Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e203631313338.roa
File: 34352e3132382e31332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: wdYYPaHF0+p0wdowZW2WhFejaSG8tnCTcwwpF2ucDAs=
Subject key identifier: 49:97:5C:E1:80:96:FD:53:A0:84:B0:4B:D6:E2:E2:17:2F:B2:8D:9F
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 6582FF95238FE19AC1F2A87C5B8C6D5C45691B39
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e203631313338.roa
Signing time: Thu 01 Jun 2023 15:43:48 +0000
ROA not before: Thu 01 Jun 2023 15:38:48 +0000
ROA not after: Thu 30 May 2024 15:43:48 +0000
asID: 61138
IP address blocks: 45.128.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:82:ff:95:23:8f:e1:9a:c1:f2:a8:7c:5b:8c:6d:5c:45:69:1b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 1 15:38:48 2023 GMT
Not After : May 30 15:43:48 2024 GMT
Subject: CN=49975CE18096FD53A084B04BD6E2E2172FB28D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:f5:ef:d6:cb:c8:11:28:7d:33:d8:cc:f2:
15:e4:35:8b:a2:5b:b0:d9:fb:65:aa:86:d4:40:16:
f1:4b:8f:75:f4:49:e8:7c:91:3b:3a:4c:70:19:28:
07:1b:ad:c4:7d:3a:33:f5:e9:da:f2:91:10:9a:83:
a2:7f:36:6e:3b:b2:be:e8:9d:aa:16:8c:9d:9c:14:
cd:73:7a:26:8b:9c:26:82:a8:3d:1d:b3:d3:4f:c4:
9b:6c:a0:0f:d3:f6:15:38:0c:97:a9:61:d0:75:b3:
cd:16:85:43:54:32:1f:13:15:25:f3:54:25:2a:12:
e7:0d:bc:1e:c8:3a:43:14:49:c1:a5:16:b5:88:22:
7d:ec:5c:f9:a7:2a:0a:2f:09:cb:3d:a8:7b:6d:e6:
a1:d3:49:49:95:d0:fe:6b:65:f2:6d:13:bb:e3:dd:
bf:53:01:a4:7a:7c:95:b1:fc:85:5d:07:17:06:4b:
04:03:fd:e4:d1:b6:d2:ba:48:b7:24:b3:86:c6:80:
7d:0f:a8:6f:08:c0:0f:02:d1:e2:b3:79:d5:13:86:
ea:67:c5:06:32:1f:2d:9d:c9:12:4f:64:72:c9:d0:
fd:0f:77:e7:48:3d:f5:4b:8c:69:65:b2:5f:14:ef:
db:ec:da:ad:52:3a:97:8f:93:4c:a9:f3:47:f4:b3:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:5C:E1:80:96:FD:53:A0:84:B0:4B:D6:E2:E2:17:2F:B2:8D:9F
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31332e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.13.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1f:b5:33:67:6d:52:f2:d7:3a:39:d6:15:ff:6c:56:15:77:
ba:e2:bd:40:6e:62:75:cd:a2:7f:38:8f:94:45:da:49:91:83:
35:84:12:97:78:7f:a1:87:ad:6d:36:eb:f0:17:2f:9a:f0:bb:
0f:19:a2:b9:c1:10:c6:27:43:ac:62:a8:c3:f5:47:a6:b2:11:
e4:25:0c:51:35:64:94:a8:cc:a9:ac:85:78:4c:42:ff:1c:81:
d5:e5:55:93:ba:02:f7:55:03:e2:b0:ed:e5:0e:12:6e:13:3c:
72:d9:75:c8:3e:ea:d7:2e:bf:84:67:52:ec:10:d5:0c:58:42:
17:ea:8b:f9:82:a6:b3:18:0c:e2:c4:26:b0:1d:70:87:62:ea:
b1:13:2c:ae:e2:0d:bd:c4:fe:6c:65:72:1f:9f:9d:62:72:e9:
c3:cd:7c:64:56:e6:d2:1d:e5:89:a7:3b:fb:d6:74:8f:6c:6a:
ff:5c:dc:b1:42:30:58:24:b1:38:06:aa:c2:f8:ca:11:11:4c:
57:73:b0:2c:47:a8:fa:10:5f:55:6b:7b:79:a4:a9:13:db:36:
e5:40:14:c4:ad:f1:4b:96:4c:80:f5:8f:21:b6:c8:3a:57:2f:
47:b9:f6:12:b5:d4:9b:29:e4:0d:1e:3a:40:6a:14:55:53:52:
d5:0d:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org