Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e203537303433.roa
File: 34352e36352e3131362e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: GyE92kJYZ5/pd0cQ+m28WGcSNUnwGbKXRLtdNKeJNzI=
Subject key identifier: 76:88:19:04:5F:A5:E1:57:C9:14:8B:BD:95:CA:99:D7:A5:9D:EB:9B
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 5A572F015CDD528D01891249AD8F681C8F5F1113
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e203537303433.roa
Signing time: Mon 26 Jun 2023 07:16:31 +0000
ROA not before: Mon 26 Jun 2023 07:11:31 +0000
ROA not after: Mon 24 Jun 2024 07:16:31 +0000
asID: 57043
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:57:2f:01:5c:dd:52:8d:01:89:12:49:ad:8f:68:1c:8f:5f:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jun 26 07:11:31 2023 GMT
Not After : Jun 24 07:16:31 2024 GMT
Subject: CN=768819045FA5E157C9148BBD95CA99D7A59DEB9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:f2:04:75:fb:9d:ca:78:6a:7d:ab:0d:66:
32:b9:34:0a:f5:64:a2:93:3d:f4:2f:43:e5:8b:f8:
67:d8:d5:ae:be:6e:0e:01:b3:3b:be:e1:ed:8f:ca:
bf:2f:d8:f3:e2:94:f7:a1:f9:d4:da:8c:81:40:2b:
a6:c9:4d:ba:9e:12:b0:0c:63:6c:53:61:12:fd:dd:
b4:91:56:fd:e2:a4:63:5c:96:d8:d1:52:34:49:0d:
13:5f:7e:c5:d9:c2:05:13:a8:aa:6e:55:06:e1:0b:
63:f1:ef:b3:4b:c8:a4:a3:4b:11:62:a1:db:f5:50:
22:dc:b0:ca:4b:cb:62:be:6b:b9:fb:9d:10:dd:d7:
e5:0d:e4:3e:f9:12:91:f6:ea:65:6e:11:0d:15:17:
15:db:1f:8c:69:d4:ec:05:6b:95:7d:16:5f:b2:3f:
87:cf:2a:5a:15:d4:21:73:04:65:ac:bb:7d:54:c6:
74:10:7d:d7:ce:fd:3e:59:c1:79:46:a2:eb:bd:2b:
a0:3c:de:b4:89:5e:26:f6:49:14:c3:be:ec:0b:42:
41:31:27:ce:96:a1:47:eb:da:05:08:e3:64:0f:e9:
74:1d:b9:9e:8c:6c:bf:17:9f:77:61:ae:38:c3:fa:
a6:6b:92:cd:12:3b:a1:2f:03:ef:a0:85:14:e4:4f:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:19:04:5F:A5:E1:57:C9:14:8B:BD:95:CA:99:D7:A5:9D:EB:9B
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:39:fc:b7:b1:e6:27:c3:78:9f:ed:13:53:23:85:7b:67:5a:
4b:8c:e3:50:da:0a:00:d4:ee:69:40:29:5f:c9:8e:eb:e0:ca:
86:97:a4:7e:0b:ad:93:62:48:c9:ad:d9:33:fc:f7:43:33:f8:
e9:6d:3d:45:a9:3b:82:e2:89:fa:a0:b3:fc:bd:30:14:c7:85:
64:14:19:05:e1:07:8c:01:6b:93:33:20:b5:f8:08:4a:67:86:
5d:de:5f:4f:f6:c7:e3:eb:c9:b4:d2:f5:9b:6b:ee:9f:b9:ed:
d9:76:ce:09:77:9b:d4:33:12:31:c3:ac:c1:34:62:77:f9:a4:
1d:ec:09:bb:0e:4f:26:af:dd:ec:0c:bf:ee:80:a3:31:89:1a:
d2:48:70:be:a4:a5:09:66:ce:71:bf:b0:bd:e6:64:9a:3d:f7:
72:d2:45:3a:c1:dc:5d:04:f8:60:ea:91:a9:05:10:c1:a3:b0:
0c:3f:1d:86:04:8f:dd:c3:85:6e:a9:43:12:83:03:30:56:5c:
ac:0d:e0:30:87:0f:73:27:b9:ef:07:6d:24:f4:2e:55:21:3a:
13:a8:f8:48:8d:ed:8e:c6:0f:31:12:41:5b:47:d3:ce:cc:7a:
5b:3a:d1:86:82:00:61:c2:bb:ac:3f:40:cd:54:21:6f:1b:cf:
14:84:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 00:42:20 2023 by rpki-client on console-ams.rpki-client.org