Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
File: 34352e3133322e3231362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: /RDyZm04jsvo1hMKNPBJSX7BntuV46Bk79X8iZ8x0vY=
Subject key identifier: 32:3A:EA:52:D8:FB:51:7F:5A:79:0F:E1:A9:40:0F:81:CD:88:F2:0B
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 7CE70DFF43D4D88E03952D185BF960F485F0AC90
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
Signing time: Wed 05 Apr 2023 11:55:31 +0000
ROA not before: Wed 05 Apr 2023 11:50:31 +0000
ROA not after: Wed 03 Apr 2024 11:55:31 +0000
asID: 7018
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e7:0d:ff:43:d4:d8:8e:03:95:2d:18:5b:f9:60:f4:85:f0:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:31 2023 GMT
Not After : Apr 3 11:55:31 2024 GMT
Subject: CN=323AEA52D8FB517F5A790FE1A9400F81CD88F20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:ac:75:ad:bb:e5:13:36:0e:ff:17:aa:69:
75:4c:98:77:47:40:13:4a:75:5d:35:7e:27:8b:06:
3e:54:bc:31:06:fa:33:6e:4e:64:ea:58:dc:69:d6:
e2:90:8c:ec:4c:1b:1e:df:89:54:c1:de:7d:ba:d3:
6d:4e:fd:cd:d0:57:1b:b7:9d:62:de:b5:3f:92:23:
22:30:c7:13:d8:9f:7f:3c:9e:d1:8e:38:8d:c5:ca:
09:e6:2a:b6:9f:0a:85:62:7e:32:9e:93:a8:89:54:
5f:37:36:66:8d:4a:41:35:3e:76:af:49:fc:70:ba:
53:6b:c2:41:14:57:fa:13:e0:4e:d2:b7:db:ec:c4:
86:b9:15:4c:e3:3c:9b:26:b3:a2:1c:1d:b2:ab:bc:
8c:af:1d:5b:69:38:ca:08:c3:11:25:95:f2:7e:a4:
6d:e4:54:29:c5:61:3f:76:b0:ba:e5:74:96:16:25:
6b:c1:c0:db:bf:25:6b:18:1b:0f:56:1d:cd:5b:d3:
58:42:19:a7:9a:f1:e4:47:8f:f5:34:4b:94:c7:81:
32:7e:ba:74:29:72:73:b1:f7:a2:73:8d:38:5d:ec:
ec:e0:2e:40:d3:42:66:b8:6c:af:24:0e:2b:fb:d7:
df:27:c6:7d:6c:36:a2:95:1b:2f:d2:99:6b:db:92:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:EA:52:D8:FB:51:7F:5A:79:0F:E1:A9:40:0F:81:CD:88:F2:0B
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:43:71:fd:06:ec:5f:ca:56:5c:1e:63:4e:29:fa:c0:1d:f7:
f4:fb:71:dd:2c:51:2c:58:d4:c0:90:a5:08:ac:23:20:c1:89:
da:4d:10:46:e5:88:15:f2:e6:38:b6:fa:f2:fb:46:a5:bc:1a:
df:2c:aa:df:86:1b:7e:1a:36:2f:29:91:61:4f:f8:3a:85:e3:
9d:5d:82:12:5f:1e:07:e1:84:4e:18:67:ef:df:46:84:3a:0a:
9f:fc:28:ae:71:88:0f:b3:28:eb:db:cd:bb:7d:93:da:b4:d9:
d0:41:f8:cd:07:b7:c8:1e:c4:31:ea:34:86:24:47:4c:1c:5a:
cf:65:3c:1c:b3:da:6f:3b:d3:9c:e3:66:2d:11:06:b0:38:4e:
d6:a1:eb:bc:8d:54:2a:30:40:0f:01:58:6b:bf:a4:23:5b:68:
e0:15:2a:5b:08:48:e7:4b:50:d8:a0:72:40:2d:0b:c3:73:87:
9b:98:3d:1f:78:1a:74:04:38:41:9c:0e:3b:ef:c0:2e:a8:69:
54:04:ed:21:8e:16:22:6e:80:21:9f:1a:10:0b:1e:76:a2:30:
68:9b:5e:d6:35:34:b8:7d:fb:b7:b3:90:14:d2:c1:77:f9:3a:
29:1c:61:c2:f1:8e:09:09:ff:90:04:92:55:af:df:0e:a6:d0:
65:da:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-fra.rpki-client.org