Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20313939373835.roa
File: 34352e39352e36372e302f32342d3234203d3e20313939373835.roa (raw, json)
Hash identifier: 5r+0ftjT/Dl+/b8SIR/RZcvJ3hmc/nxyqPVy3g4c1+I=
Subject key identifier: 71:EB:04:FB:F5:CA:66:D6:D5:22:A6:1F:D3:C4:AF:01:30:BE:F4:0E
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: F9C454DFA6CB85A2094AD25B665DB7EE0CFE7E
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20313939373835.roa
Signing time: Tue 02 May 2023 22:27:42 +0000
ROA not before: Tue 02 May 2023 22:22:42 +0000
ROA not after: Tue 30 Apr 2024 22:27:42 +0000
asID: 199785
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f9:c4:54:df:a6:cb:85:a2:09:4a:d2:5b:66:5d:b7:ee:0c:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: May 2 22:22:42 2023 GMT
Not After : Apr 30 22:27:42 2024 GMT
Subject: CN=71EB04FBF5CA66D6D522A61FD3C4AF0130BEF40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:17:f1:b3:2c:ea:76:13:55:a4:77:50:24:
06:07:11:ee:cb:73:71:4b:a5:bc:81:89:a9:8e:a9:
c3:c5:26:25:e5:4f:67:c8:8f:b6:4f:5a:00:f6:ca:
23:5e:b8:17:5e:c3:d8:34:50:6b:99:91:c1:71:93:
4e:ea:db:21:87:fe:69:14:79:94:6c:9f:9a:96:e9:
6c:16:20:a7:f1:26:18:83:a4:b5:0d:09:17:56:ed:
ec:77:3b:23:dd:41:3c:d3:47:a8:78:6e:25:4c:ab:
d9:e4:8a:d6:83:41:42:d5:06:b2:7c:3f:e1:8b:e2:
19:94:32:94:0f:d5:7e:91:e8:1c:79:35:4d:25:24:
7a:80:86:6b:6a:cf:7d:32:22:34:bb:3a:84:1c:7d:
00:0a:6c:be:dd:3c:ae:2b:ab:cd:23:0a:34:ed:65:
42:b6:cb:8c:a6:a5:a5:a2:b2:cb:ee:20:bd:63:20:
c7:11:c4:29:17:37:d8:a9:7d:10:89:51:9c:86:27:
e1:96:00:9c:0a:21:b5:d7:eb:a9:cc:bc:4b:fe:63:
33:e8:bd:11:cd:83:08:72:a4:ef:c0:b0:21:b5:51:
5b:d2:ef:b9:fc:b2:3c:e3:ba:09:80:ea:51:e9:de:
b7:bb:18:7f:56:16:d7:4b:4a:d9:04:6b:8d:b8:b9:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:04:FB:F5:CA:66:D6:D5:22:A6:1F:D3:C4:AF:01:30:BE:F4:0E
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20313939373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ef:67:a0:08:ad:ad:9a:b9:ca:24:b6:c5:c3:f0:a5:f5:48:
ee:55:d3:cd:1a:75:94:35:8c:3f:1a:79:94:f3:23:ab:e6:af:
17:62:48:ab:27:4f:13:1e:da:b4:51:07:fe:8f:0a:02:b3:df:
ed:87:18:fa:e0:6c:88:d9:3f:00:22:82:35:bf:42:9c:ee:71:
8b:09:c4:92:e2:09:60:ce:60:70:99:f0:e2:0b:0a:61:08:0e:
2b:9d:0f:a0:27:51:15:4f:39:1a:27:12:1c:48:b5:90:89:f0:
12:03:2e:72:aa:f0:c9:97:94:53:e4:54:56:d6:4a:92:93:b6:
c4:de:f2:ca:69:0b:c6:11:c2:3b:9c:5c:25:78:9e:2f:95:4d:
8e:4d:76:89:c2:c1:fc:11:49:e0:5e:d3:b7:e7:fd:47:d5:9d:
1d:72:62:11:ff:16:be:85:58:a3:d0:20:c2:90:09:84:60:de:
fd:2c:2a:0a:9e:7c:c3:bb:5a:65:7f:2e:dd:bd:c6:9d:5c:c9:
a9:91:fa:93:50:48:87:95:e9:89:ec:1d:e8:9d:7c:f0:13:34:
8e:9b:44:ee:db:b4:12:d0:64:23:5f:b2:8e:2a:e0:ce:85:6e:
3f:6e:0a:a6:1c:84:80:35:71:e4:71:6c:a7:32:95:ef:22:2a:
59:b4:1f:1a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUAPnEVN+my4WiCUrSW2Zdt+4M/n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA1MDIyMjIyNDJaFw0yNDA0MzAyMjI3NDJaMDMxMTAvBgNV
BAMTKDcxRUIwNEZCRjVDQTY2RDZENTIyQTYxRkQzQzRBRjAxMzBCRUY0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkARfxsyzqdhNVpHdQJAYHEe7L
c3FLpbyBiamOqcPFJiXlT2fIj7ZPWgD2yiNeuBdew9g0UGuZkcFxk07q2yGH/mkU
eZRsn5qW6WwWIKfxJhiDpLUNCRdW7ex3OyPdQTzTR6h4biVMq9nkitaDQULVBrJ8
P+GL4hmUMpQP1X6R6Bx5NU0lJHqAhmtqz30yIjS7OoQcfQAKbL7dPK4rq80jCjTt
ZUK2y4ympaWissvuIL1jIMcRxCkXN9ipfRCJUZyGJ+GWAJwKIbXX66nMvEv+YzPo
vRHNgwhypO/AsCG1UVvS77n8sjzjugmA6lHp3re7GH9WFtdLStkEa424ueYnAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUcesE+/XKZtbVIqYf08SvATC+9A4wHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzkzNTJlMzYzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzOTM3MzgzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1f
QzANBgkqhkiG9w0BAQsFAAOCAQEABe9noAitrZq5yiS2xcPwpfVI7lXTzRp1lDWM
Pxp5lPMjq+avF2JIqydPEx7atFEH/o8KArPf7YcY+uBsiNk/ACKCNb9CnO5xiwnE
kuIJYM5gcJnw4gsKYQgOK50PoCdRFU85GicSHEi1kInwEgMucqrwyZeUU+RUVtZK
kpO2xN7yymkLxhHCO5xcJXieL5VNjk12icLB/BFJ4F7Tt+f9R9WdHXJiEf8WvoVY
o9AgwpAJhGDe/SwqCp58w7taZX8u3b3GnVzJqZH6k1BIh5Xpiewd6J188BM0jptE
7tu0EtBkI1+yjirgzoVuP24KphyEgDVx5HFspzKV7yIqWbQfGg==
-----END CERTIFICATE-----
Generated at Wed Aug 30 11:36:23 2023 by rpki-client on console-fra.rpki-client.org