Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231362e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: srOdcKKFDgbmpfyNmy/5nCBzxUk0ywymWvSVdSfyyx4=
Subject key identifier: E0:14:12:25:3A:97:74:4B:7D:CA:48:70:E1:A0:75:A8:7E:B2:FA:1A
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 790C1CCE0A4790F61F2B3CBF62740FC21AA81E57
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:31 +0000
ROA not before: Wed 05 Apr 2023 11:50:31 +0000
ROA not after: Wed 03 Apr 2024 11:55:31 +0000
asID: 56913
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0c:1c:ce:0a:47:90:f6:1f:2b:3c:bf:62:74:0f:c2:1a:a8:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:31 2023 GMT
Not After : Apr 3 11:55:31 2024 GMT
Subject: CN=E01412253A97744B7DCA4870E1A075A87EB2FA1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:e5:fc:85:b6:52:d0:5c:3d:78:12:f6:46:
69:60:26:ad:d0:b2:82:44:91:28:e0:1c:f3:7d:e2:
76:47:e4:72:84:da:52:73:23:76:8e:c3:8d:19:50:
69:35:9d:8c:9d:ae:16:82:3d:5f:1c:a2:76:35:45:
d0:e9:fd:6b:46:57:e9:52:07:14:7f:0f:57:99:3d:
96:f0:32:aa:5a:61:a8:64:9b:02:15:e6:e5:25:4c:
c6:a2:e2:58:56:48:27:8e:06:c4:67:c3:61:37:1d:
81:35:a5:73:7c:47:b7:dd:6e:04:08:88:01:eb:4a:
ba:21:9d:5f:84:8b:e5:8d:1d:56:a7:3f:75:f2:02:
0e:03:04:ed:9b:7c:83:1f:e1:ca:89:87:13:c3:0d:
b3:51:e5:ee:4c:e2:8f:c6:28:52:09:49:85:60:12:
da:82:17:0a:ec:c2:2c:f4:61:2c:ef:ee:68:f3:12:
96:59:af:70:5e:da:16:4f:d7:a2:84:27:fd:a3:22:
e4:50:82:09:e8:da:ac:94:59:2e:58:ad:9b:db:92:
af:63:55:ef:3e:a3:3b:45:3d:2b:84:e6:c7:d0:8b:
b1:64:b3:1d:6c:66:f3:47:a3:f0:df:8d:25:06:e7:
9c:80:33:5c:d7:a6:4e:ad:1c:4a:83:3d:e1:53:52:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:12:25:3A:97:74:4B:7D:CA:48:70:E1:A0:75:A8:7E:B2:FA:1A
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b4:f6:76:78:ba:94:48:c1:08:a9:ee:39:08:0e:e6:80:95:
e8:3d:92:73:45:57:d3:45:87:c7:c9:ea:d5:83:fd:c6:44:fd:
15:97:7e:83:bd:c9:bd:94:94:25:e1:00:ea:49:b5:92:54:1d:
17:f5:67:8e:22:a7:8e:5a:30:5c:d5:c0:a3:d5:55:63:f4:29:
15:2b:ac:3d:ca:0c:26:c8:b5:85:c9:ca:fe:4d:1e:69:fc:aa:
d5:2c:47:48:58:02:d8:9e:1f:66:fe:68:5a:a1:b4:8e:f4:ce:
f3:74:52:a5:d5:45:2a:ca:c4:c1:c4:aa:f1:22:05:87:8c:60:
41:5a:3a:b1:02:6b:d2:0f:25:d8:01:f1:2e:2a:59:4b:62:10:
83:21:d2:8c:84:92:89:33:a8:f9:98:7e:29:27:b8:93:66:e7:
f7:45:4f:ea:24:cf:65:1a:8c:ac:d7:c9:55:22:1a:f4:92:dc:
e6:b1:22:d0:86:12:c3:8f:54:27:c8:7c:82:fe:80:0b:fb:a2:
94:94:60:da:08:8c:2d:e9:8b:0d:16:25:3b:d6:49:56:b4:78:
17:cf:b4:d5:32:81:4c:0d:c6:4d:20:e5:1c:93:af:d0:74:1f:
87:61:a7:a4:c1:80:6e:af:64:68:9b:81:bf:68:7b:55:8a:e0:
39:7b:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org