Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e203631313338.roa
File: 34352e38392e3135302e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: qe6T8Toic6UTD4APqEBA3wSwBY09bOgYnoNaSO+vFIs=
Subject key identifier: 75:44:EC:DF:51:7A:FB:D5:80:65:22:7B:FD:25:E4:6B:96:02:7E:61
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 05F44C9943760A54918CB05C56D8F6ECF5D3B954
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e203631313338.roa
Signing time: Thu 01 Jun 2023 15:43:46 +0000
ROA not before: Thu 01 Jun 2023 15:38:46 +0000
ROA not after: Thu 30 May 2024 15:43:46 +0000
asID: 61138
IP address blocks: 45.89.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f4:4c:99:43:76:0a:54:91:8c:b0:5c:56:d8:f6:ec:f5:d3:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 1 15:38:46 2023 GMT
Not After : May 30 15:43:46 2024 GMT
Subject: CN=7544ECDF517AFBD58065227BFD25E46B96027E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:ba:a3:1c:cb:bd:18:25:6c:43:ea:6a:71:
34:12:11:d7:32:e3:db:bc:1a:2f:9f:5d:c5:d2:7a:
90:61:09:9c:0e:21:15:6d:21:00:db:f2:88:5d:d7:
67:0e:37:84:9b:4d:8a:89:e6:3e:d1:cd:97:20:18:
8d:d9:54:8f:de:b5:2a:24:46:4d:80:bb:f6:ee:69:
32:91:95:c6:8d:36:f2:4d:2b:58:e1:ed:27:9c:43:
70:a4:02:56:30:1e:82:44:6e:70:60:ac:a9:f4:09:
34:f4:0c:10:65:89:39:64:ba:ac:44:ce:2c:26:ed:
00:ba:23:c8:30:f8:e1:3e:79:37:0c:39:45:d3:3e:
8d:03:d0:0a:69:1b:dc:6c:88:4b:81:97:a6:87:6b:
ee:7e:26:50:aa:a6:13:05:6e:9d:89:12:6f:5b:db:
74:b1:47:24:dc:41:b4:1a:f2:43:cb:a8:07:6a:2e:
32:fb:07:da:45:ff:d0:f2:19:f8:43:b0:4d:a7:a7:
12:73:d8:f0:8a:de:8b:06:e6:38:0f:71:97:45:79:
5c:76:39:5c:51:66:9e:11:e7:83:4e:97:61:ac:23:
94:0a:11:eb:30:a7:9e:a2:6c:9b:9f:ff:32:8c:0d:
bc:db:24:db:01:51:12:fb:42:8e:e0:3f:56:13:6a:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:EC:DF:51:7A:FB:D5:80:65:22:7B:FD:25:E4:6B:96:02:7E:61
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135302e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:56:61:40:01:40:6f:fb:7d:54:f4:ed:b9:5c:ac:99:ae:9a:
25:01:fb:f3:e6:4f:19:37:9e:e0:f9:e1:d7:bf:ee:5d:94:b0:
a2:b2:27:a6:2e:ec:37:5a:2b:77:26:7d:da:7f:b6:6c:ba:45:
3f:e4:36:11:f8:0b:8b:1d:76:41:09:b4:04:a9:c1:b2:e0:98:
5e:67:c5:d1:0e:8d:0b:1a:62:75:3f:8a:3a:b0:f5:36:f2:b1:
fe:4b:fa:11:9d:d9:f1:73:b2:d2:33:f1:ea:a6:49:e0:a8:d0:
d2:7d:ca:b9:8a:fa:03:91:20:c1:d6:5b:38:3c:4a:34:d9:ec:
a8:60:7d:1f:3e:6b:eb:cb:db:3f:88:67:8b:2d:c3:80:fc:bd:
2a:d5:d7:df:70:b9:cf:65:39:59:e9:56:68:98:21:b9:3e:6c:
7d:57:4e:da:92:a9:74:27:24:38:59:8e:77:c2:d3:74:88:b5:
09:e7:d8:9d:2b:b7:82:f4:41:92:b7:88:54:de:cb:bd:be:1b:
58:9e:83:b9:9a:a2:21:70:60:0d:83:95:dd:15:e6:61:61:88:
11:3e:85:d7:16:84:7a:20:6e:dd:a3:75:dc:c4:10:e1:56:f0:
e8:d4:22:7a:97:83:c5:c6:f6:9d:55:b4:68:d1:4a:d0:4d:75:
5c:16:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org