Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203630373831.roa
File: 34352e38382e392e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: m9dqergi+iMoqakO14f4aDRIV9vOyxjsSYj3JjQgI08=
Subject key identifier: 73:5E:2C:8A:18:0F:D5:9D:5B:C6:46:81:89:AA:ED:33:47:90:BF:95
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 366B36C88DFA58085EEF4DEAF88B307E90E38F5C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203630373831.roa
Signing time: Wed 04 Jan 2023 10:43:32 +0000
ROA not before: Wed 04 Jan 2023 10:38:32 +0000
ROA not after: Wed 03 Jan 2024 10:43:32 +0000
asID: 60781
IP address blocks: 45.88.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6b:36:c8:8d:fa:58:08:5e:ef:4d:ea:f8:8b:30:7e:90:e3:8f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:32 2023 GMT
Not After : Jan 3 10:43:32 2024 GMT
Subject: CN=735E2C8A180FD59D5BC6468189AAED334790BF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:55:f9:8c:71:0c:e8:e9:94:a1:3c:4e:60:
0d:43:9c:db:17:56:2c:75:bb:06:17:ff:77:1a:84:
a9:46:03:43:75:3c:cc:0a:dc:08:56:d0:f1:8e:4a:
5b:38:91:16:98:7c:bd:62:91:2d:40:48:f0:4b:90:
3b:2a:33:55:33:9c:8d:e6:3e:fc:b8:05:a7:84:bd:
d9:88:1f:6a:c7:d6:45:c0:4f:08:66:74:38:d8:4f:
79:2a:6c:fb:69:1e:6e:27:4e:a1:93:05:28:45:51:
0a:15:58:8a:8b:a5:0b:ca:7d:69:3a:61:6c:5d:58:
c6:c0:37:e0:48:92:73:b6:9c:8b:8b:5f:65:e7:d5:
77:97:e1:1b:4e:89:ca:2c:a6:bd:31:65:98:ce:1e:
a0:fe:88:8a:c9:22:25:6b:fb:74:d0:e8:46:35:e6:
5a:ae:24:5e:53:b1:77:fb:39:30:ea:9a:df:de:3f:
91:04:32:0f:74:a1:e1:80:f6:c4:42:72:e9:ce:3f:
f4:f6:b9:aa:83:a1:84:34:cf:13:9c:36:a4:1d:11:
4b:ef:32:ba:eb:02:58:e2:1f:bc:50:dd:f9:9e:23:
fe:3d:38:bf:e7:74:81:fb:2b:c6:0d:0e:46:aa:44:
ef:c1:25:3e:f6:11:0e:f7:c0:6e:a4:3a:93:3e:24:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:2C:8A:18:0F:D5:9D:5B:C6:46:81:89:AA:ED:33:47:90:BF:95
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e392e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
62:76:f2:5c:3a:e7:62:49:5b:c5:83:04:22:f7:f1:cd:24:8a:
2e:f8:6b:77:38:29:3a:de:fb:b4:a5:7a:59:4d:d1:08:93:63:
5a:da:24:92:1e:4b:69:62:16:c4:14:7f:cb:db:2f:74:d5:63:
f7:57:7c:dc:d1:86:6a:f2:79:11:30:04:c4:2b:b1:7f:0c:32:
ac:97:5b:72:52:28:b3:d0:a5:a6:30:96:1e:25:d7:01:20:a0:
d6:11:15:fa:1f:8e:c6:d5:b2:f8:e6:e4:87:ee:87:a6:1c:f9:
d0:33:c6:1d:1a:b7:5e:6e:9e:34:37:9d:dd:14:4d:7e:11:eb:
2a:27:99:4c:ef:ec:5a:0d:2f:9f:2f:bb:b4:ca:ea:d0:99:75:
91:a3:4a:7b:25:76:81:b6:fb:b2:b2:18:48:47:52:f2:e1:7e:
6b:c3:4d:22:94:26:14:00:8c:7f:ba:bb:81:c5:eb:0f:66:62:
a5:6a:db:c4:a3:f6:ea:8f:a6:80:b8:76:1d:01:9b:0c:a6:f2:
f3:9e:32:f2:5f:f2:05:d1:f4:5b:46:ee:cc:6d:c4:a5:28:70:
a5:05:fb:03:31:8f:b3:f4:88:d6:43:91:b0:07:17:63:f4:8c:
bb:20:5c:a4:70:f7:32:98:a1:51:5d:48:38:2f:3a:b1:9d:ee:
88:36:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org