Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
File: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: HcnzKGDARXxFGmww2ds3PdR4snD/ayLp1/xrjzQSYk4=
Subject key identifier: 50:47:13:D9:35:30:7A:B3:00:68:7E:07:6E:8F:71:9B:B3:5D:4C:96
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 5AF46B1D57182D3957B5B46857AD8929200222DE
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
Signing time: Wed 31 May 2023 00:00:14 +0000
ROA not before: Tue 30 May 2023 23:55:14 +0000
ROA not after: Wed 29 May 2024 00:00:14 +0000
asID: 834
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f4:6b:1d:57:18:2d:39:57:b5:b4:68:57:ad:89:29:20:02:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: May 30 23:55:14 2023 GMT
Not After : May 29 00:00:14 2024 GMT
Subject: CN=504713D935307AB300687E076E8F719BB35D4C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:34:43:7a:1e:e0:72:48:03:6f:4e:df:f1:
08:3d:ae:0c:93:ea:95:86:fc:71:a3:4c:29:ec:4b:
28:33:02:b0:36:59:a7:a1:11:34:c9:d6:14:6e:d8:
e8:4a:1b:ae:58:67:da:6c:eb:8f:b3:ca:fb:60:32:
3b:48:c3:4f:ca:88:bb:9b:6a:0b:e6:60:cb:1f:cf:
34:5b:bc:ac:c3:d6:84:66:ae:0e:f1:2f:26:d4:0e:
37:3a:38:96:46:df:f5:b5:be:66:38:fa:09:88:b5:
10:7b:4a:96:cc:1d:13:8d:22:e7:17:de:17:38:fe:
0f:b7:00:cc:fd:3a:28:32:7c:d2:66:e1:64:fe:a1:
aa:46:fb:39:f4:d3:89:9f:0a:1b:c6:db:e0:d6:84:
12:8f:22:7d:48:82:ca:f8:f0:e9:90:40:7d:d6:c1:
c2:d4:9e:d3:3e:d0:93:5e:e0:b1:10:61:01:29:1b:
25:07:da:38:78:a3:23:9f:bd:99:56:dd:bc:74:af:
c4:f4:cf:73:ac:60:f4:39:94:f1:b6:82:7a:01:9b:
46:fa:1a:38:8e:67:f0:ef:c1:4a:77:6f:66:93:fb:
f5:6b:1a:0c:cc:ba:ec:a7:da:96:51:b5:21:c1:f0:
2a:80:01:23:b0:dc:be:37:7e:47:f1:5f:f5:e8:bb:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:13:D9:35:30:7A:B3:00:68:7E:07:6E:8F:71:9B:B3:5D:4C:96
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:c5:0e:cc:18:5a:60:ec:31:19:70:78:10:9a:7f:82:f8:b0:
c8:f0:90:7f:2e:65:64:82:36:36:79:64:3a:93:29:4f:56:ac:
04:0f:09:1f:ec:2f:55:2c:47:77:f7:d0:32:60:26:49:d8:19:
24:d3:47:1a:32:1b:94:72:b8:01:ac:1a:36:6c:bd:07:b8:5a:
c1:ab:71:a8:29:db:48:41:e1:1f:f4:57:1c:5a:06:c4:8b:13:
f7:45:da:5c:58:c1:50:24:78:a5:3f:b5:2d:d2:bf:6c:e6:cc:
37:0b:0a:47:4a:03:24:ab:7d:fd:51:fa:ab:69:aa:f8:a7:50:
9b:54:9b:b4:28:1d:28:cd:82:11:e4:17:f7:1c:85:cd:c3:e6:
4c:8b:79:41:d6:b2:30:fa:20:d5:04:91:0a:e2:68:ad:e8:a0:
3b:64:d4:fd:87:62:30:b0:03:7d:a4:e4:0a:71:e2:00:8e:29:
ee:c1:a0:82:4a:d8:e1:4b:3b:03:34:60:68:b9:4f:3f:af:b5:
51:08:8c:67:64:f6:f7:50:38:d3:71:c0:9b:84:d5:90:e7:d4:
54:87:fe:e3:82:5c:61:2c:c2:4e:89:90:db:bf:03:91:d5:e4:
ac:f2:07:8f:e9:8d:d4:88:6d:e4:45:f5:57:d9:2c:72:af:8a:
b9:b2:93:49
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUWvRrHVcYLTlXtbRoV62JKSACIt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA1MzAyMzU1MTRaFw0yNDA1MjkwMDAwMTRaMDMxMTAvBgNV
BAMTKDUwNDcxM0Q5MzUzMDdBQjMwMDY4N0UwNzZFOEY3MTlCQjM1RDRDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBDRDeh7gckgDb07f8Qg9rgyT
6pWG/HGjTCnsSygzArA2WaehETTJ1hRu2OhKG65YZ9ps64+zyvtgMjtIw0/KiLub
agvmYMsfzzRbvKzD1oRmrg7xLybUDjc6OJZG3/W1vmY4+gmItRB7SpbMHRONIucX
3hc4/g+3AMz9OigyfNJm4WT+oapG+zn004mfChvG2+DWhBKPIn1Igsr48OmQQH3W
wcLUntM+0JNe4LEQYQEpGyUH2jh4oyOfvZlW3bx0r8T0z3OsYPQ5lPG2gnoBm0b6
GjiOZ/DvwUp3b2aT+/VrGgzMuuyn2pZRtSHB8CqAASOw3L43fkfxX/Xou0sxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUUEcT2TUwerMAaH4Hbo9xm7NdTJYwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMjM4MmUzMTMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYAMMA0G
CSqGSIb3DQEBCwUAA4IBAQAMxQ7MGFpg7DEZcHgQmn+C+LDI8JB/LmVkgjY2eWQ6
kylPVqwEDwkf7C9VLEd399AyYCZJ2Bkk00caMhuUcrgBrBo2bL0HuFrBq3GoKdtI
QeEf9FccWgbEixP3RdpcWMFQJHilP7Ut0r9s5sw3CwpHSgMkq339Ufqraar4p1Cb
VJu0KB0ozYIR5Bf3HIXNw+ZMi3lB1rIw+iDVBJEK4mit6KA7ZNT9h2IwsAN9pOQK
ceIAjinuwaCCStjhSzsDNGBouU8/r7VRCIxnZPb3UDjTccCbhNWQ59RUh/7jglxh
LMJOiZDbvwOR1eSs8geP6Y3UiG3kRfVX2Sxyr4q5spNJ
-----END CERTIFICATE-----
Generated at Tue Aug 29 14:49:36 2023 by rpki-client on console-fra.rpki-client.org