Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20383334.roa
File: 34352e3132382e31322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3PtJpeHdkeKWec4vMJDOha0N9C/+ITDHX/8Ra5SsSpI=
Subject key identifier: AC:F9:30:31:C2:40:BA:53:DB:72:A1:8A:FC:90:24:6F:C5:FE:CF:33
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 71C5B512EC2A04639E1D6D1895935364D625292F
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Jul 2023 16:00:06 +0000
ROA not before: Mon 03 Jul 2023 15:55:06 +0000
ROA not after: Mon 01 Jul 2024 16:00:06 +0000
asID: 834
IP address blocks: 45.128.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c5:b5:12:ec:2a:04:63:9e:1d:6d:18:95:93:53:64:d6:25:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 3 15:55:06 2023 GMT
Not After : Jul 1 16:00:06 2024 GMT
Subject: CN=ACF93031C240BA53DB72A18AFC90246FC5FECF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:cb:02:09:3a:ad:b3:6c:0b:83:a9:90:95:
16:2f:d9:53:7c:d8:3a:27:b6:b8:92:b6:43:42:f6:
96:84:53:54:61:08:61:c3:ba:30:bd:4a:af:67:f1:
7b:81:1a:b8:0f:10:e3:f6:24:f5:a8:62:fe:f9:cf:
83:9e:fc:98:97:e9:10:ba:70:f9:24:e3:8d:1f:a3:
56:b0:47:49:c0:d9:8d:81:72:d0:08:ee:54:99:c8:
bd:4f:29:17:ca:35:29:6b:81:92:f7:e5:5c:ec:a3:
79:2d:e2:ed:09:1b:3e:5c:e0:db:cb:62:ed:d6:bc:
d2:bc:01:82:ef:11:36:01:54:4d:80:1b:ee:07:0b:
83:f8:86:4c:2e:f1:51:01:a6:de:77:76:f7:fe:52:
ea:89:ca:0c:15:5c:66:35:a1:cc:1e:73:4c:b1:f6:
9b:92:d5:f9:9a:dd:fa:56:e4:f3:0f:bc:5b:8e:57:
8b:fc:e2:ff:ed:ff:3b:b7:11:76:9e:2f:fe:29:23:
0c:95:de:57:12:4f:d8:fe:62:06:84:cd:6d:bc:da:
9f:16:49:6c:31:46:13:2a:35:22:0d:ac:06:91:d0:
91:9a:b9:c1:70:f9:89:e5:89:2e:87:bc:18:0d:b2:
d6:bb:63:71:b3:6e:49:cf:e5:fd:9b:f5:7a:df:e9:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:30:31:C2:40:BA:53:DB:72:A1:8A:FC:90:24:6F:C5:FE:CF:33
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0d:ee:1a:a3:3f:98:48:16:e6:24:a2:dd:5a:09:ac:3a:97:
b5:22:56:2f:16:98:f0:b8:a6:1a:43:dc:36:f3:0f:1c:48:01:
df:1f:d6:44:89:8e:c7:46:f7:74:ac:4d:a6:e0:31:e2:15:fa:
78:96:78:5b:5c:aa:cf:29:24:bf:07:4b:15:93:01:63:fd:7b:
07:ab:7a:a4:3a:33:90:12:e7:e1:0c:8e:63:84:58:73:27:06:
49:52:d2:f6:dd:c8:13:a4:cb:df:34:6f:17:4e:c6:41:37:14:
48:f7:c2:c8:cc:96:f7:36:da:de:f9:49:ed:d4:87:c7:94:5a:
1e:00:06:64:02:d8:38:aa:84:bd:62:f3:30:3f:93:28:cf:61:
b9:ec:30:f1:f6:30:84:75:7a:1f:7a:38:99:2d:44:d3:fe:95:
c1:d8:8a:e4:07:bc:06:f9:46:f9:47:5f:4b:12:bb:c5:b5:62:
2b:26:33:98:77:db:ea:16:b1:b8:29:0c:04:a2:9f:c3:67:2f:
a9:cd:47:73:1f:e9:99:bf:96:10:e3:11:62:70:6f:ea:2c:fe:
6b:0b:9d:d6:89:89:8f:fb:ab:b1:03:c3:ba:f6:a4:56:cc:c0:
b0:36:cf:17:ec:d4:ae:05:d2:f9:4f:e9:b8:d2:a6:01:af:84:
44:c9:a3:04
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUccW1EuwqBGOeHW0YlZNTZNYlKS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA3MDMxNTU1MDZaFw0yNDA3MDExNjAwMDZaMDMxMTAvBgNV
BAMTKEFDRjkzMDMxQzI0MEJBNTNEQjcyQTE4QUZDOTAyNDZGQzVGRUNGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi98sCCTqts2wLg6mQlRYv2VN8
2DontriStkNC9paEU1RhCGHDujC9Sq9n8XuBGrgPEOP2JPWoYv75z4Oe/JiX6RC6
cPkk440fo1awR0nA2Y2BctAI7lSZyL1PKRfKNSlrgZL35Vzso3kt4u0JGz5c4NvL
Yu3WvNK8AYLvETYBVE2AG+4HC4P4hkwu8VEBpt53dvf+UuqJygwVXGY1ocwec0yx
9puS1fma3fpW5PMPvFuOV4v84v/t/zu3EXaeL/4pIwyV3lcST9j+YgaEzW282p8W
SWwxRhMqNSINrAaR0JGaucFw+YnliS6HvBgNsta7Y3GzbknP5f2b9Xrf6T9/AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUrPkwMcJAulPbcqGK/JAkb8X+zzMwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzMjM4MmUzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYAMMA0G
CSqGSIb3DQEBCwUAA4IBAQB5De4aoz+YSBbmJKLdWgmsOpe1IlYvFpjwuKYaQ9w2
8w8cSAHfH9ZEiY7HRvd0rE2m4DHiFfp4lnhbXKrPKSS/B0sVkwFj/XsHq3qkOjOQ
EufhDI5jhFhzJwZJUtL23cgTpMvfNG8XTsZBNxRI98LIzJb3Ntre+Unt1IfHlFoe
AAZkAtg4qoS9YvMwP5Moz2G57DDx9jCEdXofejiZLUTT/pXB2IrkB7wG+Ub5R19L
ErvFtWIrJjOYd9vqFrG4KQwEop/DZy+pzUdzH+mZv5YQ4xFicG/qLP5rC53WiYmP
+6uxA8O69qRWzMCwNs8X7NSuBdL5T+m40qYBr4REyaME
-----END CERTIFICATE-----
Generated at Tue Aug 29 14:35:47 2023 by rpki-client on console-ams.rpki-client.org