Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20323033353131.roa
File: 34352e39352e36352e302f32342d3234203d3e20323033353131.roa (raw, json)
Hash identifier: Ttu6gjCkc+dazkbUO5aJ81rEDmeez+k2tbLXD+ZZ50Y=
Subject key identifier: 7C:CD:11:90:FE:BA:8E:BA:B6:61:45:26:7F:04:E1:0E:F3:62:57:D0
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 68E6E05E7B3EBD9827155C6C50431EB5EC11E526
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20323033353131.roa
Signing time: Sat 21 Jan 2023 20:19:31 +0000
ROA not before: Sat 21 Jan 2023 20:14:31 +0000
ROA not after: Sat 20 Jan 2024 20:19:31 +0000
asID: 203511
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e6:e0:5e:7b:3e:bd:98:27:15:5c:6c:50:43:1e:b5:ec:11:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 21 20:14:31 2023 GMT
Not After : Jan 20 20:19:31 2024 GMT
Subject: CN=7CCD1190FEBA8EBAB66145267F04E10EF36257D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:a3:d5:ff:01:36:b1:93:e5:1e:63:42:43:
16:3c:cd:f4:d8:83:4b:e1:f4:97:d6:bd:dd:f6:12:
18:47:56:b6:94:fb:01:d3:cd:f3:c2:e4:34:cd:8f:
e8:cd:c7:9b:f9:13:ed:c5:91:46:b5:7f:98:a2:54:
21:84:ef:44:85:86:4a:a5:73:c6:38:2b:c7:42:af:
bd:2e:08:2c:9a:6a:ec:30:35:0e:fb:2b:86:6e:36:
19:02:28:c7:e7:de:4f:68:da:13:e1:61:6a:d4:f1:
be:7c:8c:be:e5:5f:ae:c3:4f:68:ca:f4:f6:a6:3a:
e5:70:af:2d:bb:0f:22:33:6f:71:2a:f1:f4:74:92:
5e:67:3a:d1:a8:bd:7e:2d:d5:f2:46:a6:d1:ab:e8:
87:17:b3:df:3c:ba:f8:b5:1a:5c:cb:5d:7e:2d:0b:
81:c1:80:a0:93:77:90:d7:82:e8:68:c8:0c:fa:54:
fe:a5:11:00:21:d4:ba:60:54:c9:63:cb:4a:07:a4:
b4:e1:5f:65:27:6b:ae:2a:e5:43:8d:10:19:b1:3e:
ff:e8:a3:cc:88:c6:45:7e:03:c0:20:02:5c:3e:d5:
8e:ef:06:9b:3d:55:19:8f:94:9d:fa:41:31:91:fc:
2a:18:af:74:3f:f9:6e:66:6d:16:3f:fe:ce:96:ec:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:11:90:FE:BA:8E:BA:B6:61:45:26:7F:04:E1:0E:F3:62:57:D0
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20323033353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
82:20:35:b9:80:4e:87:65:a5:93:37:69:9e:08:4e:53:08:00:
2d:3f:ca:1c:98:73:fa:ee:e9:db:e1:bc:a3:6d:de:cb:50:a8:
62:45:c8:a1:77:78:59:76:c7:c9:b4:7b:60:ba:b4:7b:24:ec:
70:31:05:41:dd:d5:91:4b:38:64:0c:14:c2:96:b6:66:de:e5:
65:13:9e:86:0c:52:23:2a:be:a7:63:ef:a0:fe:9c:08:31:e1:
8b:0f:2f:b9:e2:6f:97:ff:7a:16:20:42:f4:f1:73:21:7a:ee:
4a:0e:8c:bd:7f:1c:10:c0:ca:1c:b5:37:b0:b9:d7:39:36:a9:
9c:14:16:87:8f:2d:cb:4d:00:58:b2:1a:52:a1:47:1a:29:41:
0a:23:98:37:ca:c2:b8:2e:2c:8e:91:e7:61:74:69:53:ed:ae:
bf:f7:26:08:33:a3:b7:76:6a:82:ec:9e:6f:05:f0:28:fe:f3:
ca:ad:12:b6:09:20:8f:37:c6:cf:6b:17:11:b3:2f:dc:7f:7d:
d4:6a:e1:74:b2:20:ba:aa:85:a6:9f:36:ed:ed:6f:1a:b1:6b:
b4:21:03:a6:50:8f:07:85:43:31:b5:a3:45:5c:0d:98:d0:75:
c7:2d:d3:4c:b2:65:60:52:28:72:ae:a5:86:62:54:b3:01:e8:
e1:82:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 11:45:52 2023 by rpki-client on console-ams.rpki-client.org