Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa
File: 34352e36352e3131382e302f32342d3234203d3e20313937363434.roa (raw, json)
Hash identifier: uaQySoDNpditmVOIo5kwCr6ZSi7sBH52B6Y5Gzq0lBY=
Subject key identifier: 51:F0:7B:3F:BA:44:0F:4C:D7:3C:65:9B:7B:90:AD:0C:5A:F9:19:59
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 7427244CA800E1B4BFD40DC8289A1E43D59069FC
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa
Signing time: Wed 02 Aug 2023 12:39:31 +0000
ROA not before: Wed 02 Aug 2023 12:34:31 +0000
ROA not after: Wed 31 Jul 2024 12:39:31 +0000
asID: 197644
IP address blocks: 45.65.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:27:24:4c:a8:00:e1:b4:bf:d4:0d:c8:28:9a:1e:43:d5:90:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 2 12:34:31 2023 GMT
Not After : Jul 31 12:39:31 2024 GMT
Subject: CN=51F07B3FBA440F4CD73C659B7B90AD0C5AF91959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:01:7c:0b:e2:4c:db:d8:a6:0a:1b:b6:5b:
8c:67:c7:36:03:1d:af:c3:65:80:4d:de:5d:23:64:
c5:f4:e3:65:26:fa:26:86:e5:2f:ed:67:60:36:48:
6b:9f:b4:d5:e1:73:41:fe:d6:49:aa:52:02:1a:0e:
d8:fa:fa:23:ca:fa:c0:dd:80:12:dc:79:98:d3:ce:
3c:ab:4e:b7:78:fc:0b:bc:7c:0c:8e:9f:08:5f:ad:
47:06:9a:da:76:eb:06:00:a7:e5:c4:72:ff:d0:2f:
05:df:81:25:70:c2:a0:20:66:f8:55:9c:b4:af:c9:
83:b2:12:a8:ae:52:38:8c:39:0e:4c:ea:74:41:c3:
aa:eb:40:f9:64:54:03:c9:4e:9b:a1:6f:c1:96:7b:
4a:e7:ac:f5:3d:27:3f:76:ce:cf:6c:be:6f:a7:b4:
72:bd:75:3c:a2:ac:73:38:b2:27:ed:14:c7:75:7b:
3f:b1:81:8e:c7:f3:5b:45:56:1a:01:55:00:8f:9c:
96:10:a2:ad:dc:18:69:01:fd:3a:20:c2:b4:92:3a:
97:64:55:fa:ce:5c:8e:d1:37:e8:73:f1:55:94:07:
80:46:58:a3:90:71:0b:99:50:5f:f7:45:aa:65:96:
28:19:74:4c:a2:70:36:4a:a3:1d:32:49:93:48:90:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:7B:3F:BA:44:0F:4C:D7:3C:65:9B:7B:90:AD:0C:5A:F9:19:59
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20313937363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.118.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5d:24:33:7f:0e:83:ac:0a:49:a1:e0:74:5c:5e:60:0a:67:
8c:01:07:5b:40:64:48:4a:91:84:66:48:98:91:16:93:11:e7:
d6:36:ba:c9:1a:73:6f:8b:d6:be:7c:d0:e0:17:ec:23:22:eb:
c3:72:ec:dd:f9:27:66:d4:86:d7:49:45:e8:16:be:96:ff:60:
4e:56:b1:68:88:63:85:20:57:ee:7c:87:1e:55:31:90:9d:db:
5b:9b:d0:99:c1:08:05:af:cc:b5:4a:2b:cd:08:19:3e:6b:27:
6e:45:38:97:76:63:7d:4c:09:8d:09:dd:94:5d:0b:d6:83:e2:
d7:a5:33:cd:ed:85:9b:85:e1:2b:3a:e8:e9:54:f5:bc:f8:45:
c8:1f:8f:c0:b9:e5:50:a9:59:79:36:19:e5:fa:5c:50:d9:4a:
30:c9:27:bb:fd:3e:f4:51:d5:94:68:29:7f:67:cf:f4:e4:8b:
c8:45:3a:34:83:c6:e6:dd:0a:61:53:14:fc:c5:c3:ee:f9:56:
f6:23:bb:2a:38:88:c1:b9:39:79:db:2a:e2:e9:43:3b:39:7d:
e5:29:0c:9f:20:6e:dc:b3:3b:94:62:8e:e6:cb:cd:a8:c4:9a:
b9:41:3e:e8:19:2b:1f:50:74:99:ba:b7:dc:f5:f8:20:66:16:
88:07:d0:ed
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdCckTKgA4bS/1A3IKJoeQ9WQafwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA4MDIxMjM0MzFaFw0yNDA3MzExMjM5MzFaMDMxMTAvBgNV
BAMTKDUxRjA3QjNGQkE0NDBGNENENzNDNjU5QjdCOTBBRDBDNUFGOTE5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48QF8C+JM29imChu2W4xnxzYD
Ha/DZYBN3l0jZMX042Um+iaG5S/tZ2A2SGuftNXhc0H+1kmqUgIaDtj6+iPK+sDd
gBLceZjTzjyrTrd4/Au8fAyOnwhfrUcGmtp26wYAp+XEcv/QLwXfgSVwwqAgZvhV
nLSvyYOyEqiuUjiMOQ5M6nRBw6rrQPlkVAPJTpuhb8GWe0rnrPU9Jz92zs9svm+n
tHK9dTyirHM4siftFMd1ez+xgY7H81tFVhoBVQCPnJYQoq3cGGkB/TogwrSSOpdk
VfrOXI7RN+hz8VWUB4BGWKOQcQuZUF/3RaplligZdEyicDZKox0ySZNIkD/JAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUfB7P7pED0zXPGWbe5CtDFr5GVkwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzYzNTJlMzEzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzYzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LUF2MA0GCSqGSIb3DQEBCwUAA4IBAQABXSQzfw6DrApJoeB0XF5gCmeMAQdbQGRI
SpGEZkiYkRaTEefWNrrJGnNvi9a+fNDgF+wjIuvDcuzd+Sdm1IbXSUXoFr6W/2BO
VrFoiGOFIFfufIceVTGQndtbm9CZwQgFr8y1SivNCBk+ayduRTiXdmN9TAmNCd2U
XQvWg+LXpTPN7YWbheErOujpVPW8+EXIH4/AueVQqVl5Nhnl+lxQ2UowySe7/T70
UdWUaCl/Z8/05IvIRTo0g8bm3QphUxT8xcPu+Vb2I7sqOIjBuTl52yri6UM7OX3l
KQyfIG7cszuUYo7my82oxJq5QT7oGSsfUHSZurfc9fggZhaIB9Dt
-----END CERTIFICATE-----
Generated at Fri Aug 4 16:01:59 2023 by rpki-client on console-fra.rpki-client.org