Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20383334.roa
File: 34352e3135362e3131392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0k5kCLAXeqsR1VEUaZAE/x4fjuHbHcxtPIagT8Jvby4=
Subject key identifier: 14:38:8E:12:E5:47:C4:C6:41:BC:60:CB:ED:D3:79:12:76:F6:BB:89
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 363B5C7FDAE8DD608E36E277AF4B6C03D3BA67E3
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Jul 2023 00:00:10 +0000
ROA not before: Tue 11 Jul 2023 23:55:10 +0000
ROA not after: Wed 10 Jul 2024 00:00:10 +0000
asID: 834
IP address blocks: 45.156.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3b:5c:7f:da:e8:dd:60:8e:36:e2:77:af:4b:6c:03:d3:ba:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Jul 11 23:55:10 2023 GMT
Not After : Jul 10 00:00:10 2024 GMT
Subject: CN=14388E12E547C4C641BC60CBEDD3791276F6BB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:fc:41:5a:eb:f4:a5:fc:df:1d:0b:c4:30:
d6:48:8d:a9:f0:8b:d4:3b:d3:bb:38:fd:e4:22:aa:
07:df:7a:ff:42:78:07:ed:b6:54:6a:bb:e1:f6:20:
43:96:20:1b:c1:74:0b:54:f8:8c:2f:aa:1b:95:db:
ca:ff:12:8d:88:dd:59:fb:1c:89:b5:7f:20:27:76:
fb:8d:a4:33:1a:ea:b4:01:64:a1:f7:fe:2b:6f:fd:
38:63:19:7b:55:93:1f:61:35:fb:47:f4:d2:34:7b:
c2:37:fa:25:6f:32:6f:49:90:67:6e:c4:eb:b3:4c:
59:35:e9:15:61:00:18:18:dd:65:8f:e9:08:58:ec:
88:7e:3c:35:bf:70:7d:eb:d3:b3:e0:d2:e6:61:d9:
66:57:ef:45:2b:74:df:a1:26:f5:3c:95:a8:f6:48:
10:95:05:41:b1:f4:34:06:bc:3f:31:98:29:4f:ec:
d9:10:19:50:07:82:ae:f3:e1:2b:1c:99:74:1c:c9:
25:51:bb:62:c7:a1:ed:34:a8:b9:36:23:1f:dd:05:
6a:52:ce:cf:72:ab:ee:10:c0:b3:98:27:5c:dc:66:
70:3f:25:a3:f4:83:98:96:ac:e7:d0:14:75:9b:f1:
c3:95:a2:8b:00:4a:e8:e3:04:bc:d4:97:cb:b7:94:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:8E:12:E5:47:C4:C6:41:BC:60:CB:ED:D3:79:12:76:F6:BB:89
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.119.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b8:ba:7f:70:dd:92:db:9f:d6:09:7b:19:fb:d1:dc:d9:c6:
e1:b5:1e:6e:b2:2b:c4:6b:cb:9f:e8:73:32:3e:4d:31:e3:c6:
1c:69:5a:77:8b:3d:50:f2:15:cc:c8:9c:8b:53:47:f7:b0:6e:
77:ec:f0:1f:e6:d0:b3:9f:c7:fe:ff:09:d0:5f:4e:ad:d4:d6:
27:0e:fa:92:60:21:94:eb:8d:04:d5:c5:8f:48:85:7a:93:d0:
40:c4:a5:d2:f0:0c:f1:35:da:26:05:17:c6:b4:07:03:9e:14:
02:06:68:71:91:41:d6:94:2e:9e:b2:f6:a7:93:ad:ee:9c:0d:
b6:82:a8:54:7d:49:72:35:af:8d:e2:ca:db:10:7e:05:27:f7:
c0:9b:c5:d1:d6:84:4d:66:17:49:7d:75:ab:19:df:01:a2:14:
d8:91:59:bb:46:96:ed:f1:ed:06:5b:eb:c2:54:65:ee:54:df:
5e:6e:c3:01:8d:c7:73:2b:8b:3b:93:94:3e:4d:10:1e:11:c4:
f0:5a:0a:5e:fb:bf:e9:6b:c6:74:3b:21:5b:b0:d9:ff:72:98:
77:29:c8:62:f4:5b:36:4d:9e:e9:59:cc:ad:57:f7:97:83:03:
3c:73:48:ed:df:07:96:06:94:1f:0d:31:c4:dc:d1:04:85:c3:
6b:a2:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:56 2023 by rpki-client on console-fra.rpki-client.org