Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
File: 34352e3133322e3231382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: M/VhjrKUXoyOJ9hA9gpXiViRcaxSJx8u32hDZ7H9+OA=
Subject key identifier: 5A:13:9C:9D:70:F5:65:9C:C1:B1:C1:CA:8A:4D:2C:AF:BA:56:C5:74
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4816DC8846075A384FC6BBF875A9490DA9FFF1FB
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
Signing time: Wed 05 Apr 2023 11:55:32 +0000
ROA not before: Wed 05 Apr 2023 11:50:32 +0000
ROA not after: Wed 03 Apr 2024 11:55:32 +0000
asID: 7018
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:16:dc:88:46:07:5a:38:4f:c6:bb:f8:75:a9:49:0d:a9:ff:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:32 2023 GMT
Not After : Apr 3 11:55:32 2024 GMT
Subject: CN=5A139C9D70F5659CC1B1C1CA8A4D2CAFBA56C574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:c2:36:e0:f3:d4:49:19:b4:be:b1:77:c2:
07:f6:b1:8a:ea:bb:44:e1:ae:4f:68:df:90:dc:bb:
7b:6b:06:75:b1:6d:ff:b4:d2:a1:9c:cb:af:0e:04:
47:a0:c0:33:e2:4f:60:80:2d:b5:6b:86:bc:7f:46:
11:2e:d4:2e:9e:bf:1d:d7:27:73:db:74:d8:71:a3:
b6:46:77:5e:08:df:80:53:00:a2:6e:8f:fa:b7:7a:
8d:9d:11:f9:fd:88:68:19:3a:c1:f7:78:ab:50:f2:
e5:77:4b:ff:a1:b9:5b:f2:b7:07:82:55:88:96:bc:
7b:a4:05:56:d5:4c:9b:92:a7:37:28:83:61:83:80:
79:5e:34:ef:3d:81:b3:dc:cc:e9:0f:e6:b5:0c:a6:
9d:b1:33:1f:ce:48:d3:f0:ac:c4:cc:b6:70:47:d3:
ca:a9:18:05:a1:68:8e:3a:ef:ae:70:d7:05:4f:c1:
42:ed:8b:b6:ce:25:3b:37:e8:63:09:36:9a:bb:35:
ef:90:ad:fc:34:8b:7d:70:bd:97:57:5b:a9:28:20:
7a:16:8c:aa:bc:8c:bf:8f:5d:3f:be:69:d3:0e:b9:
54:67:09:63:78:a3:9a:53:c6:43:e2:a5:7d:0b:c5:
d5:45:73:9b:a0:45:3f:bb:03:fe:b5:12:f8:c4:62:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:9C:9D:70:F5:65:9C:C1:B1:C1:CA:8A:4D:2C:AF:BA:56:C5:74
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8f:b8:81:40:7d:dc:5d:82:e6:b5:5c:f5:e2:af:38:25:87:
be:bf:b2:02:df:20:00:5d:00:2e:82:d3:b0:df:bc:53:f8:35:
25:b0:cf:17:8c:fa:83:a2:c4:a3:8f:73:18:09:a0:4a:5a:7e:
59:23:7a:45:02:4d:cd:45:a4:bd:f1:cd:07:41:23:5e:2e:04:
cd:f1:0e:be:de:64:08:43:81:ae:45:f0:d5:c5:aa:98:f3:2c:
df:e6:2b:9b:71:58:bd:ee:24:5f:68:7e:ca:ee:80:c4:27:52:
1e:2a:24:89:37:9f:00:77:ee:e8:ab:84:a1:c1:31:64:96:42:
c7:c6:69:63:75:54:49:f8:cc:a3:12:97:c3:03:95:37:c5:61:
55:4c:d4:09:47:d2:9a:8b:45:8c:10:db:b6:ee:b4:1d:4d:11:
5b:2c:a2:03:de:04:05:f1:d8:77:31:62:d7:7d:6f:64:a6:d2:
3f:3f:ee:b4:4f:67:07:0d:c2:82:31:aa:f8:53:df:56:2f:be:
c2:3e:72:4b:dc:5a:84:0f:46:22:2b:d6:e2:f7:f5:40:d0:30:
4f:29:55:f6:b0:c3:76:7a:7a:59:4d:dd:1e:0a:2c:0f:bb:3f:
f2:9f:be:48:f7:65:d5:01:49:8f:a1:3d:74:49:95:9d:28:05:
a1:aa:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org