Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e203433323630.roa
File: 34352e39352e36362e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: KLGjljTOIKLV4+aPPXGtwqjXA1vn5I65yTX2o77Cuzg=
Subject key identifier: 3C:AC:3F:3B:07:BA:28:08:6D:3B:B7:99:D7:09:5B:EB:A8:64:5C:82
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 2E44719F2967DDF0D223DD772A708B04AF6A6DA6
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e203433323630.roa
Signing time: Sat 28 Jan 2023 12:15:56 +0000
ROA not before: Sat 28 Jan 2023 12:10:56 +0000
ROA not after: Sat 27 Jan 2024 12:15:56 +0000
asID: 43260
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:44:71:9f:29:67:dd:f0:d2:23:dd:77:2a:70:8b:04:af:6a:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 28 12:10:56 2023 GMT
Not After : Jan 27 12:15:56 2024 GMT
Subject: CN=3CAC3F3B07BA28086D3BB799D7095BEBA8645C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:ea:e0:92:02:82:1d:1e:ac:c7:d0:41:84:
b7:f5:fe:db:09:40:fd:7c:57:81:54:70:e8:95:de:
09:c0:7b:71:50:7d:d6:a8:e5:d0:df:1e:34:b3:70:
37:71:25:56:cd:3d:16:e0:64:c2:27:ea:07:66:f5:
c6:db:28:07:74:7a:e4:51:92:22:21:82:2c:9a:ff:
07:73:32:9a:e5:55:bf:4a:dd:bf:0e:87:9b:b2:1e:
dd:61:6a:80:77:cb:19:29:c8:44:d0:29:12:ea:69:
00:7b:39:a0:46:29:9d:2e:01:48:f4:3f:e5:c0:e9:
cf:f4:d0:c6:d5:22:3d:6f:48:4c:27:4d:06:11:29:
15:a0:fe:44:49:25:14:23:16:b1:8e:fa:af:7c:99:
71:c2:d6:a2:97:06:db:65:9e:67:7f:0b:42:eb:84:
2e:d0:6d:2d:ee:0d:c0:ef:3c:5c:d8:4e:d0:86:9c:
cc:ea:69:b2:b6:17:0c:ad:a3:fb:b0:46:d8:20:21:
a1:10:f0:d3:32:11:3b:68:08:31:be:b2:c2:3e:e7:
4b:41:b0:5a:07:1a:df:da:f4:5c:8c:77:db:05:39:
20:60:32:b7:81:f6:83:13:3f:97:09:1e:ad:e7:0a:
b4:3c:71:e8:e2:af:3d:2d:7b:32:8d:69:e5:01:64:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:3F:3B:07:BA:28:08:6D:3B:B7:99:D7:09:5B:EB:A8:64:5C:82
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36362e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a8:08:d3:8c:e9:59:db:6f:89:05:4b:9c:c6:fe:b7:7f:a1:
ee:84:8c:ac:80:b1:65:54:24:53:ac:bd:74:03:07:2f:d7:30:
fc:a9:12:e7:fa:49:f4:0d:0f:f0:02:7b:ed:42:dc:0f:b9:91:
c6:b4:22:af:34:0f:e2:03:3e:1e:82:ed:78:6f:b4:73:a5:c9:
1c:03:ad:a9:81:40:22:2d:47:79:85:d1:09:ad:19:87:e5:69:
75:25:d1:46:26:e9:40:55:d9:48:f1:77:fc:57:d7:d7:71:41:
76:15:c5:4a:0f:bd:13:a1:ac:4a:03:c1:ff:d9:e0:45:d9:98:
03:5f:91:21:88:42:be:c2:73:27:97:50:2c:6f:4b:f6:2f:52:
30:2e:e0:5b:84:c7:83:cb:e1:51:0b:ac:08:f1:a2:56:33:38:
b7:b6:1b:7c:d4:85:35:11:ce:e5:72:55:0e:6a:7e:34:bf:3f:
3c:77:8f:72:31:47:12:43:95:4b:77:a4:ed:5c:fe:e2:59:d1:
25:dd:13:75:06:cd:07:81:54:5d:f7:28:b0:49:de:5f:d8:b0:
fa:ce:f3:0c:bc:ac:87:24:e9:85:4c:78:8e:9a:fd:c1:e0:36:
cc:a2:a9:51:08:21:29:bc:50:59:2c:26:ba:53:7f:ed:5f:09:
0d:cc:f3:09
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 15 21:00:50 2023 by rpki-client on console-fra.rpki-client.org