Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e2037303138.roa
File: 34352e3134302e33382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: hMcSLRFlyYcmVE4VmHSmBKs4wLop3ph6EwxcPKMXkNQ=
Subject key identifier: 85:CC:E7:7C:51:D2:4B:40:D2:59:CA:2E:DE:18:1D:23:6D:15:51:47
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 14671EF34D990BD3423267770A0D47DFE35A3338
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e2037303138.roa
Signing time: Tue 11 Apr 2023 17:11:41 +0000
ROA not before: Tue 11 Apr 2023 17:06:41 +0000
ROA not after: Tue 09 Apr 2024 17:11:41 +0000
asID: 7018
IP address blocks: 45.140.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:67:1e:f3:4d:99:0b:d3:42:32:67:77:0a:0d:47:df:e3:5a:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 11 17:06:41 2023 GMT
Not After : Apr 9 17:11:41 2024 GMT
Subject: CN=85CCE77C51D24B40D259CA2EDE181D236D155147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:e5:64:eb:74:a0:b9:97:92:57:75:98:6c:
c4:17:af:85:04:b5:c3:42:77:90:96:f7:24:88:8f:
49:e0:22:ed:f4:c3:65:53:b9:84:2b:8a:75:5a:9e:
0e:50:0f:e1:8d:6b:99:94:49:8f:3c:87:dd:a5:e9:
99:54:77:b5:4e:f2:be:21:d5:17:67:25:05:0b:8d:
25:be:2f:61:16:7f:b8:29:06:af:c6:36:42:27:cf:
b3:3f:2c:b8:48:25:f4:bc:8d:7c:98:f3:76:d0:88:
28:e2:54:ed:59:f8:71:38:55:4a:31:4e:4f:c6:74:
54:b8:a6:26:18:ea:c6:07:be:9b:22:fd:7a:b5:ff:
f5:80:16:2f:25:e9:fd:68:17:87:ae:5f:09:04:12:
d8:91:56:2f:8c:ef:a5:ed:52:e4:c6:5d:d1:57:b9:
9b:4b:75:cc:5e:0e:79:fd:10:72:25:d8:f3:e5:ec:
26:bc:72:5b:c6:f2:24:cd:77:e3:34:a8:d2:f9:f0:
07:69:ff:4b:89:0d:9e:65:91:57:2e:38:6c:39:1d:
3c:16:56:78:2b:6f:82:87:db:fd:44:98:b6:f5:89:
2f:d0:46:22:15:27:89:38:e7:bd:1e:2b:b1:1c:94:
55:24:c1:3f:3e:a5:ca:53:fa:65:87:76:19:88:a9:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CC:E7:7C:51:D2:4B:40:D2:59:CA:2E:DE:18:1D:23:6D:15:51:47
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:23:ea:9e:3f:cf:ac:f6:fe:eb:09:c3:61:b4:91:38:2b:a9:
d0:36:d7:88:94:a3:d6:2b:7e:fc:9d:a5:3b:4b:f4:3d:31:70:
04:a1:d9:4a:bd:2d:09:0d:56:4a:ff:83:a6:c5:2b:98:f6:ec:
28:4e:35:bf:61:15:4c:7b:c0:26:bb:bd:40:9f:a9:f2:68:28:
01:e4:c8:06:48:a7:d9:5a:ae:28:0a:5f:28:3d:31:bb:4d:64:
b0:f7:1f:39:ac:cb:62:ef:a9:f1:1f:7e:9e:a4:16:58:21:2b:
54:d5:b4:98:a0:d5:be:0a:a2:7e:4f:8a:9e:bd:19:60:3d:27:
c7:21:0e:ab:ba:af:74:44:46:9a:ef:a0:f9:ee:1d:22:e4:09:
66:13:4e:b2:78:ff:90:e6:fb:cc:e3:48:18:c7:4a:5a:e4:40:
d8:9d:16:0d:8b:e3:10:2d:bd:51:fb:24:8a:b1:a6:de:92:bc:
38:5f:91:41:d2:0d:89:cd:27:7a:a2:df:1e:c1:7f:97:c9:92:
16:92:76:44:0e:f7:1a:55:28:d8:a3:37:db:cf:64:2e:7e:db:
72:5b:73:55:7a:26:22:ec:d2:ac:b0:01:c4:29:32:8c:8a:1c:
f7:27:6c:77:10:5a:ad:88:d4:ac:de:68:7e:81:a1:98:5b:ff:
c2:11:07:77
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 11 00:32:41 2023 by rpki-client on console-fra.rpki-client.org