:50:19:A0:33:DA
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/23
Signature Algorithm: sha256WithRSAEncryption
47:1d:97:b9:b5:9c:aa:79:5b:df:e7:6c:02:b5:f8:95:87:67:
7c:b4:3d:82:70:e5:05:ff:c6:c1:4d:fe:40:f9:9f:c6:fd:ad:
48:05:28:98:7b:90:61:34:37:8e:04:c5:4c:e5:53:98:3e:01:
4a:4f:7a:78:83:b6:3e:a7:f1:46:28:81:60:01:53:13:ce:c0:
9e:df:74:f4:4a:d5:9d:50:7d:76:f1:39:a4:6a:a2:22:3a:4d:
22:fc:26:0b:e5:07:af:c4:96:ac:96:d7:af:07:6a:51:be:19:
96:df:4b:e9:e5:58:72:a4:ec:81:31:2d:9d:2d:3d:b1:7e:53:
7a:11:f2:8b:c1:85:c9:f0:ac:3a:f4:eb:88:76:e4:4c:33:b0:
20:4c:5a:23:f8:10:6e:d7:65:44:00:94:a8:f0:d6:40:52:5b:
a0:2d:91:7b:49:ef:21:5d:2e:b6:ff:b4:de:83:e1:ef:69:ce:
7e:c9:27:9d:8a:74:ed:e0:a4:10:8a:13:75:47:a8:00:c6:48:
c0:3c:f9:b4:3e:80:42:ca:cd:20:95:40:f3:d4:65:0d:71:16:
bc:c7:50:4a:d7:dc:78:81:ee:80:06:04:92:f9:0c:48:85:bc:
78:a8:43:28:d1:0d:94:04:a0:9c:bb:dd:3f:8a:34:c6:a2:72:
64:b1:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 00:47:52 2023 by rpki-client on console-fra.rpki-client.org