Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20383334.roa
File: 34352e38392e3135312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: omMdtYpw6MSAwRxj8J1gy2boTzP27NQtTkDhOGVMxB8=
Subject key identifier: 35:3E:C3:6A:33:F8:45:25:EB:4B:59:EA:CC:DD:CC:B9:A0:54:64:52
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 259E709287956835E22E431913AFE1F76E51C0A0
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Jul 2023 16:00:03 +0000
ROA not before: Mon 03 Jul 2023 15:55:03 +0000
ROA not after: Mon 01 Jul 2024 16:00:03 +0000
asID: 834
IP address blocks: 45.89.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9e:70:92:87:95:68:35:e2:2e:43:19:13:af:e1:f7:6e:51:c0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 3 15:55:03 2023 GMT
Not After : Jul 1 16:00:03 2024 GMT
Subject: CN=353EC36A33F84525EB4B59EACCDDCCB9A0546452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:e5:28:f2:03:cf:a7:b3:e6:48:06:05:40:
7e:26:a1:4b:b0:32:e5:fc:fd:cf:5f:7b:46:0d:6d:
23:55:96:c2:31:78:2d:5a:b7:ea:19:22:f6:15:0e:
96:b2:aa:2d:7a:6e:06:85:3d:8b:c9:a8:b4:46:77:
8a:69:f2:79:cd:3c:2f:28:7c:61:26:78:3b:6e:b5:
f1:86:b3:63:04:3c:7c:f1:c8:d2:91:bc:67:6e:08:
b9:57:0c:1e:ce:bd:b5:2c:ae:0d:a5:78:da:27:84:
48:bf:02:a4:0f:6a:a4:35:69:2d:aa:08:aa:63:51:
97:1e:eb:01:37:4e:ab:b8:de:c7:40:28:3f:05:f8:
40:d3:06:4a:5a:09:1f:be:0d:dd:93:fe:2a:21:01:
cd:40:d5:f0:39:7c:00:e8:cf:fb:48:77:1d:0c:4a:
00:30:41:05:72:05:1f:86:0e:6d:f8:68:a8:01:71:
79:b3:88:9e:f3:5a:59:4f:84:0b:01:e1:1e:b9:4f:
61:7d:5f:87:f2:58:e1:11:7a:b6:c6:2b:40:2f:fa:
92:72:88:48:a5:75:ce:c9:09:d0:e8:0c:4b:cc:53:
e6:39:10:47:58:39:93:64:fe:9e:9e:81:2c:67:4b:
1b:28:c8:60:d4:02:77:33:96:be:4b:83:66:b7:22:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:C3:6A:33:F8:45:25:EB:4B:59:EA:CC:DD:CC:B9:A0:54:64:52
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e38392e3135312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:cd:4b:f3:7f:a4:f1:9b:d3:82:58:c9:d1:34:79:72:cd:
3c:d1:65:0a:49:eb:1f:cc:84:28:dd:2b:dd:df:f6:cd:05:4b:
a0:01:ca:94:74:2c:59:81:0b:ed:ef:1d:ae:1d:f9:fd:53:36:
d5:5a:b4:8a:bc:59:f6:4b:21:87:53:b7:97:cf:01:36:a4:ca:
82:ed:d5:3d:fa:04:84:ce:fe:04:6c:5d:c7:78:aa:c3:6c:ff:
11:86:44:c5:ad:3e:7c:33:d5:de:75:c7:26:a6:da:09:09:84:
f7:cb:28:db:cc:7c:0c:51:85:d2:0b:dd:ff:7f:8f:f0:95:56:
04:d2:ec:13:79:3d:f7:a3:4e:4f:43:ce:46:28:f3:f5:3c:79:
af:bf:bc:1c:84:44:ae:5d:c7:35:ad:dc:67:2d:00:80:5d:fa:
3c:6e:7b:a8:eb:10:81:a8:95:b2:2e:a8:65:85:7f:69:45:81:
90:0b:6a:25:16:d2:77:de:af:e3:f9:b2:ef:92:01:0a:27:71:
1c:18:a7:6b:ee:dc:cb:ed:3a:4e:b8:42:5c:84:b9:17:b3:73:
a2:a5:08:df:f6:de:cf:43:6a:9e:29:85:d6:70:1b:2e:1e:c7:
41:8f:33:f4:93:e9:f7:15:ec:59:fe:fa:44:18:71:75:96:fc:
90:c0:ff:92
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUJZ5wkoeVaDXiLkMZE6/h925RwKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA3MDMxNTU1MDNaFw0yNDA3MDExNjAwMDNaMDMxMTAvBgNV
BAMTKDM1M0VDMzZBMzNGODQ1MjVFQjRCNTlFQUNDRERDQ0I5QTA1NDY0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz+Uo8gPPp7PmSAYFQH4moUuw
MuX8/c9fe0YNbSNVlsIxeC1at+oZIvYVDpayqi16bgaFPYvJqLRGd4pp8nnNPC8o
fGEmeDtutfGGs2MEPHzxyNKRvGduCLlXDB7OvbUsrg2leNonhEi/AqQPaqQ1aS2q
CKpjUZce6wE3Tqu43sdAKD8F+EDTBkpaCR++Dd2T/iohAc1A1fA5fADoz/tIdx0M
SgAwQQVyBR+GDm34aKgBcXmziJ7zWllPhAsB4R65T2F9X4fyWOERerbGK0Av+pJy
iEildc7JCdDoDEvMU+Y5EEdYOZNk/p6egSxnSxsoyGDUAnczlr5Lg2a3IrgLAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUNT7DajP4RSXrS1nqzN3MuaBUZFIwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzgzOTJlMzEzNTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVmXMA0G
CSqGSIb3DQEBCwUAA4IBAQA3cc1L83+k8ZvTgljJ0TR5cs080WUKSesfzIQo3Svd
3/bNBUugAcqUdCxZgQvt7x2uHfn9UzbVWrSKvFn2SyGHU7eXzwE2pMqC7dU9+gSE
zv4EbF3HeKrDbP8RhkTFrT58M9XedccmptoJCYT3yyjbzHwMUYXSC93/f4/wlVYE
0uwTeT33o05PQ85GKPP1PHmvv7wchESuXcc1rdxnLQCAXfo8bnuo6xCBqJWyLqhl
hX9pRYGQC2olFtJ33q/j+bLvkgEKJ3EcGKdr7tzL7TpOuEJchLkXs3OipQjf9t7P
Q2qeKYXWcBsuHsdBjzP0k+n3FexZ/vpEGHF1lvyQwP+S
Generated at Tue Sep 12 17:18:05 2023 by rpki-client on console-ams.rpki-client.org