Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: xLq8gzqh+GS9swIIgbWrSLxOf0jnNyBGdB4+NH5FDxo=
Subject key identifier: C7:EF:AA:28:C5:17:1A:92:A1:6F:7D:21:50:37:38:D8:41:A9:44:27
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3A0A6A7A9E6446F33782E40C4D8D225152DDB5A7
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:48 +0000
ROA not before: Mon 23 Oct 2023 09:36:48 +0000
ROA not after: Mon 21 Oct 2024 09:41:48 +0000
asID: 834
IP address blocks: 45.65.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Oct 2023 18:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0a:6a:7a:9e:64:46:f3:37:82:e4:0c:4d:8d:22:51:52:dd:b5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:48 2023 GMT
Not After : Oct 21 09:41:48 2024 GMT
Subject: CN=C7EFAA28C5171A92A16F7D21503738D841A94427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:7c:9b:f0:b2:94:36:cb:be:22:ad:65:59:
ef:42:2f:c9:b4:1a:15:ee:a3:9a:5f:f1:2f:55:13:
62:6c:7f:62:66:46:8e:69:c8:50:01:a2:d6:f4:7d:
fd:37:7f:f4:46:b9:a9:12:4b:11:d8:9f:7c:29:95:
e3:be:ea:d5:21:67:b9:0d:cd:2d:41:20:62:e8:35:
c1:bd:4a:f7:41:cd:3f:da:d2:43:0e:3a:a1:17:f8:
ea:b3:23:15:dc:4d:5f:34:e5:3c:8e:07:51:bb:c9:
9a:be:a3:ab:e3:57:83:d7:42:69:51:bc:01:4e:f1:
96:11:88:b0:ff:97:0f:37:63:a3:c0:45:79:42:25:
b9:1f:59:01:dc:22:fc:5a:76:75:ff:3d:11:35:bc:
9f:aa:e9:1e:d0:86:7b:93:2d:32:05:99:d1:ea:ed:
51:9f:5f:c4:5f:7b:73:42:15:d7:6c:14:05:16:7e:
8e:8f:bc:f6:49:99:2c:86:25:1a:20:1b:e2:b8:3b:
23:de:d2:a2:97:c3:76:87:fe:aa:a8:0f:2a:b0:01:
93:ef:13:07:24:44:a4:30:41:70:7c:97:d2:b4:7d:
31:61:31:92:40:9e:ff:a6:c1:1b:60:44:d5:6b:b1:
1b:33:a5:7c:d0:e7:2f:a9:2c:52:77:f1:2b:22:26:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:AA:28:C5:17:1A:92:A1:6F:7D:21:50:37:38:D8:41:A9:44:27
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/23
Signature Algorithm: sha256WithRSAEncryption
14:9b:b6:73:cd:d4:02:31:e3:a8:17:d9:7b:2a:5e:d2:7b:d8:
8d:a9:e2:d3:01:61:7a:08:98:2a:36:75:f3:8a:80:f3:9b:5d:
cf:84:5c:1c:9e:50:bb:2c:bb:86:f6:9c:19:51:0f:22:ba:dd:
ac:02:d0:2d:52:01:6e:3a:b7:83:4f:cd:ac:4b:b3:cb:a4:3d:
b8:b5:f2:dd:e9:22:89:5f:a3:50:2d:95:ac:15:16:fb:fb:aa:
fb:1d:67:d2:c4:e8:46:36:c0:b9:8e:bb:df:b0:9d:1b:3e:5f:
eb:7d:bd:d4:b3:32:7d:1a:e5:49:e4:78:de:a3:7e:98:35:bb:
60:de:6c:36:d2:fa:bb:b7:13:21:ba:64:75:72:de:a0:40:70:
dd:49:82:2b:35:e7:24:5e:e1:97:63:71:3d:06:8c:bf:d8:91:
9f:64:1d:34:f7:10:c6:9f:a9:35:47:76:78:4d:62:8f:26:74:
b5:90:a0:68:80:79:19:e4:a7:c8:b8:c4:94:85:05:7d:39:0b:
65:2a:08:c3:3a:48:82:30:f6:dd:85:67:3f:7e:6c:2d:07:e5:
4b:3a:52:95:d9:1d:9c:7a:2d:5b:9f:0c:d3:d6:48:0d:00:6f:
85:8d:35:c4:e8:90:a9:bc:6a:a0:c8:e2:df:30:1d:ba:61:e0:
53:13:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org