Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20383334.roa
File: 34352e38382e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cQ7aNdTs1X+2nuUR6wPnAylMNZt7AJJBW+ej46H9ENc=
Subject key identifier: 8C:90:DE:FE:68:83:AD:B2:B3:3C:17:35:B6:43:85:FA:29:68:D1:DA
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4DD61B41E3958BA283FD41A31DDBAA7806EB5FBE
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Jan 2023 10:43:16 +0000
ROA not before: Wed 04 Jan 2023 10:38:16 +0000
ROA not after: Wed 03 Jan 2024 10:43:16 +0000
asID: 834
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d6:1b:41:e3:95:8b:a2:83:fd:41:a3:1d:db:aa:78:06:eb:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:16 2023 GMT
Not After : Jan 3 10:43:16 2024 GMT
Subject: CN=8C90DEFE6883ADB2B33C1735B64385FA2968D1DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:92:57:51:a4:d3:94:f1:76:3d:71:a9:bb:
d5:b6:ab:2d:2a:78:56:61:f1:86:e6:89:ad:5f:62:
f0:6b:7c:d0:00:40:4c:02:69:47:d2:0f:41:11:4a:
ad:18:cb:43:b5:8a:26:ae:a6:23:d3:f1:4c:78:f2:
db:5e:30:9a:32:a6:0b:c1:4f:87:2a:9c:60:2c:45:
9a:ab:05:c9:17:4d:7c:c9:4d:ed:a9:33:e3:f2:e0:
00:39:8a:80:a0:b4:ce:a4:65:b8:c8:e1:f1:9c:7e:
56:8c:ec:d2:1f:f2:62:1c:ba:3b:8c:de:44:14:70:
21:1b:48:e1:97:3b:b3:75:4a:77:33:bf:fc:8b:4a:
88:13:d6:51:a9:9d:ab:2d:98:a0:57:d7:6d:a9:9d:
d7:fd:96:d5:1b:70:96:57:01:ee:ab:e5:67:71:1b:
b1:75:fa:79:46:00:8f:14:fb:4a:eb:ad:25:50:57:
96:ef:b9:07:6c:06:7b:2c:19:e7:ff:f1:8f:da:89:
d3:c6:1f:bd:91:cd:8c:a5:1f:f3:3d:6c:ac:3d:79:
fa:ba:6d:b2:45:9d:db:57:18:63:cf:c2:03:fd:7e:
38:33:db:7f:ac:42:ae:73:54:96:6a:8d:48:f2:14:
df:21:f5:be:6c:d5:d3:a5:f1:4d:78:67:2e:63:33:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:DE:FE:68:83:AD:B2:B3:3C:17:35:B6:43:85:FA:29:68:D1:DA
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e2:b0:59:9a:f4:e3:bb:a9:96:31:0c:6f:b3:1f:6b:02:35:
5e:02:26:f4:f3:24:90:7b:4f:e1:bd:0e:61:8f:3b:6f:3d:4a:
16:64:a8:54:f9:44:44:8d:5a:ba:8a:fc:04:79:c7:e0:68:61:
96:6e:6d:95:f8:5f:a5:2d:4b:fe:00:36:d2:d2:88:ab:8c:56:
ba:9d:b1:f0:44:c2:7f:62:4d:6c:d1:9a:65:c1:3a:8c:66:4e:
6a:d9:3f:9a:f7:5a:54:87:94:0b:60:51:59:1c:5c:e0:a0:77:
91:0b:56:5f:4a:50:6f:25:bb:9a:c1:ce:8d:29:35:9d:e9:8a:
d9:fb:30:0d:4d:e0:a6:85:ef:15:64:ff:33:ac:0a:d7:1c:b9:
ce:cb:bc:07:53:0d:09:ac:f9:51:ef:5f:21:94:17:e1:5f:e7:
0d:94:54:8b:f4:b7:fa:f7:e0:8d:7d:c3:ec:05:ba:76:ad:13:
37:08:82:17:ab:b4:be:5d:f6:fe:c2:28:02:e8:7a:c0:71:bd:
1e:13:2e:44:89:df:95:92:52:1e:06:a7:19:c8:42:b7:a0:02:
27:c6:69:35:28:e9:69:5b:65:c5:16:4a:37:79:2b:b1:ae:ba:
1e:19:ed:b6:de:03:85:f0:73:90:e3:cb:53:d7:29:71:14:56:
60:69:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org