Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20383334.roa
File: 34352e3132382e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8CJL0tgQ/I479GZJZEIb4fFMnQOuuhztCkK8plHSF00=
Subject key identifier: 68:00:28:45:F2:A6:E1:D3:6D:16:98:A0:69:5E:71:33:1F:CF:3C:E3
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4ABB74C744BDFEB435F92ACD4255FF35D1D1203E
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20383334.roa
Signing time: Sat 05 Aug 2023 00:00:03 +0000
ROA not before: Fri 04 Aug 2023 23:55:03 +0000
ROA not after: Sat 03 Aug 2024 00:00:03 +0000
asID: 834
IP address blocks: 45.128.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bb:74:c7:44:bd:fe:b4:35:f9:2a:cd:42:55:ff:35:d1:d1:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 4 23:55:03 2023 GMT
Not After : Aug 3 00:00:03 2024 GMT
Subject: CN=68002845F2A6E1D36D1698A0695E71331FCF3CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:3b:c9:f1:23:f9:27:2c:5c:58:49:b4:b9:
1d:bf:29:d8:c7:2a:f7:ee:a0:2f:58:53:64:77:91:
74:cb:31:c6:bc:e2:9b:22:58:b5:c2:69:b2:14:27:
4f:f5:8d:de:d8:ed:20:17:48:88:c4:cd:7a:40:8e:
6b:72:57:b3:bc:58:b3:93:fc:c1:b5:e4:38:f1:42:
df:f6:25:85:6d:70:0f:b1:40:0e:4d:e9:fe:3d:55:
bf:09:99:82:42:6c:21:6f:e3:69:60:fe:77:1e:af:
d8:3d:d2:4e:91:cd:02:4d:68:ca:39:49:dc:55:b4:
cc:32:1d:0e:5c:23:23:81:36:0d:da:c4:bd:ec:63:
38:76:6d:23:61:2f:ef:e1:6b:4d:ed:87:94:d6:4c:
7b:43:42:9c:96:8c:48:62:f1:77:28:6c:06:bf:f8:
41:4a:e5:2d:92:66:bf:e0:77:20:bb:1e:f5:99:21:
e9:e4:5e:3b:84:0e:ac:a2:46:c6:55:49:b6:f9:37:
93:9b:36:92:f7:1d:85:47:52:3c:64:1a:ee:92:80:
cd:ba:34:5c:d8:00:5f:14:6e:d0:27:90:8d:bb:3c:
5d:6d:0f:b7:e6:39:8b:2b:c7:2a:2a:66:e4:8f:2c:
1b:dc:bb:1e:46:a5:f9:5b:0a:a9:6b:b4:43:5a:a4:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:28:45:F2:A6:E1:D3:6D:16:98:A0:69:5E:71:33:1F:CF:3C:E3
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/24
Signature Algorithm: sha256WithRSAEncryption
80:df:31:45:f5:48:1b:c6:9b:4e:07:7a:ed:28:2d:94:43:85:
22:07:d1:b5:25:79:db:8b:ba:fb:0e:c4:5f:4c:0c:39:e1:aa:
d6:d0:ec:18:82:8e:b6:a0:91:ae:51:41:8f:50:30:6b:b3:d6:
74:2a:6c:10:5d:0d:4f:09:f5:70:c1:d8:f3:9b:d4:21:e0:2d:
a9:2e:95:6e:37:fc:28:0c:88:cf:83:cf:6f:cc:80:d0:79:e3:
a5:b5:91:32:cb:e9:8b:3b:a7:af:7f:1f:2a:df:c7:1c:1f:b2:
31:bc:ee:93:1c:19:15:3d:c9:ca:c8:4f:30:3e:ef:7d:77:c6:
3c:4c:6a:b1:54:52:c9:9a:e0:ee:e8:2e:b7:a8:21:b9:9e:2c:
37:1e:b1:0f:f6:e4:7d:b0:49:f4:ec:8b:46:a2:c2:87:53:cd:
ee:de:8f:7d:25:e6:f6:16:a5:34:89:8e:2c:a7:d3:59:8f:b1:
86:70:d8:52:be:35:aa:bb:ae:4c:c4:89:4e:a8:eb:22:0a:b6:
78:20:78:6a:2e:07:50:fe:a7:fa:67:b1:73:15:4c:33:ac:6b:
0b:48:68:39:16:d5:9f:b1:9e:2c:0a:59:00:3e:bc:c1:00:b4:
a8:cc:05:2a:bd:29:18:81:dc:c6:48:e5:f5:6c:e8:13:14:11:
e6:78:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 21:25:15 2023 by rpki-client on console-ams.rpki-client.org