Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3134382e302f32342d3234203d3e20323035333230.roa
File: 34352e38392e3134382e302f32342d3234203d3e20323035333230.roa (raw, json)
Hash identifier: 1mBsgWteVEBUDNXm9rESJWE+dzka3ebwodyHnLzGjdk=
Subject key identifier: D4:30:B9:39:0A:AD:01:94:D6:89:0C:0C:64:BA:35:E9:88:7A:E5:14
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 6A7BA94FBF5767871137A51B71886B1C708360CA
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3134382e302f32342d3234203d3e20323035333230.roa
Signing time: Mon 05 Jun 2023 14:33:27 +0000
ROA not before: Mon 05 Jun 2023 14:28:27 +0000
ROA not after: Mon 03 Jun 2024 14:33:27 +0000
asID: 205320
IP address blocks: 45.89.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7b:a9:4f:bf:57:67:87:11:37:a5:1b:71:88:6b:1c:70:83:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 5 14:28:27 2023 GMT
Not After : Jun 3 14:33:27 2024 GMT
Subject: CN=D430B9390AAD0194D6890C0C64BA35E9887AE514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:fd:b8:ac:24:15:0a:7f:ab:be:b1:17:0d:
4f:6f:11:9c:9b:55:c8:35:31:42:74:05:2e:e8:b3:
5f:4f:fd:a3:59:77:9d:72:f0:45:1a:a6:b1:c9:19:
7a:b5:74:da:c1:ee:97:93:51:b8:fe:75:5a:d8:a5:
df:e1:5a:e2:0a:d8:63:13:5d:72:de:b2:d7:ca:ab:
05:7b:b5:b8:22:70:63:69:de:77:3d:f7:e9:e8:f1:
f3:c8:8c:8f:90:d5:26:47:8d:25:8b:d4:66:e3:e6:
1e:e9:62:82:de:15:58:8a:54:44:03:9c:23:59:be:
80:24:11:83:95:c2:7e:63:8d:cd:9c:06:b3:1d:ff:
bc:d4:09:0d:65:f5:45:d8:12:f7:57:bc:6e:df:b5:
21:1c:4b:4e:01:79:c1:9b:e3:6a:0d:c5:ee:96:b0:
10:6f:46:e7:86:9a:02:ae:f0:fb:a0:4c:37:0f:5f:
cf:f0:8d:6e:73:9f:db:19:8b:30:56:4f:9d:95:d6:
ac:bc:0e:10:49:9c:86:28:6f:8a:cd:58:7a:51:47:
54:b1:86:5d:bf:e3:b8:a0:14:24:f6:d9:0b:4b:30:
97:a4:d7:ff:66:30:c4:27:49:5a:63:54:f8:33:df:
b9:3c:0c:da:18:32:d6:e2:77:c5:de:97:5a:f2:18:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:B9:39:0A:AD:01:94:D6:89:0C:0C:64:BA:35:E9:88:7A:E5:14
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3134382e302f32342d3234203d3e20323035333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/24
Signature Algorithm: sha256WithRSAEncryption
06:21:95:78:43:10:fc:0b:2c:e4:78:a1:79:53:52:9f:40:be:
9f:50:20:14:fa:7e:73:18:c6:33:99:49:e1:85:5d:2f:bf:f6:
21:e9:3c:bd:19:eb:20:c6:d6:a1:e2:f5:37:6e:80:36:12:f9:
bf:e9:50:e1:3f:3d:fa:75:ef:39:f9:66:e3:dd:2b:e7:c7:05:
08:b9:9c:17:46:20:ce:29:cc:1b:c7:64:1c:de:ab:9b:8a:91:
21:f7:62:94:c7:61:b2:c8:7f:eb:93:ab:7f:6d:7d:88:50:32:
33:2a:9b:8c:53:78:8e:ee:83:c1:e1:19:bb:10:df:98:61:88:
a4:8b:7d:24:56:d9:4f:ab:51:69:db:f1:1b:05:d6:d8:b2:c5:
b3:88:c3:42:8e:6d:47:db:ec:dd:42:2c:4e:77:be:20:6b:67:
64:12:34:db:07:e5:53:65:71:46:83:6c:94:57:f7:df:25:00:
8a:be:6d:3a:bf:ca:83:2c:0b:ba:29:43:7b:c1:4a:b7:ab:7c:
ee:47:dc:28:11:20:da:e8:d7:02:d0:21:14:66:e3:cc:55:2a:
33:cb:df:a7:18:3c:05:86:a3:d0:22:57:03:56:07:d0:e8:97:
a3:27:1a:8f:3d:98:84:67:b6:b2:86:69:45:81:76:be:35:0e:
a0:82:ad:3d
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 7 06:26:49 2023 by rpki-client on console-fra.rpki-client.org