Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
File: 34352e3134352e3234322e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: UjMoBdRuLYAu6LNJnSXa/huACbzUN0JsLro7t1mqnDk=
Subject key identifier: 55:81:6A:69:97:2F:6D:24:5F:89:EA:23:68:28:1B:8F:1B:10:DD:19
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 7950C6E8B31AED9EDCCE06FF8A65F0474EE1278A
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
Signing time: Wed 05 Apr 2023 11:55:31 +0000
ROA not before: Wed 05 Apr 2023 11:50:31 +0000
ROA not after: Wed 03 Apr 2024 11:55:31 +0000
asID: 43260
IP address blocks: 45.145.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:50:c6:e8:b3:1a:ed:9e:dc:ce:06:ff:8a:65:f0:47:4e:e1:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:31 2023 GMT
Not After : Apr 3 11:55:31 2024 GMT
Subject: CN=55816A69972F6D245F89EA2368281B8F1B10DD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:eb:d8:9e:ae:4b:9a:26:1b:d8:5e:9f:43:
16:bf:58:07:7f:c1:9c:db:ca:5d:2f:4c:f4:06:4a:
c9:2f:9f:ff:0a:a2:4f:21:cc:13:a2:46:9d:78:3b:
0d:5a:76:71:4a:83:af:4a:73:26:56:7a:db:17:1b:
f7:af:ec:91:92:0d:fe:e4:f3:cf:f9:68:fd:ec:03:
fe:f0:47:8e:17:3d:b6:2f:c4:c8:a3:be:6b:06:2f:
10:15:5d:d8:3a:30:2a:83:7a:de:0e:50:3b:25:cc:
b2:32:e1:7f:ce:34:2d:61:41:44:c4:50:ee:87:10:
b0:0f:8f:52:6f:5e:1d:e6:e2:84:9c:1c:85:f0:c8:
67:fb:88:76:9e:92:c4:ef:55:aa:61:b7:de:d5:cd:
77:9b:05:d4:86:b0:e7:a5:31:44:f4:91:4c:66:85:
ec:3b:f3:3e:de:2e:e4:22:ad:02:fa:38:e3:46:19:
03:35:11:d7:8c:78:a9:e2:4f:b0:1c:80:78:a0:9d:
e5:3c:80:33:76:a7:70:a9:cb:4b:f5:95:b6:b2:50:
4c:70:32:a6:5c:6c:ad:c8:25:26:7b:f7:6c:e1:a0:
28:07:aa:f4:59:e4:b7:b0:2a:1a:29:a2:90:b9:63:
f3:b6:6a:1c:8b:ad:25:96:6f:1d:36:4c:65:3a:80:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:6A:69:97:2F:6D:24:5F:89:EA:23:68:28:1B:8F:1B:10:DD:19
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9a:f0:36:de:09:5c:b2:23:ad:a8:17:50:95:74:96:a3:ee:
06:72:1e:56:1e:dc:9e:5d:d5:4f:be:20:94:7d:24:d6:c5:14:
76:c7:cb:c3:58:57:87:86:d3:1e:82:ad:c8:27:71:21:4a:bc:
3e:ca:11:3c:3d:30:4e:d5:6c:7d:bd:4f:ba:8e:b7:00:aa:57:
31:92:e5:c4:b3:5a:67:35:f9:e8:5b:9d:64:2c:86:c6:6e:fd:
9d:e3:14:ef:c5:a8:1c:a2:a1:f5:e4:b5:aa:f4:f7:d7:bb:85:
cf:ca:c2:f6:08:39:39:84:f5:4a:11:c9:da:b5:06:27:9e:2b:
92:c7:46:bb:a5:fb:62:25:3b:9f:b9:05:23:33:55:34:c3:54:
3c:a2:da:98:ba:65:f1:da:3e:06:b7:3b:64:b4:ad:8b:91:ce:
49:c0:61:33:c1:c5:5b:8d:18:e9:d8:45:b0:b9:37:20:32:95:
e2:c0:94:64:1f:19:f6:ce:ea:bd:fa:68:fc:6a:38:1f:81:1c:
a1:69:d9:c8:fb:f7:74:8e:c2:86:85:a8:b3:b8:67:2d:e0:cc:
fe:9e:17:2a:30:27:45:4d:56:a4:6e:02:2b:cd:de:5e:66:8e:
36:f3:f1:40:a0:e1:ed:cf:37:c0:85:ed:da:77:6f:96:22:bf:
29:5b:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org