Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: V7rIteiDAvMfDTxo8lSQVE9BZnLD2tpxcR7DAQDJaGo=
Subject key identifier: 60:F5:62:29:06:DA:1E:7F:E1:99:B1:B0:46:39:72:9D:8A:5D:A6:BB
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 39A414EF481C4B2AD37DF8F665D6A75CC7EB75DE
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Jul 2023 00:00:07 +0000
ROA not before: Tue 25 Jul 2023 23:55:07 +0000
ROA not after: Wed 24 Jul 2024 00:00:07 +0000
asID: 834
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a4:14:ef:48:1c:4b:2a:d3:7d:f8:f6:65:d6:a7:5c:c7:eb:75:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jul 25 23:55:07 2023 GMT
Not After : Jul 24 00:00:07 2024 GMT
Subject: CN=60F5622906DA1E7FE199B1B04639729D8A5DA6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:76:67:07:bd:21:67:08:ca:ae:e2:01:6f:
ce:15:8f:3d:50:83:a0:83:8f:3d:7f:fc:2a:ad:2d:
b2:51:d7:02:b5:05:9e:9d:ae:c0:35:66:c0:0f:9f:
99:ea:a6:d8:c1:a3:9d:b8:34:0f:83:19:e2:e0:a4:
8b:b3:4f:cc:b6:0c:fd:40:da:09:26:9c:c4:24:4c:
17:f8:24:18:1a:0d:7f:2a:fc:cf:e5:b7:e2:07:da:
43:26:cb:67:ab:e6:ba:fc:6a:e0:39:1c:70:ec:1e:
e6:1a:8d:3b:00:5e:59:ae:c2:21:81:a8:8d:cf:86:
af:9a:97:31:95:c4:02:4b:bf:2e:6c:f2:17:82:45:
26:5e:19:b6:0a:4c:00:31:8e:5c:61:2b:a1:46:5f:
7e:37:38:f4:ed:51:a3:92:3e:88:5a:12:6e:da:20:
5c:4b:9b:81:8c:eb:8b:ee:44:46:ed:01:95:3e:a0:
63:6f:df:20:be:3a:c1:87:26:8a:d1:1c:1c:d4:21:
ca:02:9b:23:d0:20:2f:cc:2a:f1:e2:11:3f:cb:42:
cd:b2:62:a7:18:b8:db:0f:71:27:1c:bf:64:98:af:
ba:0b:3f:ca:aa:37:78:13:43:ee:c9:db:99:b2:e0:
d3:58:89:d3:69:49:da:92:79:ab:bd:33:4e:30:6b:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:62:29:06:DA:1E:7F:E1:99:B1:B0:46:39:72:9D:8A:5D:A6:BB
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6e:bf:c6:38:8e:19:73:25:d2:83:76:76:ce:55:a4:a7:bf:
91:70:fb:7d:f4:9b:f5:8a:d0:0e:f6:59:66:fe:3c:eb:56:65:
41:a6:20:45:2e:87:1d:58:d7:d5:fd:ae:8b:2d:94:ad:56:ec:
34:fe:0a:92:1e:52:0b:59:55:90:d6:1a:cb:60:02:f9:c8:58:
d1:c5:c0:63:6a:82:2b:22:a9:19:87:d2:15:1f:ab:e5:84:7e:
9a:9d:e6:f9:17:80:e5:71:75:17:de:c4:d4:b9:76:b8:4a:5c:
80:00:64:1f:26:4b:ab:92:94:d2:2c:56:0c:2d:75:b2:16:33:
17:e0:0f:e4:ef:0f:9d:af:4a:57:5d:4d:44:15:17:15:52:24:
09:c8:6d:d9:9e:a6:13:77:67:f0:26:40:dd:7a:36:12:5d:b4:
b8:d4:d2:6d:29:dc:5e:68:98:fb:fb:cd:ff:f0:0f:4e:2f:d6:
ee:91:13:65:81:39:8d:55:4d:98:ce:d1:de:b8:ad:d7:26:e5:
67:94:b7:fb:7e:7a:d7:7c:96:fa:e7:23:61:8c:4f:50:7a:63:
1e:14:d1:2d:50:c7:eb:40:8e:a0:40:5d:a2:3e:79:7b:31:2b:
ee:24:01:64:20:f0:c2:38:dd:b5:c5:2d:47:87:75:52:4e:4c:
48:c5:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 17:18:05 2023 by rpki-client on console-ams.rpki-client.org