Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131372e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wsQ/hyBVPNq1wdUHiP9HA4h8KKxS7aO8LI4towfuBZA=
Subject key identifier: 11:B2:2A:4C:23:98:2A:40:CE:30:39:E1:30:3A:75:CA:3B:45:2D:5B
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 3169B846FD8F5DCAF3DE4E65006662D327402561
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131372e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Jul 2023 00:00:09 +0000
ROA not before: Tue 25 Jul 2023 23:55:09 +0000
ROA not after: Wed 24 Jul 2024 00:00:09 +0000
asID: 834
IP address blocks: 45.65.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:69:b8:46:fd:8f:5d:ca:f3:de:4e:65:00:66:62:d3:27:40:25:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jul 25 23:55:09 2023 GMT
Not After : Jul 24 00:00:09 2024 GMT
Subject: CN=11B22A4C23982A40CE3039E1303A75CA3B452D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:7d:2f:30:9f:e2:b1:12:c7:a0:19:31:57:
f0:5b:df:c0:ae:74:6f:25:41:99:1c:f4:e2:1d:e8:
9e:09:e6:c4:ea:f8:bd:8d:a4:83:a4:8c:39:70:5b:
92:4a:cf:fb:66:70:c5:17:94:e2:8a:35:c2:83:cc:
56:1d:f7:01:69:99:38:70:93:61:2c:3c:3e:0b:39:
db:8e:63:79:eb:c9:3a:4c:e5:dc:a9:f4:e0:d1:fa:
4a:44:f5:aa:4d:b4:10:d3:04:a8:68:20:83:39:47:
4a:c0:8a:4c:90:61:a1:87:25:34:8c:8a:ca:dd:cf:
b1:d2:7f:a5:fb:36:81:1a:77:ff:12:fb:c7:92:a3:
27:4b:f5:b4:ff:ff:5d:78:d8:db:0e:83:24:e3:00:
f9:97:be:a8:60:a4:81:6a:58:6e:86:00:eb:b5:05:
79:d1:3f:d7:49:8a:67:cd:5b:cb:a1:1a:c3:ab:39:
4e:d3:cf:0c:66:f2:d8:d8:3e:69:80:a0:8b:3b:54:
47:9d:a5:4b:cb:43:92:fc:68:c3:b9:d1:4a:aa:27:
a9:ff:21:e7:6b:82:ee:fd:52:d3:82:a3:10:6d:6b:
7b:d4:48:e9:46:37:a1:4f:83:fa:de:62:c8:71:2c:
66:b7:e3:17:a0:e9:f5:c8:c3:74:14:30:57:33:be:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:2A:4C:23:98:2A:40:CE:30:39:E1:30:3A:75:CA:3B:45:2D:5B
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.117.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d9:e9:07:f4:44:cc:07:93:c3:2d:28:e6:f9:15:4c:ff:0d:
95:c9:1f:41:6e:74:60:ff:99:93:66:42:01:c6:a2:4f:97:fb:
da:7c:c1:26:3d:94:2e:70:8f:48:3a:91:86:56:ab:df:55:0b:
20:31:6b:9a:20:96:8f:f3:3f:1d:d4:fd:0e:1e:5b:3d:08:34:
39:77:63:65:5e:04:79:3e:ae:2f:dd:59:39:07:64:c5:42:cb:
a5:b2:cd:f9:88:b9:c3:03:fa:df:6a:ea:8c:24:f9:a0:78:9e:
ca:cb:59:c1:f5:94:e4:23:1e:9c:1a:76:d0:e8:32:f8:61:f9:
f7:f6:b2:08:a1:31:84:b6:db:30:a0:43:e4:76:ed:d1:57:0d:
4a:d8:9d:38:30:bf:38:e8:2c:f7:53:d9:32:46:ed:7b:ef:ba:
ea:12:06:45:f7:09:d0:10:88:ab:6d:68:45:ab:74:2d:58:cd:
59:34:1b:ca:3f:b4:5e:c4:82:17:75:36:e6:28:b8:f0:cc:7f:
f3:81:84:bf:7a:4e:8e:fb:91:ab:ff:0d:4d:b1:f6:64:ec:a7:
4d:e3:8e:c3:bf:34:6b:bb:65:dc:c7:83:9e:bc:8d:b9:d2:b3:
71:12:84:6c:1c:38:b9:41:56:24:81:81:13:da:8c:04:75:fb:
02:38:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 17:18:05 2023 by rpki-client on console-ams.rpki-client.org