Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XuN4uDfTb6xI76UPDIEeG0F3juaBQxs7EHJvQIsDfXs=
Subject key identifier: 2A:62:06:B4:5C:CD:52:0B:B1:CF:44:A2:53:B9:60:32:75:37:25:95
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 1D6078B96382C87CFC0AB731A6CA8E4E73A11912
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e20383334.roa
Signing time: Tue 02 May 2023 00:00:04 +0000
ROA not before: Mon 01 May 2023 23:55:04 +0000
ROA not after: Tue 30 Apr 2024 00:00:04 +0000
asID: 834
IP address blocks: 45.145.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:60:78:b9:63:82:c8:7c:fc:0a:b7:31:a6:ca:8e:4e:73:a1:19:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: May 1 23:55:04 2023 GMT
Not After : Apr 30 00:00:04 2024 GMT
Subject: CN=2A6206B45CCD520BB1CF44A253B9603275372595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:3a:b7:0b:d3:b3:64:96:01:9e:7e:23:99:
7a:e6:59:74:98:fa:2b:87:56:01:f6:82:90:55:4d:
f8:56:84:a8:ce:bf:73:2d:e2:ee:bd:0b:65:f8:79:
4d:04:31:ca:31:f9:99:59:2d:3d:94:3a:7d:7e:38:
fe:8d:63:a2:c0:44:89:13:28:2a:e0:86:fe:7d:2e:
43:1c:d7:0e:c7:73:94:37:2c:e0:ab:c5:9e:a7:c9:
1b:f3:e2:44:82:5b:8b:67:06:67:72:d7:c3:11:f1:
f6:12:84:9a:bc:ab:ea:40:b8:38:d9:ac:6c:66:70:
20:68:e0:b1:6c:81:53:91:d7:41:15:da:ce:bd:14:
87:97:76:75:c7:10:44:c1:e7:e2:d1:54:80:ca:b4:
30:0d:92:39:b6:d9:a4:f6:5f:cb:54:57:83:d6:40:
fe:07:00:fc:88:ab:c1:5b:fe:33:9f:89:e8:34:fa:
5c:ef:72:32:63:e3:7e:dc:fb:da:61:e2:a8:a9:15:
a6:a5:38:54:b1:8d:6d:56:a9:30:62:4c:b9:ac:e5:
d8:b7:59:da:02:4d:5e:35:63:39:6e:d2:9a:24:5a:
9e:ca:e0:35:ae:66:0f:3d:c8:38:18:99:b9:eb:de:
4c:4b:72:1b:5f:dd:fc:43:8b:51:c5:d5:e7:1c:50:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:62:06:B4:5C:CD:52:0B:B1:CF:44:A2:53:B9:60:32:75:37:25:95
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
65:41:21:e7:36:70:09:09:01:48:a3:4a:69:33:ef:93:60:74:
7c:27:a9:ba:b0:b1:e1:8c:e8:42:e7:e5:df:fc:92:8e:d8:3a:
bb:2b:6d:1d:17:25:95:67:2d:9a:1b:0f:72:64:00:80:bc:a8:
ec:8d:23:b0:eb:3f:94:80:15:18:e7:d2:1d:97:5c:06:8f:83:
3e:1b:8c:37:b0:b5:c0:1a:88:da:d6:d4:b1:82:30:a9:c2:ce:
31:64:69:3d:8b:6c:fd:c1:91:ae:6a:e8:47:4c:2f:92:09:8b:
7c:7b:af:41:15:c4:60:40:f5:7a:55:13:f8:22:3f:3e:dd:ec:
3a:4c:78:29:df:fa:e3:8d:75:bc:db:92:1b:57:1b:c6:8a:c7:
96:5e:d5:51:5a:97:b9:06:ad:43:6d:eb:46:0b:92:55:c9:31:
a3:9f:33:a1:46:3f:df:cd:4b:1d:bc:6a:1d:31:eb:67:9a:9a:
a7:9f:c3:b3:76:d9:dc:94:c9:b6:a9:1b:bd:83:88:81:56:70:
fb:fe:0c:a6:d6:12:49:8f:a6:d9:43:46:19:b0:ca:0a:62:b0:
9d:2b:57:87:b1:14:b5:18:a3:0d:78:63:73:ca:65:81:bb:02:
5b:7f:47:5f:28:87:29:50:c0:6d:9b:c8:6f:7f:50:3a:1a:2b:
09:79:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-fra.rpki-client.org