Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630373831.roa
File: 34352e39352e36352e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: pxvjDr5Bq4L5/1SsH3elbrk/e8EueE6iwCICcejr930=
Subject key identifier: E9:CF:72:91:21:7E:E0:B5:1F:0A:A5:BE:5C:9D:48:1F:72:ED:20:C1
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4DADCF9681F2623E133B245BA56E17D9A8BA163F
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630373831.roa
Signing time: Wed 04 Jan 2023 10:43:36 +0000
ROA not before: Wed 04 Jan 2023 10:38:36 +0000
ROA not after: Wed 03 Jan 2024 10:43:36 +0000
asID: 60781
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ad:cf:96:81:f2:62:3e:13:3b:24:5b:a5:6e:17:d9:a8:ba:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:36 2023 GMT
Not After : Jan 3 10:43:36 2024 GMT
Subject: CN=E9CF7291217EE0B51F0AA5BE5C9D481F72ED20C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:96:9e:7a:57:7f:be:e7:78:f1:cf:d5:a8:
92:3e:9c:77:a2:35:d1:83:9c:4c:a9:c1:03:38:99:
cc:47:0d:01:3a:4d:4f:c3:37:f8:98:2c:0f:e9:dc:
47:83:b2:d7:57:6b:8d:7c:10:03:3c:d8:c9:07:f8:
07:a0:3e:4c:16:66:1d:d7:5f:e5:f2:94:10:34:50:
d5:cf:22:f6:5f:d2:c6:bf:6e:2d:44:cb:b7:2d:5b:
db:3d:eb:52:b3:4d:f6:b3:1b:84:69:b7:5e:4a:0c:
86:32:b6:33:d2:65:d0:7e:e9:9e:12:c3:09:ab:fd:
f6:53:63:0d:fd:7a:f9:cd:2c:f3:54:6f:ec:ad:32:
5a:da:a4:de:e4:d3:ef:19:62:0a:84:26:c5:89:4c:
3d:e8:21:71:c7:8b:44:5a:cd:d8:9c:4c:27:29:9a:
da:f2:68:f0:d8:93:cd:e6:10:e8:c7:d1:8a:b5:ce:
5e:68:63:65:5a:a4:b7:08:81:94:6a:0d:8b:b6:cf:
88:7c:cb:92:b0:2a:83:32:7b:1b:88:99:71:b0:81:
2e:96:28:50:47:97:ac:e7:0e:de:d7:27:49:f8:ec:
13:54:53:9f:22:19:52:00:64:a6:a5:60:fa:00:f9:
ce:ef:92:02:97:fd:b2:88:12:5b:c8:be:2d:b1:16:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:72:91:21:7E:E0:B5:1F:0A:A5:BE:5C:9D:48:1F:72:ED:20:C1
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c4:06:af:71:fe:6c:ac:5b:35:2b:f0:61:15:8c:3a:f6:41:
b1:bd:6c:77:74:9b:cf:6a:1c:08:65:a9:b4:60:c4:ef:db:a1:
75:cb:d5:4d:c8:11:68:8d:34:07:51:05:b9:13:c5:05:90:c0:
a3:db:43:99:73:89:6b:78:24:af:c3:69:00:64:ae:3a:25:4c:
6d:bd:73:aa:ed:ea:06:e0:a2:63:88:99:1c:1e:c7:c5:aa:12:
e4:97:2c:6f:f0:3b:76:1b:97:38:fe:b2:41:91:9a:e3:92:59:
ec:41:44:49:a2:87:09:15:33:81:e7:92:f1:5d:94:9a:3a:03:
00:bc:4f:1b:55:7a:fe:0a:57:ee:e5:d6:bd:d3:19:be:13:6f:
a6:4e:bd:e2:13:3f:a4:b7:2b:11:28:f6:93:00:ee:8c:6f:61:
6c:4e:3a:5a:0f:b0:5f:86:22:03:85:83:40:84:eb:d6:f7:10:
e4:02:c6:86:a8:c8:81:da:10:03:5d:53:a5:98:c9:de:b2:64:
e1:b5:84:a5:01:46:90:d0:49:11:52:7c:75:66:c2:f0:d0:98:
11:5f:1c:ba:ed:f3:80:6f:a4:4f:0a:69:e0:96:4a:39:5f:7a:
65:36:e0:b0:ab:a3:71:94:8f:44:a0:ca:f5:26:cd:e7:ad:04:
c7:c2:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org