Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa
File: 34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: YVqiYokGQ3JRXh6F9O3LC4XsMsPF/QCd444ztw1jUKw=
Subject key identifier: EF:71:33:7F:60:A0:50:D1:C9:82:03:33:D3:F5:2B:7F:84:4F:60:99
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 616DDF6A82259B246EB019E7B827AA5608C8C5B0
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa
Signing time: Mon 06 Mar 2023 06:52:26 +0000
ROA not before: Mon 06 Mar 2023 06:47:26 +0000
ROA not after: Mon 04 Mar 2024 06:52:26 +0000
asID: 209260
IP address blocks: 45.156.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:df:6a:82:25:9b:24:6e:b0:19:e7:b8:27:aa:56:08:c8:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Mar 6 06:47:26 2023 GMT
Not After : Mar 4 06:52:26 2024 GMT
Subject: CN=EF71337F60A050D1C9820333D3F52B7F844F6099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:5f:c5:15:af:3f:56:51:33:e1:b2:5e:83:
3d:b1:ae:10:4a:27:c5:17:d9:05:a2:c5:5c:f5:05:
ee:3b:c5:dc:35:68:c6:f3:be:6a:b7:c4:b6:8b:a9:
07:3d:d8:c9:b8:a4:6c:3a:5a:f4:c9:72:dd:f9:20:
3a:b3:20:7e:0f:91:bd:11:1a:60:41:66:48:8f:5a:
0c:14:34:1d:24:83:8a:44:da:1b:64:3f:70:c2:a9:
ed:75:1d:ed:3c:79:5f:2f:e9:c8:42:53:2a:18:1a:
a4:9e:50:0e:5e:5a:46:07:64:55:9b:7e:b7:00:fb:
10:ff:b2:f2:a7:c6:f8:df:1b:5a:a1:95:eb:51:1e:
f9:8f:68:6b:40:f2:6f:02:8a:33:db:b3:7e:e9:3c:
8c:35:bb:03:7c:31:b5:08:a3:09:bc:94:97:6c:f0:
76:41:65:80:c6:c8:34:ef:bc:b9:2e:74:e3:6b:63:
41:88:e5:f8:2f:4b:2d:5d:91:97:92:50:22:a6:3c:
9c:79:18:ea:b9:74:87:95:ca:b7:9f:57:9d:73:dd:
ad:16:c4:e7:61:d6:f0:95:db:0f:c6:a5:b3:51:4d:
25:08:82:0a:68:8e:e3:20:25:0d:7e:ed:be:5c:19:
da:1f:1c:d2:f9:08:cf:92:2e:58:e3:cb:78:58:19:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:71:33:7F:60:A0:50:D1:C9:82:03:33:D3:F5:2B:7F:84:4F:60:99
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.119.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bf:a1:2f:af:1a:11:89:e5:e5:fe:fa:9d:27:84:6c:39:76:
59:ad:01:73:ae:b6:d0:e1:99:7c:78:f4:da:8c:d8:c1:45:3a:
bc:72:15:2b:8d:f1:c5:c1:0c:2f:be:e0:1b:89:4e:39:ff:4d:
3b:45:82:81:e1:b2:3a:fa:dd:2c:95:68:45:39:bc:fc:35:7c:
bd:8c:32:f6:99:63:26:e4:2c:b9:2b:61:d3:40:ff:96:3e:72:
51:61:26:8d:bc:d5:f6:ff:6a:cd:7f:7f:f5:15:04:e6:69:38:
f7:8d:57:de:b2:f4:28:22:ef:71:5f:4c:1f:b5:46:64:f9:fb:
06:23:57:28:7c:f0:a7:d4:84:ee:31:f2:20:ef:6d:3a:fa:8b:
d5:04:f5:28:54:2b:92:e1:c2:f8:37:0a:eb:cd:9d:b6:72:46:
20:63:9d:f8:f2:37:4f:91:5b:88:99:67:ef:66:85:ef:cd:22:
da:e3:b8:9c:73:38:56:b5:b7:d5:12:22:f9:03:56:f0:f0:90:
44:4e:ea:fc:52:df:ca:a8:87:2f:8d:a4:f6:37:51:16:40:d1:
48:d6:56:d8:05:59:de:e8:74:a3:e2:44:ab:dc:85:4d:e4:c5:
32:e9:8e:f6:c5:e7:d5:cd:e1:21:49:04:21:66:8c:12:9b:df:
25:4b:21:44
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUYW3faoIlmyRusBnnuCeqVgjIxbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZkYTE5ZjQyODVlYjA0ZDAzMTA3MzNmNGFjMDAxMDdi
NzMzMzdhZDAeFw0yMzAzMDYwNjQ3MjZaFw0yNDAzMDQwNjUyMjZaMDMxMTAvBgNV
BAMTKEVGNzEzMzdGNjBBMDUwRDFDOTgyMDMzM0QzRjUyQjdGODQ0RjYwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNF/FFa8/VlEz4bJegz2xrhBK
J8UX2QWixVz1Be47xdw1aMbzvmq3xLaLqQc92Mm4pGw6WvTJct35IDqzIH4Pkb0R
GmBBZkiPWgwUNB0kg4pE2htkP3DCqe11He08eV8v6chCUyoYGqSeUA5eWkYHZFWb
frcA+xD/svKnxvjfG1qhletRHvmPaGtA8m8CijPbs37pPIw1uwN8MbUIowm8lJds
8HZBZYDGyDTvvLkudONrY0GI5fgvSy1dkZeSUCKmPJx5GOq5dIeVyrefV51z3a0W
xOdh1vCV2w/GpbNRTSUIggpojuMgJQ1+7b5cGdofHNL5CM+SLljjy3hYGYGnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU73Ezf2CgUNHJggMz0/Urf4RPYJkwHwYDVR0j
BBgwFoAUBtoZ9ChesE0DEHM/SsABB7czN60wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzcwYmU2Y2QtMjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0
NjJkLzEvMDZEQTE5RjQyODVFQjA0RDAzMTA3MzNGNEFDMDAxMDdCNzMzMzdBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0J0b1o5Q2hlc0UwREVITV9Tc0FCQjdj
ek42MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzcwYmU2Y2Qt
MjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0NjJkLzEvMzQzNTJlMzEzNTM2MmUzMTMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMjM2MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtnHcwDQYJKoZIhvcNAQELBQADggEBADa/oS+vGhGJ5eX++p0nhGw5dlmtAXOu
ttDhmXx49NqM2MFFOrxyFSuN8cXBDC++4BuJTjn/TTtFgoHhsjr63SyVaEU5vPw1
fL2MMvaZYybkLLkrYdNA/5Y+clFhJo281fb/as1/f/UVBOZpOPeNV96y9Cgi73Ff
TB+1RmT5+wYjVyh88KfUhO4x8iDvbTr6i9UE9ShUK5Lhwvg3CuvNnbZyRiBjnfjy
N0+RW4iZZ+9mhe/NItrjuJxzOFa1t9USIvkDVvDwkERO6vxS38qohy+NpPY3URZA
0UjWVtgFWd7odKPiRKvchU3kxTLpjvbF59XN4SFJBCFmjBKb3yVLIUQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org