Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /CHZ5D+ue5ycF0gYQz5ZnBODIddBJKFGoUQYgg072ws=
Subject key identifier: 9F:14:B1:6A:18:BA:B0:45:74:82:3D:CD:84:62:32:DC:60:8A:DA:5C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 1984D71A9C8C829B2BE12E25787C02A0268A5AAC
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Aug 2023 00:00:06 +0000
ROA not before: Thu 10 Aug 2023 23:55:06 +0000
ROA not after: Fri 09 Aug 2024 00:00:06 +0000
asID: 834
IP address blocks: 45.140.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:84:d7:1a:9c:8c:82:9b:2b:e1:2e:25:78:7c:02:a0:26:8a:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Aug 10 23:55:06 2023 GMT
Not After : Aug 9 00:00:06 2024 GMT
Subject: CN=9F14B16A18BAB04574823DCD846232DC608ADA5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e8:8b:b5:11:0b:5b:0b:b2:9d:eb:5a:ae:73:
c6:f5:01:17:20:a4:e8:26:76:a6:60:ab:af:2c:1b:
3d:cb:54:a0:5d:09:9d:78:7d:4e:54:44:8d:ac:bb:
df:fd:8f:fc:29:89:51:2c:ef:cb:29:62:d7:a9:b6:
fa:24:94:c4:75:71:50:7f:07:7d:dd:6d:1f:41:8e:
b6:f8:3b:e3:da:85:31:82:a6:57:57:bc:0e:ff:47:
27:ab:1f:1b:26:af:80:c4:76:f7:4f:24:04:5f:a5:
db:98:d9:f7:c9:7b:77:84:e8:b9:ed:e8:72:18:42:
b8:60:03:23:42:83:db:74:d7:d3:07:ea:08:7e:d7:
84:6f:3d:76:8f:14:92:9b:ca:e4:10:75:6d:a4:1c:
23:4e:27:00:64:51:eb:06:b1:21:46:c6:f6:d7:63:
61:fa:d9:df:1a:69:3b:df:62:d3:77:6c:cc:66:68:
a5:bd:46:26:21:f8:3d:ca:3e:fe:c3:78:24:b0:74:
99:b3:d2:22:75:49:bd:52:fc:a1:d5:69:13:b1:04:
74:c2:32:ab:a7:5d:b3:0f:bc:d5:a4:a0:79:32:86:
b8:0e:34:2a:02:eb:d8:64:9d:15:f3:9e:41:82:85:
6e:3a:70:75:74:c0:42:d4:03:76:7c:7c:d0:fe:86:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:B1:6A:18:BA:B0:45:74:82:3D:CD:84:62:32:DC:60:8A:DA:5C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134302e33382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:95:9a:5f:1a:4a:62:df:9e:87:16:d2:3b:c7:76:28:3b:41:
96:32:a4:84:06:51:cb:a3:a5:94:a4:66:53:46:8c:63:4f:59:
71:ff:c5:81:88:03:2b:5e:1b:72:dc:f7:e5:00:fe:bc:13:76:
ac:ff:de:f2:06:3a:e8:8c:85:43:8c:f3:4f:e4:be:ba:bf:d7:
7d:ea:0b:8d:61:ed:fa:fb:d6:be:7a:8c:6c:48:3a:ff:15:19:
46:f6:03:07:38:bd:ba:92:74:ba:73:ed:bd:db:bb:71:56:28:
45:bd:39:f4:38:74:0d:58:60:dd:73:ab:91:0e:7c:72:d2:4c:
a6:24:c3:7e:5a:b2:03:96:ad:06:d4:6b:19:c2:7f:8d:12:11:
48:0e:13:95:72:37:01:a1:b2:c1:93:9e:ca:62:b8:7d:ff:33:
99:0b:77:39:77:c6:da:34:c3:a7:9e:4d:90:8a:dd:05:57:e2:
35:d6:57:4d:28:d9:fe:f2:77:0e:ba:68:12:72:5d:00:6a:a6:
23:c5:f5:e0:44:35:bb:fd:51:b6:f7:06:e0:4d:8f:d1:28:b4:
74:73:9b:16:3f:71:e6:9e:aa:ca:f1:4a:fa:54:f2:fb:cd:6e:
89:a6:c3:3d:3f:53:7f:b4:35:28:48:f5:62:59:6a:8f:d6:0e:
87:8e:0d:1c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUGYTXGpyMgpsr4S4leHwCoCaKWqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA4MTAyMzU1MDZaFw0yNDA4MDkwMDAwMDZaMDMxMTAvBgNV
BAMTKDlGMTRCMTZBMThCQUIwNDU3NDgyM0RDRDg0NjIzMkRDNjA4QURBNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD16Iu1EQtbC7Kd61quc8b1ARcg
pOgmdqZgq68sGz3LVKBdCZ14fU5URI2su9/9j/wpiVEs78spYteptvoklMR1cVB/
B33dbR9Bjrb4O+PahTGCpldXvA7/RyerHxsmr4DEdvdPJARfpduY2ffJe3eE6Lnt
6HIYQrhgAyNCg9t019MH6gh+14RvPXaPFJKbyuQQdW2kHCNOJwBkUesGsSFGxvbX
Y2H62d8aaTvfYtN3bMxmaKW9RiYh+D3KPv7DeCSwdJmz0iJ1Sb1S/KHVaROxBHTC
MqunXbMPvNWkoHkyhrgONCoC69hknRXznkGChW46cHV0wELUA3Z8fND+hlB1AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUnxSxahi6sEV0gj3NhGIy3GCK2lwwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzNDMwMmUzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYwmMA0G
CSqGSIb3DQEBCwUAA4IBAQA5lZpfGkpi356HFtI7x3YoO0GWMqSEBlHLo6WUpGZT
RoxjT1lx/8WBiAMrXhty3PflAP68E3as/97yBjrojIVDjPNP5L66v9d96guNYe36
+9a+eoxsSDr/FRlG9gMHOL26knS6c+2927txVihFvTn0OHQNWGDdc6uRDnxy0kym
JMN+WrIDlq0G1GsZwn+NEhFIDhOVcjcBobLBk57KYrh9/zOZC3c5d8baNMOnnk2Q
it0FV+I11ldNKNn+8ncOumgScl0AaqYjxfXgRDW7/VG29wbgTY/RKLR0c5sWP3Hm
nqrK8Ur6VPL7zW6JpsM9P1N/tDUoSPViWWqP1g6Hjg0c
Generated at Thu Sep 21 16:49:31 2023 by rpki-client on console-fra.rpki-client.org