Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
File: 34352e3134352e3234302e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: IkFNZqH3IjM7ihkoq7PV10TW+g09YNPIfSfayff8dfw=
Subject key identifier: CA:A8:F3:41:E5:CF:59:FF:7B:7C:15:D0:F7:9F:9D:BE:90:5E:69:61
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 70AFB7FD1F67649D5624204CA94849F170444CFE
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Apr 2023 11:55:30 +0000
ROA not before: Wed 05 Apr 2023 11:50:30 +0000
ROA not after: Wed 03 Apr 2024 11:55:30 +0000
asID: 56913
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:af:b7:fd:1f:67:64:9d:56:24:20:4c:a9:48:49:f1:70:44:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:30 2023 GMT
Not After : Apr 3 11:55:30 2024 GMT
Subject: CN=CAA8F341E5CF59FF7B7C15D0F79F9DBE905E6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:94:01:59:ff:68:62:da:05:96:6d:84:70:
f3:e9:fb:3b:65:61:8f:3e:64:b8:57:50:cb:4a:da:
9d:19:e2:f4:71:e5:5a:79:87:50:ec:0c:91:76:85:
b5:87:10:31:3c:73:63:ba:6e:d4:cb:04:7a:95:cf:
a8:b1:22:86:f3:06:47:d4:3e:3d:df:a3:2a:af:62:
a3:72:30:1d:b3:41:00:a1:5a:e3:c3:9e:27:83:80:
76:bf:5f:e8:b1:18:b3:1e:0f:c5:37:5b:6a:b6:ec:
22:29:bd:44:f4:da:9a:78:7c:4d:06:a6:88:18:8d:
bb:0a:cb:de:fd:d0:75:09:f9:2e:e9:b7:be:f9:b2:
03:46:f7:b9:8d:3d:1f:7b:ba:77:95:3b:99:cd:3f:
cd:1a:d7:94:54:a9:93:67:9a:6f:11:3e:91:94:71:
82:86:60:dd:54:0b:f4:cc:2a:c6:60:98:9f:cc:c4:
02:ed:50:ca:15:9b:49:99:55:6c:8c:fa:b6:b3:7e:
a2:91:d4:8a:ef:61:79:c5:35:6f:ab:02:ac:b7:45:
c0:22:ec:53:2f:88:43:4f:e3:42:05:c8:bb:d2:f9:
9b:70:02:16:5d:c2:e9:e3:bd:66:4e:f8:8c:86:fc:
68:0f:d2:90:ef:17:94:4a:ca:eb:94:47:20:df:89:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:F3:41:E5:CF:59:FF:7B:7C:15:D0:F7:9F:9D:BE:90:5E:69:61
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0b:fb:10:44:85:e5:cf:54:d7:78:7d:f1:a2:11:9e:6f:42:
b6:20:52:7e:e4:be:42:37:32:1c:ee:06:40:23:1c:a4:c6:6e:
cd:39:53:ff:97:8e:5a:4f:e6:6e:51:d2:31:3c:85:7d:88:5a:
16:b4:ca:d5:76:7e:37:73:98:de:10:3e:c2:30:ad:e2:73:53:
c6:0f:f4:6f:d5:7c:e4:79:6f:b1:91:f2:b3:06:eb:f0:6b:2e:
35:44:44:2e:dd:3f:4e:53:25:52:b0:17:be:df:ca:31:25:40:
ce:6b:6d:16:04:77:11:58:33:17:ba:ad:ea:6b:58:56:97:51:
64:f4:87:1b:3a:9a:c7:3b:96:ad:0f:6e:db:60:2d:e3:b2:c0:
53:f9:3d:ca:bd:81:7f:52:db:12:3e:55:67:4b:ed:ad:e9:10:
b4:fe:41:32:e8:82:14:24:be:50:cc:c3:9f:80:14:18:d3:ca:
a5:69:29:d4:4f:71:cd:5e:fc:39:a9:cb:a0:54:2d:90:6a:2f:
8c:ce:b9:31:00:55:29:58:e2:26:94:94:78:f8:09:87:5f:c0:
27:d4:93:17:f5:53:49:a5:4a:1d:4a:77:39:d6:4f:c3:32:34:
b3:1a:dd:ba:05:2c:c4:2a:e6:c5:89:68:21:88:96:2b:50:07:
ed:30:7a:d6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcK+3/R9nZJ1WJCBMqUhJ8XBETP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA0MDUxMTUwMzBaFw0yNDA0MDMxMTU1MzBaMDMxMTAvBgNV
BAMTKENBQThGMzQxRTVDRjU5RkY3QjdDMTVEMEY3OUY5REJFOTA1RTY5NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzz5QBWf9oYtoFlm2EcPPp+ztl
YY8+ZLhXUMtK2p0Z4vRx5Vp5h1DsDJF2hbWHEDE8c2O6btTLBHqVz6ixIobzBkfU
Pj3foyqvYqNyMB2zQQChWuPDnieDgHa/X+ixGLMeD8U3W2q27CIpvUT02pp4fE0G
pogYjbsKy9790HUJ+S7pt775sgNG97mNPR97uneVO5nNP80a15RUqZNnmm8RPpGU
cYKGYN1UC/TMKsZgmJ/MxALtUMoVm0mZVWyM+razfqKR1IrvYXnFNW+rAqy3RcAi
7FMviENP40IFyLvS+ZtwAhZdwunjvWZO+IyG/GgP0pDvF5RKyuuURyDfif7LAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUyqjzQeXPWf97fBXQ95+dvpBeaWEwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzkzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZHwMA0GCSqGSIb3DQEBCwUAA4IBAQALC/sQRIXlz1TXeH3xohGeb0K2IFJ+5L5C
NzIc7gZAIxykxm7NOVP/l45aT+ZuUdIxPIV9iFoWtMrVdn43c5jeED7CMK3ic1PG
D/Rv1XzkeW+xkfKzBuvway41REQu3T9OUyVSsBe+38oxJUDOa20WBHcRWDMXuq3q
a1hWl1Fk9IcbOprHO5atD27bYC3jssBT+T3KvYF/UtsSPlVnS+2t6RC0/kEy6IIU
JL5QzMOfgBQY08qlaSnUT3HNXvw5qcugVC2Qai+MzrkxAFUpWOImlJR4+AmHX8An
1JMX9VNJpUodSnc51k/DMjSzGt26BSzEKubFiWghiJYrUAftMHrW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-fra.rpki-client.org