Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630343436.roa
File: 34352e39352e36352e302f32342d3234203d3e203630343436.roa (raw, json)
Hash identifier: MEc1VtFjMPG4J4TAE9+HsF3Q6SX2lDpFUSzKBBnj3gk=
Subject key identifier: 52:2D:A3:9C:37:5A:5B:92:E2:57:22:82:42:72:55:11:F8:D2:38:B9
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4555E8ECFAA6817B0CDE4C7BAB6951077D70F28D
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630343436.roa
Signing time: Thu 10 Aug 2023 18:16:17 +0000
ROA not before: Thu 10 Aug 2023 18:11:17 +0000
ROA not after: Thu 08 Aug 2024 18:16:17 +0000
asID: 60446
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:55:e8:ec:fa:a6:81:7b:0c:de:4c:7b:ab:69:51:07:7d:70:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 10 18:11:17 2023 GMT
Not After : Aug 8 18:16:17 2024 GMT
Subject: CN=522DA39C375A5B92E257228242725511F8D238B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:f2:e0:c9:54:5f:21:ab:08:12:62:62:d0:
d2:93:78:1a:e3:ab:5a:2b:1d:ff:9b:3a:36:2a:5d:
df:3c:61:6f:6d:2e:a4:7d:aa:8e:51:c0:b6:a1:92:
1e:5f:f9:38:0a:cb:34:b0:95:25:1c:ed:91:c2:b9:
1e:c8:36:2a:6b:d1:eb:c5:b2:6a:87:80:f8:d5:a2:
f4:40:8b:21:39:4d:22:60:fb:ab:7f:1d:1d:6c:29:
b6:6f:99:b8:a5:25:37:c1:31:70:d0:17:11:ac:6f:
4b:c1:cf:e5:a4:a8:50:ab:2c:8c:79:69:16:ea:73:
4f:54:a5:81:b3:6d:a2:0f:d7:a1:19:ff:5b:22:85:
37:7c:a6:cc:e1:ac:29:44:6b:70:58:8d:63:e0:34:
1e:e3:66:7a:f7:9e:e5:47:ef:61:e8:6c:7b:1e:77:
5f:a4:85:b2:0a:01:7e:a6:eb:e0:e9:f6:16:c4:2b:
78:3b:e1:c3:e8:e0:f3:59:d3:8f:d8:1c:03:53:05:
7b:c2:72:2f:7a:d2:62:dc:77:48:61:ee:43:cf:fa:
b7:a9:60:35:b2:a5:54:1c:ab:05:c6:8d:42:8f:fc:
f3:f4:8d:60:65:42:52:05:77:e9:1e:24:ee:8b:dc:
ec:ee:d6:be:ce:7d:82:74:be:ab:6b:3b:16:fe:6a:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:A3:9C:37:5A:5B:92:E2:57:22:82:42:72:55:11:F8:D2:38:B9
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e0:21:b7:f4:74:99:9e:a4:8d:19:cd:fe:9d:c8:56:75:47:
10:42:21:f5:bd:4d:89:a3:d3:22:cf:e5:b1:cd:e1:92:e4:9f:
a8:34:a8:96:65:88:4e:13:39:61:15:ed:79:2c:4c:6c:61:cf:
c9:f3:19:8e:e9:1f:00:a4:a3:fd:39:97:f9:0c:06:9c:31:aa:
08:90:f2:4c:1f:23:e3:e5:e5:5d:26:3d:5b:d3:fe:52:ec:63:
5b:8d:50:aa:06:24:0a:c7:4c:59:a9:f9:5f:2a:ea:55:09:3f:
cf:4c:19:66:23:92:6e:7b:17:10:48:6d:e2:72:12:d2:34:26:
02:23:38:d7:99:d5:31:80:e2:90:9d:7f:f3:44:dc:84:ed:3a:
27:bd:a2:69:b3:81:e5:fc:9a:ea:ad:ae:f5:c0:e1:6e:95:56:
b1:d1:18:4e:2c:d0:b0:2c:e0:23:cf:ef:2e:39:76:18:b8:16:
d2:ac:a9:04:f2:77:72:a0:08:df:c1:ba:6b:e0:34:8e:ee:a8:
d1:46:c8:78:7c:ba:56:d5:bf:f7:0d:9c:59:6b:3c:e9:1f:98:
78:b7:38:70:b2:fc:ad:1e:f3:a2:3d:ad:9c:e4:38:c2:29:4f:
bc:66:32:00:c8:18:55:e8:69:a3:af:ec:ee:81:a6:cf:f1:38:
c5:0f:46:ba
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 11:45:52 2023 by rpki-client on console-ams.rpki-client.org