Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203537313532.roa
File: 34352e39352e36352e302f32342d3234203d3e203537313532.roa (raw, json)
Hash identifier: 32i3BIi1/X1J/Y+UEnvxAf8T0sWpzZxyzgNsmpPchaA=
Subject key identifier: 32:A8:8E:03:0A:BE:75:96:6A:95:27:5F:06:C6:FE:F0:29:59:EF:64
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 208F09D2887A740530FB570CA89E83B559B40CD2
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203537313532.roa
Signing time: Sun 29 Jan 2023 19:31:27 +0000
ROA not before: Sun 29 Jan 2023 19:26:27 +0000
ROA not after: Sun 28 Jan 2024 19:31:27 +0000
asID: 57152
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8f:09:d2:88:7a:74:05:30:fb:57:0c:a8:9e:83:b5:59:b4:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 29 19:26:27 2023 GMT
Not After : Jan 28 19:31:27 2024 GMT
Subject: CN=32A88E030ABE75966A95275F06C6FEF02959EF64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:fc:ae:1c:3f:ef:93:d0:3e:b3:9c:ec:b8:
f5:c6:cc:c1:1f:4c:d9:37:a6:e8:25:e1:aa:95:0e:
a8:c3:5a:e0:3c:fb:4e:ac:ad:fe:b0:09:3f:21:e1:
11:5d:cf:b1:f7:d2:1b:4c:dc:c2:4c:09:c6:32:b2:
bf:86:0a:cc:e0:72:75:c8:87:ad:d3:88:96:02:78:
57:b3:f6:31:07:ec:76:e8:d4:2a:96:73:dc:03:e8:
55:14:8d:14:7b:59:b3:23:de:68:a4:c4:aa:df:e6:
d1:d5:a9:df:05:da:83:36:fa:b8:56:75:17:ea:01:
91:84:e7:52:93:bc:24:7b:0b:fd:b1:a9:0c:09:40:
2b:79:7b:53:5c:50:bd:1f:45:2b:3c:9e:da:a0:36:
8e:18:be:f3:a3:a3:a3:24:c5:8e:55:03:bb:7b:13:
d8:86:02:45:ac:cf:24:18:0b:7e:25:54:fb:cc:5a:
6d:0b:3c:39:69:aa:6f:b9:b7:8f:c4:1a:d7:9f:03:
b7:01:0a:6b:8c:7c:68:4d:22:7b:db:98:9e:20:0a:
50:4f:0a:9c:48:13:9a:42:b6:24:bd:09:b4:02:17:
8a:45:67:6c:09:ea:6b:1e:7b:df:b6:40:3b:a4:e0:
a7:0d:86:4c:c6:a7:f3:57:ba:82:a2:70:20:d1:b8:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A8:8E:03:0A:BE:75:96:6A:95:27:5F:06:C6:FE:F0:29:59:EF:64
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203537313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ab:be:b6:b8:e1:0e:96:cf:d6:35:54:61:82:22:c8:b3:0a:
8e:6b:77:69:c2:73:e7:0d:17:4f:f0:2c:35:33:4d:85:59:74:
6f:ce:6b:5c:32:3e:16:28:ea:61:65:c2:6a:6d:da:d8:a4:37:
41:43:1d:c7:4f:71:5e:07:7d:eb:6b:69:42:2c:f0:6e:58:e4:
8c:69:7f:82:ee:bc:d1:10:9c:cf:8d:7a:5e:e5:e6:7a:29:4f:
91:89:9e:61:88:1a:42:14:62:e7:bc:35:71:82:99:3d:c3:b7:
c7:e6:db:26:93:fe:4b:f9:01:52:23:02:5e:e7:52:04:b5:23:
75:94:46:65:3d:cb:dd:08:c7:55:14:18:c6:92:7b:d2:07:42:
8d:00:d6:46:b4:19:82:3e:81:6f:bd:ee:94:16:f9:eb:db:5d:
70:b4:0b:41:df:36:78:ff:a1:a5:4c:00:dd:05:48:d8:6d:de:
ce:65:d9:8d:09:dc:cf:5b:d3:83:6e:13:e7:6f:1a:77:4d:a8:
f9:ec:19:d1:7f:16:ec:78:d0:9b:51:57:ba:0a:3d:8c:a4:56:
de:bc:f6:4e:86:11:d8:e2:6a:9a:81:fd:fc:96:9f:02:e5:82:
99:93:f4:a2:05:34:78:79:29:b7:cb:18:39:19:42:24:7c:97:
92:42:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 11:45:52 2023 by rpki-client on console-ams.rpki-client.org