Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20383334.roa
File: 34352e3132382e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: j0aI08cdox4t/KI9AxawDEqY9wjH/mSqm07JM9k3rQw=
Subject key identifier: 8E:1B:A4:9A:6F:C5:2B:D2:F4:B8:89:BF:FA:89:65:36:B9:90:9C:E7
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 6DACFCB83E559603067AE82BE5B589A507090B68
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20383334.roa
Signing time: Sat 05 Aug 2023 18:00:05 +0000
ROA not before: Sat 05 Aug 2023 17:55:05 +0000
ROA not after: Sat 03 Aug 2024 18:00:05 +0000
asID: 834
IP address blocks: 45.128.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ac:fc:b8:3e:55:96:03:06:7a:e8:2b:e5:b5:89:a5:07:09:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 5 17:55:05 2023 GMT
Not After : Aug 3 18:00:05 2024 GMT
Subject: CN=8E1BA49A6FC52BD2F4B889BFFA896536B9909CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:78:92:81:a6:f1:00:d0:2d:dc:cb:2c:a7:
08:b2:5a:8f:37:77:be:60:7e:48:d6:b7:ca:b9:63:
de:00:38:73:23:71:ed:41:0f:a2:21:5d:82:ab:04:
81:6d:1a:7f:ef:10:4d:1a:5f:c6:2f:3e:7a:36:a8:
44:eb:ba:91:b0:8c:c1:18:df:b4:dd:a8:7c:65:3d:
f3:85:05:44:dc:26:bc:a9:38:c6:0d:aa:bb:9e:db:
30:96:56:75:39:06:22:98:63:0a:b8:8d:55:13:ee:
8a:84:40:6b:1c:5b:bd:92:93:ec:74:83:e5:52:bf:
bd:e6:eb:95:d2:1b:4c:76:8b:5b:16:a7:48:f7:b1:
c5:f9:75:08:ad:ec:d3:40:7e:46:68:f5:fb:be:cb:
90:ac:f4:22:81:aa:eb:f7:2e:85:eb:95:4c:f9:5f:
3f:dc:18:e7:d0:67:5d:8d:17:0b:9e:30:cc:88:c4:
4b:4d:9d:20:fd:93:64:be:66:9a:2c:7b:50:ca:0b:
9c:75:15:92:29:e8:35:cb:5e:2b:69:38:6e:75:ab:
06:f7:3b:1b:64:af:f6:6a:fb:d6:00:cd:e3:61:9f:
d6:0f:6f:e9:06:9d:8b:bf:57:b0:3e:cf:0d:40:1b:
c1:a2:7c:ed:6a:f4:85:7a:d5:3e:65:19:3f:16:b6:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:A4:9A:6F:C5:2B:D2:F4:B8:89:BF:FA:89:65:36:B9:90:9C:E7
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3132382e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:f9:1b:ec:f6:e2:bf:34:a2:16:6f:d2:b7:01:a7:e4:1c:
fa:87:79:fd:0c:61:1a:14:4d:58:bb:a5:ec:e0:74:41:3f:85:
7d:45:47:0c:f1:c6:0d:44:28:25:b4:e2:02:9c:b7:73:6e:5c:
10:24:00:2a:4d:ba:a2:cd:7f:82:4a:b7:59:7e:61:d7:ca:97:
08:cc:8b:c2:6c:94:cb:fa:62:5f:ac:b7:6a:0d:74:ae:b9:50:
91:94:08:9d:ab:66:f9:c1:b1:a4:1d:4f:f4:45:93:59:5c:46:
76:f4:ef:f8:b6:ad:77:94:d4:f2:e5:e1:98:1c:61:56:51:3f:
d3:a4:94:92:78:a0:5b:cc:0c:4b:5f:08:04:c8:14:70:6e:99:
f5:10:77:b4:b0:aa:94:f8:2d:42:21:38:26:b3:19:da:26:3a:
92:34:c2:7a:95:c4:73:82:bc:4c:56:43:a5:48:98:2c:52:63:
81:9f:1f:1e:7c:27:1c:22:81:9b:17:dd:f8:cc:42:cf:c6:79:
49:b1:04:c2:8f:75:8d:cf:ee:4b:58:01:60:1c:d4:86:bf:d4:
ce:16:c1:3f:1f:f0:9b:6b:94:3d:2e:d5:2b:f3:53:32:de:50:
45:87:34:b4:de:85:cb:fc:29:f7:a8:cf:37:c0:c8:4e:63:25:
d9:20:d1:4d
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 1 21:25:15 2023 by rpki-client on console-ams.rpki-client.org