Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131343332.roa
File: 34352e39352e36342e302f32342d3234203d3e20323131343332.roa (raw, json)
Hash identifier: S+CKX5UNySQ1Oaw7Oes1JfOYC/UmCGT7zk5A3Mc1Of4=
Subject key identifier: 12:57:C6:B7:B1:09:D1:B6:15:C6:57:32:72:8A:0D:68:02:36:2F:B8
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 5C13CA4494B951C1FD39AB0498098AE6855FA24E
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131343332.roa
Signing time: Wed 04 Jan 2023 10:45:00 +0000
ROA not before: Wed 04 Jan 2023 10:40:00 +0000
ROA not after: Wed 03 Jan 2024 10:45:00 +0000
asID: 211432
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:13:ca:44:94:b9:51:c1:fd:39:ab:04:98:09:8a:e6:85:5f:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:40:00 2023 GMT
Not After : Jan 3 10:45:00 2024 GMT
Subject: CN=1257C6B7B109D1B615C65732728A0D6802362FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:41:6f:28:e4:89:53:5a:da:e9:00:49:64:
d3:e8:73:82:2f:5e:20:11:7d:80:96:f4:e3:0d:6b:
4b:34:3e:1b:9d:d4:67:fa:d3:ca:ab:5b:b0:e4:da:
b8:ab:3e:6f:ad:a3:c3:a3:f1:c1:36:48:db:59:cb:
22:69:fd:28:55:64:d1:52:e8:96:08:94:02:7b:87:
62:80:61:df:51:d6:6f:10:c2:cf:8b:51:2a:1b:b1:
bf:ee:c6:ad:36:96:ae:8f:53:67:bf:0e:c0:8b:ba:
69:38:50:40:28:1b:9d:c6:7a:c7:f4:6c:bc:fb:dc:
63:97:83:d9:89:28:ab:c1:9c:b7:67:c3:29:bc:25:
02:36:f3:0b:27:df:e7:43:4a:57:c7:bb:17:c7:91:
e9:ff:4c:85:cc:8e:f1:d2:79:9f:d3:51:c4:0e:95:
b9:9d:35:fd:e5:23:39:a2:40:36:18:a1:2e:86:36:
42:9e:4a:10:62:1f:09:aa:7d:cb:ce:47:8f:24:b5:
c1:b2:33:f5:b0:3b:33:7b:55:ea:ef:4a:5e:d6:a8:
42:6b:20:b7:5b:9e:e2:5f:20:22:b4:77:e8:8b:67:
96:b2:c4:7c:39:38:ff:46:74:71:9b:ef:85:58:12:
67:95:02:ee:f2:3f:02:20:84:c7:52:4e:e7:a9:86:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:57:C6:B7:B1:09:D1:B6:15:C6:57:32:72:8A:0D:68:02:36:2F:B8
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
56:da:f7:e9:d3:17:17:12:e1:c3:75:0b:90:59:14:9f:b8:41:
14:3e:52:50:4a:a1:ce:2f:d5:ab:07:3a:bc:ac:5b:a6:bf:33:
0b:54:4e:f5:d7:26:bc:9a:34:ae:37:c8:85:f5:14:9f:1a:40:
5d:2e:e5:5a:3b:7a:44:f7:2c:7f:ea:c9:ea:d8:a7:4e:67:ef:
5c:dc:51:eb:25:a8:a7:5d:a6:34:06:a0:39:e0:aa:20:45:7a:
05:36:46:5f:8c:c7:73:d3:10:14:43:77:77:2a:8f:53:1f:1c:
6a:03:41:ca:0a:44:d6:27:f2:e7:c4:c2:cd:34:80:e4:87:4c:
25:be:30:a0:aa:85:20:bd:24:ff:99:57:87:75:a9:9f:a6:de:
7b:17:fc:7d:33:3e:2f:a3:a4:99:5f:d4:f1:e7:15:40:77:ee:
82:43:4c:9c:4f:e6:3d:85:f1:35:38:5f:72:4c:91:9e:35:6d:
cc:3d:e1:89:e9:4d:c0:10:7b:b5:74:fe:d2:49:49:9e:2b:cd:
10:14:f7:d6:84:98:8d:5f:9e:b4:a7:c8:12:67:10:13:d1:05:
de:f4:5e:8e:c1:c4:c9:2a:2e:0b:e4:89:b1:f6:7c:41:84:d5:
65:8e:7b:9b:57:dd:8d:80:42:93:47:5e:67:75:0e:ae:c7:2b:
7c:87:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 07:55:08 2023 by rpki-client on console-fra.rpki-client.org