Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203433323630.roa
File: 34352e38382e392e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: 943VB4FAXp/GNXk7itXyEiCYSTNI3jGSi7YyBZVQA9E=
Subject key identifier: 61:B9:67:C4:3E:78:69:07:55:07:B0:15:A1:30:68:32:73:32:93:D5
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 2052762855E10A7658519EEE0069E3BF3AE9101B
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203433323630.roa
Signing time: Sun 22 Jan 2023 22:49:23 +0000
ROA not before: Sun 22 Jan 2023 22:44:23 +0000
ROA not after: Sun 21 Jan 2024 22:49:23 +0000
asID: 43260
IP address blocks: 45.88.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:52:76:28:55:e1:0a:76:58:51:9e:ee:00:69:e3:bf:3a:e9:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 22 22:44:23 2023 GMT
Not After : Jan 21 22:49:23 2024 GMT
Subject: CN=61B967C43E7869075507B015A1306832733293D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:3f:0b:42:31:6d:bd:d7:c1:9b:d8:6b:1d:
39:d8:87:ad:aa:a2:e8:8c:d9:91:2c:0c:5e:be:d1:
98:4c:4a:dd:31:8f:03:7d:9f:da:73:28:10:53:35:
46:d1:13:99:ad:41:c7:71:58:74:12:b4:77:1e:71:
52:17:45:96:e9:c4:59:4b:89:93:d8:76:5f:7d:e8:
2b:e7:b6:c3:55:07:61:bd:2c:2d:d7:b2:9f:e1:86:
7d:3e:b4:b1:57:84:c3:e0:c5:25:23:3f:83:70:99:
18:ca:d8:8a:34:94:57:9f:dd:82:2e:ca:13:54:51:
14:12:d7:1e:69:ed:07:c6:27:9b:a5:9d:10:bd:11:
d8:bc:0e:16:6c:cb:9f:9a:10:2c:47:ca:93:3e:bf:
54:5e:c7:9f:9e:7e:35:6b:74:15:e0:fc:57:d9:f5:
7c:71:64:a7:50:c6:b2:7c:d6:5c:a7:a8:e5:0b:51:
b0:5d:cb:26:da:49:0c:2f:5d:b2:fb:f4:53:b5:20:
78:de:32:36:90:d0:28:ba:15:02:eb:71:12:e2:a0:
d9:9e:ea:da:c3:22:d1:cb:27:ee:28:56:2d:46:93:
b2:8e:e1:e8:20:30:5c:d5:7e:df:3a:6f:99:c9:f6:
71:26:2c:b1:27:50:ce:5d:52:6c:21:94:db:bf:f7:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:67:C4:3E:78:69:07:55:07:B0:15:A1:30:68:32:73:32:93:D5
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8d:3d:e6:57:c6:f5:04:5f:40:4a:46:1b:2b:b0:dd:65:42:
af:e3:24:28:97:08:22:3a:f1:fd:f4:91:5b:69:d3:6e:33:a7:
aa:4a:e5:b2:62:9c:c1:45:ca:bb:1d:4f:9d:34:e3:7d:49:12:
b2:5c:68:22:4a:7f:7b:0e:c7:bf:a0:d4:5e:a0:20:13:ec:1d:
1d:4f:c0:58:d7:31:e0:50:e9:d5:18:00:d1:fb:84:9a:d3:5e:
3f:44:98:90:cc:83:78:46:43:19:3e:68:a1:d0:b9:50:de:1e:
84:2a:74:3d:89:c0:7d:88:95:00:f3:3f:78:aa:28:7e:34:28:
a8:f6:42:db:63:95:cf:47:64:bd:12:fb:40:64:b5:8a:f2:ae:
c5:b2:95:0a:b8:a0:fc:f1:dc:8d:d8:27:bb:07:9a:47:b7:48:
ae:a3:68:37:fe:cf:bd:69:b6:95:80:db:98:95:83:d8:62:42:
d4:e6:a0:a3:75:45:26:c2:32:ef:0f:75:21:0f:c9:32:d1:2d:
c1:41:11:38:0c:a1:ad:02:24:37:97:7e:a0:d2:e3:37:c8:d8:
56:56:72:d1:04:0d:87:c6:d6:7f:47:60:49:67:b3:e1:3a:e6:
d5:89:96:37:d5:c5:18:ab:bd:15:71:95:e2:d2:c8:af:9d:0a:
f7:7d:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org