Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e20323033353131.roa
File: 34352e39352e36362e302f32342d3234203d3e20323033353131.roa (raw, json)
Hash identifier: q4+efrpt+y6ZqC7V/cKC82zDN1R9SZMJZskhhwo4XAc=
Subject key identifier: FF:5B:70:FB:F1:E5:DA:E4:9D:E9:44:43:81:36:23:EF:54:7B:32:3F
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 0FBD96B5A28F837A42C6AD545A50F1A521981829
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e20323033353131.roa
Signing time: Sat 14 Jan 2023 19:08:15 +0000
ROA not before: Sat 14 Jan 2023 19:03:15 +0000
ROA not after: Sat 13 Jan 2024 19:08:15 +0000
asID: 203511
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bd:96:b5:a2:8f:83:7a:42:c6:ad:54:5a:50:f1:a5:21:98:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 14 19:03:15 2023 GMT
Not After : Jan 13 19:08:15 2024 GMT
Subject: CN=FF5B70FBF1E5DAE49DE94443813623EF547B323F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:62:07:80:27:08:77:78:1c:eb:26:f5:db:
4f:25:58:7b:3c:14:1d:1f:dc:b6:6d:e6:3e:91:a1:
49:a4:b6:c8:ca:4b:89:50:16:23:b8:77:5f:ce:fd:
7d:a7:c9:42:a8:6c:bb:30:2b:f0:5e:ba:50:a9:f3:
35:21:a3:cc:13:4f:4e:da:f8:1a:71:04:43:b7:62:
11:cf:28:21:5c:03:48:6f:a4:83:5c:a3:de:2c:3e:
92:e5:ac:0c:a3:26:2e:24:5e:77:24:1f:6b:3e:21:
bc:13:46:cb:ec:89:7d:15:c3:08:e4:6f:3e:4e:40:
04:1b:eb:69:42:8e:24:11:86:76:1a:a7:4d:a6:e5:
8a:e0:74:c7:eb:88:20:5e:28:a3:59:59:f8:fc:08:
58:88:6b:4b:9f:34:58:d8:de:67:9b:ca:e5:8f:f8:
02:94:99:43:c8:59:a6:2e:c5:7b:1c:8a:98:7a:bd:
3e:5a:3c:9a:3f:7d:d7:75:2a:dd:dc:ec:a7:35:ea:
1a:36:f9:7b:c5:72:8b:25:3b:5a:af:f0:b0:5e:29:
e0:d7:c1:51:8a:a8:ad:ce:c2:f6:a9:72:dc:88:08:
55:6f:4c:f2:0e:06:e1:9d:f1:b8:28:db:e6:b4:f9:
f5:f1:cc:6f:b7:fb:1f:08:47:fa:47:91:c4:a7:3e:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:70:FB:F1:E5:DA:E4:9D:E9:44:43:81:36:23:EF:54:7B:32:3F
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e20323033353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d7:8f:e2:f1:14:07:c0:85:ef:f0:5d:af:2d:a7:ad:50:2b:
1d:8d:b8:72:9f:1e:78:ea:3b:70:18:1c:f0:e7:c5:d1:58:bd:
63:2e:21:47:b6:0a:01:3b:ec:a5:49:01:61:68:7f:07:f1:28:
3e:4b:f9:e0:f5:3f:73:8e:ab:85:c3:1d:01:d5:e6:fd:4a:89:
54:3b:6b:cf:ac:27:87:bf:4a:36:cc:82:7f:8f:32:87:58:e8:
b9:21:bc:32:0c:9c:36:63:f0:16:6c:e1:af:d8:3e:d5:d4:c9:
6a:26:69:14:69:41:a4:38:88:3a:38:36:66:a6:4b:2b:28:d1:
67:de:29:e0:e8:da:c1:e9:e1:75:66:aa:72:30:95:4b:72:b5:
fd:20:b9:fc:72:1f:4c:27:91:e5:98:f4:c4:2e:43:c5:69:86:
d2:be:37:55:64:c8:2c:20:f5:88:48:46:1b:b4:8f:d5:26:8f:
7d:75:71:ee:3e:46:47:ba:2f:73:04:ee:a6:7d:1b:47:32:82:
97:71:4c:d0:cc:28:3d:9a:5c:f0:96:04:91:8f:34:d5:75:2b:
85:2a:dd:3c:36:b8:ec:98:fd:ba:e3:c8:f5:65:37:63:73:82:
dd:9f:ab:29:66:20:3b:aa:13:f8:ad:fc:fd:79:4f:27:fa:0f:
3b:77:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-fra.rpki-client.org