Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323130353436.roa
File: 34352e39352e36372e302f32342d3234203d3e20323130353436.roa (raw, json)
Hash identifier: LGAn6S3paDij2kHKq26eIrcTWIbyhXUUmrNXng2Wuxo=
Subject key identifier: D4:16:68:19:40:68:94:E0:D2:65:BF:0F:BC:B4:38:79:13:EF:CC:99
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 3F75752DA77807A8401CB5A5A0E1274A71537B3E
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323130353436.roa
Signing time: Wed 04 Jan 2023 10:44:13 +0000
ROA not before: Wed 04 Jan 2023 10:39:13 +0000
ROA not after: Wed 03 Jan 2024 10:44:13 +0000
asID: 210546
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:75:75:2d:a7:78:07:a8:40:1c:b5:a5:a0:e1:27:4a:71:53:7b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:13 2023 GMT
Not After : Jan 3 10:44:13 2024 GMT
Subject: CN=D4166819406894E0D265BF0FBCB4387913EFCC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:bc:ef:8e:a5:44:37:e4:b7:b4:f6:2d:69:
a8:2a:70:76:af:24:2d:40:0a:36:e4:66:77:74:e5:
33:2e:fc:f5:ee:14:6e:09:8c:5e:d5:d3:48:65:84:
08:19:4a:54:78:2c:3c:68:52:19:79:4a:40:28:8f:
9b:b0:84:8c:17:f7:e2:0f:1b:e3:d9:37:e4:87:64:
a7:94:3a:21:85:f8:54:61:62:a0:33:db:c6:43:77:
b4:e9:fb:1f:7b:f9:55:fb:5a:7e:14:cb:24:82:6a:
31:45:6f:19:5c:4c:39:f7:a6:15:fb:3b:55:86:6d:
3b:b4:02:7f:a6:3b:6b:59:8e:b5:6a:6c:d9:c7:c6:
29:6f:c5:be:69:20:61:b8:fc:e4:e1:1a:3a:1a:3e:
9b:7e:02:5d:39:bc:63:8e:fd:30:f1:17:29:66:fc:
32:99:b7:0b:41:f4:03:0a:b5:7e:2f:9e:b0:a2:ae:
2b:50:8f:bc:bb:fc:2e:dd:e0:27:e9:4e:7f:f0:5f:
0c:07:19:cd:43:9f:ea:ef:a5:ab:d3:e3:a4:2a:4b:
74:00:db:0b:5a:54:42:33:8e:42:16:a6:8d:a1:94:
ca:d5:c3:21:6f:53:75:86:b7:6e:f9:8d:86:41:a1:
d4:d3:46:e1:07:75:81:de:81:68:53:72:ea:33:32:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:68:19:40:68:94:E0:D2:65:BF:0F:BC:B4:38:79:13:EF:CC:99
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20323130353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:96:55:67:8d:2a:61:08:78:a4:db:52:19:a1:bf:95:62:2a:
5a:ea:a1:f5:9f:24:c2:0e:55:b2:e8:f6:79:00:39:ac:06:8d:
c1:73:ce:f1:1f:58:9e:47:be:11:06:6f:17:f2:dc:33:6d:a8:
63:61:ef:17:be:37:97:4b:d7:1d:3d:65:13:1d:0f:39:22:38:
1b:c8:f9:10:98:5b:92:76:36:bd:69:32:7f:e1:22:89:40:7e:
fd:4b:b1:ae:9b:d2:b1:1f:07:65:0b:aa:ea:f7:67:24:53:9e:
e7:80:74:64:fc:1c:0e:99:f3:86:df:0b:cc:87:1c:e0:a8:60:
76:87:7d:63:b6:63:a9:c3:d5:82:9b:24:42:1a:ac:23:4a:22:
7c:04:5f:2b:2d:45:f5:0a:3f:d1:25:b2:e8:ac:47:5d:01:97:
78:b2:ed:af:5d:6e:35:3b:7b:1a:31:b0:cd:1c:63:2b:36:15:
c8:99:a6:6b:62:f1:67:9b:38:2d:15:08:eb:fe:c3:5e:1f:3c:
aa:e0:af:66:12:28:69:20:2c:c4:d8:1d:40:8a:2f:b5:a4:8e:
41:2f:d6:5b:37:af:d7:51:e9:10:f7:bf:a2:f7:2f:fb:84:74:
95:2b:07:0f:1b:2b:79:44:f2:01:94:75:f5:3e:94:8a:5d:42:
64:05:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org