Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203535313534.roa
File: 34352e36352e3131392e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier: c1mQyTF6ALkJ+bb1b1o6j1hwpJ6wZWTJwM0WErd3TuU=
Subject key identifier: 96:C7:E8:8B:E9:95:D0:4F:BF:1B:3D:C1:5F:88:F7:4D:B6:82:78:B5
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 1945FE7297E0FE6E36752B08DE14FF7C2D1C3CB9
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203535313534.roa
Signing time: Tue 08 Aug 2023 11:31:12 +0000
ROA not before: Tue 08 Aug 2023 11:26:12 +0000
ROA not after: Tue 06 Aug 2024 11:31:12 +0000
asID: 55154
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:45:fe:72:97:e0:fe:6e:36:75:2b:08:de:14:ff:7c:2d:1c:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 8 11:26:12 2023 GMT
Not After : Aug 6 11:31:12 2024 GMT
Subject: CN=96C7E88BE995D04FBF1B3DC15F88F74DB68278B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:36:a0:c2:90:92:84:15:c8:96:83:4d:d7:
9e:e4:9b:96:5b:a8:e2:2a:2c:92:11:45:f6:59:de:
24:7d:a1:e9:a0:3c:6c:3f:80:e3:93:3e:61:60:ee:
00:3c:be:7b:4c:b4:bf:bf:c5:70:5f:ef:e4:73:9b:
ff:a5:a4:8b:16:35:2b:00:0e:c5:6c:89:f8:05:24:
1e:c8:2c:8b:fa:1e:c9:96:d1:59:37:b8:b0:7f:6c:
61:82:98:e7:ec:b1:4c:dc:3c:63:2a:04:a7:49:14:
94:e9:cb:d2:fc:3f:41:c5:e7:80:73:a7:39:d1:4a:
47:93:8a:e2:fd:4f:bd:b0:af:e1:cc:d3:da:ee:53:
b6:4c:61:30:0f:4e:1b:17:a7:94:0c:0e:2a:be:64:
95:91:52:05:70:eb:51:28:e2:5e:6b:0f:fb:8a:1f:
7c:fb:bf:33:8a:af:6e:46:0b:5b:1e:03:b4:8a:03:
8e:f7:87:d6:d6:3a:42:b1:d2:97:48:e8:a7:b5:10:
6e:3c:e9:1e:1c:89:b0:4b:c5:d0:7d:43:40:aa:ad:
18:51:42:5f:36:36:68:78:dd:9b:97:87:f8:e5:d9:
b0:42:bb:40:7d:7b:0e:ff:50:7c:2e:83:93:3e:69:
30:c9:59:ea:ed:e4:fc:f9:bb:51:d0:bc:e0:c8:b1:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:E8:8B:E9:95:D0:4F:BF:1B:3D:C1:5F:88:F7:4D:B6:82:78:B5
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e203535313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8e:7d:ac:e8:59:b9:93:23:e6:cd:e5:7f:a6:f6:65:b1:5e:
d8:bc:57:6a:05:d3:da:cb:df:7a:94:db:77:d8:01:2b:84:9c:
8d:6e:7d:fa:34:f0:cf:d0:56:88:e6:ba:d7:b4:63:c7:29:d6:
d0:81:0b:6b:98:21:3e:2e:b0:32:c2:dc:1a:b4:63:46:38:aa:
06:f4:b7:3b:ee:6e:f2:8e:6c:5e:6b:72:6b:2c:a7:5a:be:c3:
29:39:de:d6:f2:a8:c2:f3:bc:a9:35:cf:02:55:cf:a8:82:3d:
05:7e:4e:a1:c0:d6:03:34:2d:50:da:cb:2e:ad:69:8b:34:ea:
86:11:8e:26:f1:1e:ff:ab:a8:9c:09:b6:ac:89:0f:3c:a8:a8:
58:1a:4c:a1:5d:5c:a3:2f:a2:9c:6c:17:11:5d:0a:8b:2d:ff:
5b:eb:40:62:bc:ed:3c:59:14:6f:a7:08:ad:1a:e5:e9:77:ec:
d3:ec:86:d6:1c:01:8d:b8:31:92:e9:9e:9c:7b:ca:8a:b9:2a:
c6:71:0a:05:f5:5b:0b:ab:f4:d0:1d:39:e1:4e:fa:74:c0:61:
cb:0c:41:66:5e:b2:f0:32:4d:56:e4:9e:f9:cf:8b:8a:28:c7:
7b:d6:f1:c9:e1:05:b5:27:4c:a4:84:8f:25:43:41:82:84:09:
7b:53:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 13:09:59 2023 by rpki-client on console-ams.rpki-client.org