Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138342e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: GcFSqEA3ZpL4KbiPBlBP6mFNrOPEf8IvXGm2K2ykTFY=
Subject key identifier: 25:6A:74:22:81:F7:D5:8F:0C:A5:CE:0E:67:B9:75:E3:85:F8:DA:C1
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2FE9C3F0E1422316F24C21DBE6690201E78AF5B4
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
Signing time: Wed 05 Apr 2023 11:55:31 +0000
ROA not before: Wed 05 Apr 2023 11:50:31 +0000
ROA not after: Wed 03 Apr 2024 11:55:31 +0000
asID: 3320
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e9:c3:f0:e1:42:23:16:f2:4c:21:db:e6:69:02:01:e7:8a:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Apr 5 11:50:31 2023 GMT
Not After : Apr 3 11:55:31 2024 GMT
Subject: CN=256A742281F7D58F0CA5CE0E67B975E385F8DAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:13:b1:21:ed:3b:8f:93:cc:9f:6f:f3:dc:
48:34:2e:7b:7f:c3:ad:c5:66:fc:47:af:54:a2:69:
83:d8:a0:e1:ef:6c:28:a3:c4:6b:02:78:c4:06:c5:
0d:72:0a:60:e5:3f:2e:44:90:eb:07:bd:1b:6f:11:
72:86:23:bf:3b:8e:61:4f:55:1c:5e:88:86:0f:28:
dd:eb:b7:7b:43:cd:e8:5d:6d:8b:41:87:8b:31:8b:
35:e8:fc:f8:a3:eb:b3:5c:8d:e4:f5:49:04:ea:31:
f1:65:12:c5:78:0c:62:2b:6e:7a:a8:f8:a5:40:2d:
e4:53:7b:63:5f:f8:9a:b3:05:43:1b:93:a8:bf:6e:
d4:83:e4:3a:76:35:98:14:a3:21:b5:f0:11:cf:57:
ec:e9:9b:9a:6f:b6:6d:d9:28:e5:1e:c8:2c:9e:13:
5d:b8:4e:e9:ca:6c:a6:f4:9d:8d:47:84:2b:21:c7:
f1:c1:1c:f2:59:78:ab:f7:13:8b:27:ff:dd:bd:44:
b1:84:55:1b:fb:03:e7:69:4c:67:7e:2d:17:1e:78:
cd:50:2a:de:be:60:1e:1f:8d:34:43:eb:09:95:43:
62:f9:17:b9:b8:8d:c5:09:61:a0:b2:44:9c:de:06:
26:92:59:58:23:a8:20:16:35:95:a7:62:08:de:ba:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:74:22:81:F7:D5:8F:0C:A5:CE:0E:67:B9:75:E3:85:F8:DA:C1
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:05:92:67:96:de:3e:cb:15:ad:10:33:8c:f1:65:e4:4a:30:
25:23:41:1d:33:86:01:75:c9:0c:45:91:03:b4:55:74:5e:ae:
0a:38:98:dd:03:71:b0:e3:54:cc:85:c3:5e:8b:1a:9a:af:44:
3e:e0:e5:70:6c:4b:92:77:e8:42:1b:32:e0:e1:f0:64:ad:d8:
3b:29:fc:9b:73:79:2c:22:f5:93:ce:48:75:ec:74:bd:ab:3d:
c1:4a:5e:cf:fc:c1:f1:09:ca:3b:f6:84:77:6f:e6:90:9f:d0:
ff:a6:b2:ba:27:e6:9c:d2:e3:f8:96:b8:52:6c:f6:2c:5e:3c:
9f:0b:ed:7f:a4:c7:17:46:43:bb:9c:f3:47:b4:10:61:2b:1c:
5c:4d:5d:73:7e:4d:29:a0:da:0a:64:db:8a:04:72:3e:d2:08:
9d:46:13:73:b2:4b:54:de:6a:37:03:da:37:ee:5a:57:88:8d:
d3:81:1a:ae:42:65:0c:f9:83:7e:78:50:2c:01:00:d2:1c:4e:
c6:61:21:68:e6:75:a5:b1:b8:65:44:1a:47:21:fe:c2:ae:c8:
a5:ba:ce:cd:db:30:81:c5:0c:e2:76:7e:23:3f:88:d8:d2:0a:
97:2f:98:ed:14:bf:e6:e3:2e:d3:db:b4:03:52:cf:1e:75:73:
d2:d8:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org