Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20323132323139.roa
File: 34352e3134352e3234332e302f32342d3234203d3e20323132323139.roa (raw, json)
Hash identifier: vRQANqMZa+RAe86HfgJkRIeSab0nnjB9VSyZKDhQTLo=
Subject key identifier: 8B:49:D9:DA:1D:D5:A2:FC:CF:38:73:AE:62:4C:0E:4E:4B:67:06:82
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 749D3D2B08F41838EFD03B6F028DC5B8B49F7B28
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20323132323139.roa
Signing time: Wed 05 Apr 2023 17:23:25 +0000
ROA not before: Wed 05 Apr 2023 17:18:25 +0000
ROA not after: Wed 03 Apr 2024 17:23:25 +0000
asID: 212219
IP address blocks: 45.145.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9d:3d:2b:08:f4:18:38:ef:d0:3b:6f:02:8d:c5:b8:b4:9f:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 17:18:25 2023 GMT
Not After : Apr 3 17:23:25 2024 GMT
Subject: CN=8B49D9DA1DD5A2FCCF3873AE624C0E4E4B670682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:22:18:2c:91:1b:38:70:04:46:6a:96:38:
9b:43:c9:4b:0f:72:73:f9:f3:2c:a8:ba:a3:66:92:
c6:ba:4d:fc:8d:42:ac:32:bd:56:aa:67:58:ab:c0:
43:30:2a:33:18:97:18:c4:c4:f2:6f:08:66:2b:06:
d1:8a:d7:ef:1d:08:6c:9e:28:42:47:d2:d2:44:76:
49:97:29:9d:5c:f8:48:a5:dd:46:81:f5:95:f4:af:
a2:82:3c:16:c3:15:a1:bb:19:96:f4:f4:7e:4b:18:
df:2b:9f:03:aa:10:e5:df:a9:8d:8c:17:f1:11:3c:
8b:e8:2e:ee:81:e8:8b:d8:53:f3:3d:0e:aa:55:1a:
66:1d:65:7e:15:12:90:c7:8f:3c:35:b8:c1:93:a6:
17:ef:4d:a8:ad:13:6b:97:e2:c3:be:23:0e:f4:46:
c9:e7:07:ae:69:7a:53:c8:91:64:44:f4:78:3e:26:
2a:84:d4:e7:a0:52:33:e5:ee:07:36:f9:9a:d5:19:
30:96:53:3b:42:f0:71:91:e8:b6:ad:2a:e7:d1:89:
a3:22:dd:f3:8f:21:a6:9d:12:5e:b9:b6:83:37:8c:
bc:0c:74:ff:02:4f:a8:8c:92:c0:82:98:8d:96:66:
90:ed:54:29:05:3a:fb:f3:b5:fc:c6:e1:83:cf:c1:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:D9:DA:1D:D5:A2:FC:CF:38:73:AE:62:4C:0E:4E:4B:67:06:82
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234332e302f32342d3234203d3e20323132323139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.243.0/24
Signature Algorithm: sha256WithRSAEncryption
28:93:b5:6c:f1:07:2a:32:d1:aa:41:e3:9b:18:a0:47:ee:58:
a1:e8:7b:3e:b2:2c:64:09:63:e7:c2:b0:65:bb:85:a2:ba:d1:
b3:b0:71:6f:f5:03:4c:08:09:f4:c9:72:d2:bf:6d:da:a5:e9:
12:11:54:25:fe:a9:5a:40:8b:45:10:e3:d4:f2:1a:89:6b:69:
2a:b3:b4:18:79:67:61:e4:c5:64:cf:c6:49:00:69:3e:81:ad:
69:72:80:8e:b0:19:df:c7:c6:15:06:dc:51:5b:d2:81:42:dc:
48:3a:01:96:43:94:5e:d9:03:06:86:a6:67:05:74:97:25:11:
be:c3:00:a1:ea:90:8c:d0:72:bb:33:3e:e9:6d:d0:96:54:08:
ea:5a:75:db:09:5a:1c:b6:2a:5e:34:0d:79:cc:a8:00:25:24:
16:ef:01:0a:56:67:33:96:94:8a:2e:6a:44:dc:49:2a:c1:77:
a9:f5:fe:92:b9:7d:74:4d:b6:c5:e7:33:f9:73:c6:5a:e2:1a:
58:93:b3:fb:5b:70:f6:e2:cc:63:25:20:1d:be:12:9d:84:c4:
96:83:16:61:e1:8f:63:ef:dc:e7:11:71:ef:60:99:24:eb:56:
59:b7:7f:ff:a8:bc:6b:d4:c4:e9:f9:5d:fa:0e:0f:04:ec:bc:
d9:91:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org