Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203336313133.roa
File: 34352e36352e3131392e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier: g3Q4mnGpFRXF4A/AOQYwj0W08lyjLEjxB8roS86isYg=
Subject key identifier: D9:05:1A:6A:89:CA:6C:14:41:E1:66:A7:96:5F:21:B8:4F:94:37:26
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 266446DF89528425FBA1E730AEE341A15D49491F
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203336313133.roa
Signing time: Thu 31 Aug 2023 15:30:19 +0000
ROA not before: Thu 31 Aug 2023 15:25:19 +0000
ROA not after: Thu 29 Aug 2024 15:30:19 +0000
asID: 36113
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:64:46:df:89:52:84:25:fb:a1:e7:30:ae:e3:41:a1:5d:49:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 31 15:25:19 2023 GMT
Not After : Aug 29 15:30:19 2024 GMT
Subject: CN=D9051A6A89CA6C1441E166A7965F21B84F943726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:30:3a:4c:7f:93:00:73:d6:94:c1:2e:17:
ec:22:e9:77:ae:5d:d0:09:ce:be:0e:7d:fb:6c:51:
55:5d:1d:33:23:0d:02:c1:7e:71:19:4b:da:44:87:
ff:42:ee:86:ed:f4:bc:9e:3b:e2:3a:92:0a:4f:5a:
b6:55:87:86:c5:1a:ae:fa:ae:4b:01:e7:60:99:7b:
f8:2a:1f:31:d3:57:f4:93:e7:be:63:2d:fd:cb:8b:
0f:43:27:c9:c9:2b:77:ad:2e:a5:55:6e:c7:b4:b5:
f6:a7:db:71:ac:9d:07:39:2f:e2:fc:5a:73:f0:72:
f5:df:34:0e:98:1f:ec:21:c5:94:dc:24:23:1c:e2:
f3:55:ee:e4:66:d3:eb:50:f5:41:56:55:d6:c3:5a:
29:60:f4:c6:3e:ec:f1:bd:ca:ea:27:61:a0:31:55:
08:59:f6:e5:2f:25:f9:e6:f5:de:61:1e:0e:f8:e0:
c9:2c:2f:7d:ee:23:c5:c3:aa:b0:c5:d7:fa:11:cc:
36:fb:79:d0:4a:76:23:f1:0d:ac:a2:3b:00:12:7b:
7b:24:f9:a4:da:d2:93:8e:ac:0d:c5:e4:fc:cb:0d:
80:d2:82:c3:6c:d4:44:44:63:b9:29:cd:3d:0e:77:
87:c7:77:6e:40:17:6e:5f:53:42:ff:b6:70:e1:12:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:1A:6A:89:CA:6C:14:41:E1:66:A7:96:5F:21:B8:4F:94:37:26
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203336313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ac:bb:ba:06:d7:f6:65:95:32:99:21:a0:70:47:4c:71:b4:
7a:0f:1d:b7:3a:16:da:29:bf:3b:e1:66:2d:30:f5:14:05:88:
87:5e:40:72:77:21:44:78:6f:1f:8e:84:0e:51:d0:1a:60:72:
55:44:7e:3f:94:b3:35:79:02:40:01:b1:22:36:20:18:15:44:
7c:e7:7c:42:59:56:17:ee:40:5c:92:99:ef:ca:97:1f:d6:3a:
91:16:f6:71:02:c5:b8:ad:61:98:d5:6d:ff:5c:9b:5d:5c:ba:
85:16:f4:40:87:0f:10:4b:a6:64:51:22:29:e4:d1:19:4f:79:
2a:9f:d2:e9:74:79:33:f6:d1:ff:7e:54:bf:b1:29:b8:28:25:
42:cb:10:e6:04:91:23:4d:27:87:56:e6:1a:2d:70:36:d5:1a:
a3:2b:01:08:59:06:b7:6f:c0:9c:5b:c5:f7:c4:5b:9c:38:03:
55:d0:8a:3d:c1:b4:a2:1c:d0:24:0c:d5:e3:01:ac:75:0d:27:
a3:49:eb:ee:6c:47:6f:05:01:8e:cb:19:73:26:93:df:ff:0d:
25:23:f4:65:8f:80:40:7d:ed:95:68:20:d1:c2:26:45:5d:47:
4e:fa:a7:60:da:ba:d5:f2:b7:2a:09:36:bb:41:cc:1b:04:1f:
fd:d2:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 30 00:53:12 2023 by rpki-client on console-fra.rpki-client.org