Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323037393537.roa
File: 34352e39352e36372e302f32342d3234203d3e20323037393537.roa (raw, json)
Hash identifier: YnfJ+mQcTqxFOLx+jeqRV5/nQ8LOFxj2gAWEsb0S3Xc=
Subject key identifier: 80:1A:2D:3F:65:D9:67:EA:FA:17:E2:E7:6D:65:73:F6:77:48:D8:73
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 754FDB278DD9B1095865F85ADEC024C5034C341F
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323037393537.roa
Signing time: Tue 02 May 2023 22:27:42 +0000
ROA not before: Tue 02 May 2023 22:22:42 +0000
ROA not after: Tue 30 Apr 2024 22:27:42 +0000
asID: 207957
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4f:db:27:8d:d9:b1:09:58:65:f8:5a:de:c0:24:c5:03:4c:34:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: May 2 22:22:42 2023 GMT
Not After : Apr 30 22:27:42 2024 GMT
Subject: CN=801A2D3F65D967EAFA17E2E76D6573F67748D873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:ad:af:77:b1:9d:03:4c:ac:8c:b2:aa:d4:
07:8b:6c:70:af:23:ab:ec:5c:10:6c:c8:2c:01:d9:
43:95:c3:94:d7:0d:ec:bb:e7:53:95:6e:8c:d4:c8:
91:f0:d1:b3:b6:25:17:6d:72:96:a4:92:36:8f:35:
d6:8e:ec:e6:3b:22:7e:af:2c:bd:20:9e:ef:0f:35:
d5:d1:65:c1:e9:03:f1:fb:c0:8c:6b:1b:ce:b7:31:
7e:b1:e3:69:b9:20:f7:f2:f3:d7:a3:b8:8f:fe:04:
2b:dd:cb:c7:be:28:77:42:44:6b:bb:a8:98:11:83:
cf:90:b8:3a:ef:0e:77:29:8f:15:59:4e:8d:2a:ce:
f3:2b:56:ee:17:33:c6:89:ee:73:e8:7f:97:9e:8e:
e7:6b:96:36:bc:37:75:85:21:a4:08:31:ce:f0:1a:
6b:d7:97:1c:ec:2f:6f:a4:ce:dd:e8:3a:8e:1d:9c:
25:1e:21:cf:7f:3f:f3:38:78:18:3f:60:d2:d4:0d:
24:c2:c9:fb:40:dc:74:56:23:69:cd:f0:2d:bd:32:
2b:0b:33:0d:57:d2:41:b5:bd:3c:f7:91:f3:4f:45:
0e:9f:57:ed:48:b6:75:be:5b:a0:45:d5:39:67:34:
51:86:ce:77:37:71:83:b3:2e:74:8c:d6:e3:a5:4a:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:2D:3F:65:D9:67:EA:FA:17:E2:E7:6D:65:73:F6:77:48:D8:73
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323037393537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f9:02:3f:32:8f:be:26:91:8a:64:43:1d:dd:e5:e9:b9:95:
c8:23:b1:b7:c1:11:2d:54:3d:b0:d2:e8:b5:3a:79:e8:e0:67:
dd:07:64:09:52:6c:5e:30:eb:bb:7d:8c:e1:73:b2:d7:5e:6f:
cf:c1:ba:eb:c3:d0:c7:7b:93:e6:88:06:66:fa:b8:62:ec:a3:
25:45:0c:a0:2c:de:f2:9c:d1:35:34:ba:bd:d6:9c:79:10:bc:
ab:79:41:a0:33:9d:08:66:73:84:9a:c4:63:34:2f:a0:2a:12:
56:8e:ed:e2:a3:43:26:a6:5c:09:ca:f5:4d:e8:92:9a:c0:dd:
26:50:59:00:1b:0b:d2:01:09:6e:81:4c:ab:62:08:14:0a:3f:
0c:41:c7:be:84:7f:9d:c0:90:95:00:c5:c6:57:e8:c1:3b:b2:
5a:82:27:94:ca:7e:58:3f:ab:07:f4:e3:25:dc:c9:7c:f1:ca:
8a:2e:0b:ae:07:54:e8:e9:ea:88:80:f8:9e:9f:d4:68:18:80:
6c:09:c2:4a:91:79:a7:f5:50:3b:4f:a9:69:29:ad:c4:4e:cc:
14:4c:44:53:fe:9c:88:01:9a:36:9f:44:a5:ed:57:d9:30:a0:
7c:23:46:9e:db:bd:03:fa:92:43:08:da:25:dc:b2:16:3e:95:
8f:f4:09:3e
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 30 11:22:27 2023 by rpki-client on console-ams.rpki-client.org