Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20383334.roa
File: 34352e39352e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: otSWDStXiPXg+CZ/KfOg+S9/rmyKxuAuiQtK0RTMqpQ=
Subject key identifier: 94:8C:EF:51:0C:AE:06:A4:EB:17:AB:64:B5:73:A9:C7:C2:FE:9A:86
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 557A31549126187693E5F1800E67E63EF658461C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20383334.roa
Signing time: Wed 30 Aug 2023 11:00:08 +0000
ROA not before: Wed 30 Aug 2023 10:55:08 +0000
ROA not after: Wed 28 Aug 2024 11:00:08 +0000
asID: 834
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7a:31:54:91:26:18:76:93:e5:f1:80:0e:67:e6:3e:f6:58:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 30 10:55:08 2023 GMT
Not After : Aug 28 11:00:08 2024 GMT
Subject: CN=948CEF510CAE06A4EB17AB64B573A9C7C2FE9A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:02:0f:78:3f:2b:dd:44:87:c0:00:f7:68:
49:69:2f:1e:93:fb:46:5b:26:49:9e:40:12:0f:c7:
54:bb:c8:17:43:97:69:bc:ec:4c:1d:e6:5c:e2:f6:
d4:85:6c:9e:98:5d:ca:40:1c:f7:b3:7a:26:a2:dd:
22:ab:12:65:a4:58:b2:20:fb:6d:0f:17:44:a8:ed:
4a:16:8c:db:7d:1a:75:24:b7:76:0e:76:dd:44:3c:
99:57:15:59:eb:f3:55:b4:df:ee:40:51:d2:22:20:
6f:a3:76:ea:26:e9:26:cc:2c:40:b9:d2:6a:90:8e:
1a:97:3f:7f:46:12:0e:0e:64:21:29:89:d9:21:ac:
a4:9d:42:70:d3:36:f7:e7:44:36:e0:3b:18:28:31:
8a:7c:08:06:d4:08:82:c9:a5:5e:44:07:34:ec:96:
e8:cd:44:80:f7:88:18:f0:53:d8:36:30:cd:0f:1f:
47:34:7f:57:9f:bb:0e:27:bd:cb:26:a1:b2:98:f0:
c3:5a:b6:05:ac:72:77:de:62:c9:81:f2:35:09:83:
ea:05:6d:19:fb:84:7f:52:13:2b:96:11:2f:b3:d0:
dc:4a:cb:a9:b6:3b:c0:45:a3:85:a4:4e:14:41:aa:
19:24:2e:0a:4d:4f:a5:04:be:43:d9:31:ab:5f:e8:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:EF:51:0C:AE:06:A4:EB:17:AB:64:B5:73:A9:C7:C2:FE:9A:86
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:dd:40:8c:50:be:d9:19:c9:c3:25:37:31:e7:26:da:d8:37:
14:af:74:cb:58:be:11:79:f8:18:70:1b:9d:fb:8d:d2:43:74:
5a:fd:ce:78:d3:cf:6e:f2:05:62:48:d4:c5:71:6c:b2:25:5c:
04:7c:ff:39:23:ee:56:18:fa:da:98:ec:7d:f4:7d:a5:3d:79:
32:f3:46:dc:c7:a7:9d:ae:8b:50:30:0e:0a:b7:c2:82:21:e5:
42:25:a6:e2:b5:c9:41:3b:02:4b:04:c2:27:c9:f5:ee:89:dd:
6c:93:e9:16:01:ee:b1:44:52:bd:c7:55:b5:97:e7:d1:70:3a:
0e:54:e7:8d:32:a2:41:f3:c9:b6:27:f1:89:05:67:2a:31:cf:
31:46:d4:d4:63:55:c7:cc:ed:0e:68:d4:25:2c:31:cc:e2:8f:
e6:3f:fd:2f:58:ac:d7:6a:85:26:43:bb:95:3b:2e:69:2b:a3:
3f:9e:ea:e0:4e:f7:76:40:d2:9b:11:df:4d:bb:da:59:ec:35:
f0:52:45:cd:7a:3d:f9:31:45:52:90:b2:08:15:b0:70:41:e1:
48:38:63:9e:f3:93:ed:44:d9:16:17:5b:7c:1a:43:1d:4f:cb:
86:86:d9:43:41:d7:c4:46:b1:db:23:ed:5b:f2:b3:f7:bd:cb:
9c:3a:e8:d2
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 11 15:41:46 2023 by rpki-client on console-ams.rpki-client.org