Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
File: 34352e39332e3138342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 67q4YU7/ZqJrxaLifiYRdVKzI+gg8GzZ8o0qFYspQE0=
Subject key identifier: 1F:AA:2C:7B:E5:2D:41:78:21:F0:EC:4C:9B:9E:C0:C5:42:BA:63:72
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3A9FF2E4D4DDC7D4858496B9A77122F3694873A6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
Signing time: Wed 31 May 2023 00:00:23 +0000
ROA not before: Tue 30 May 2023 23:55:23 +0000
ROA not after: Wed 29 May 2024 00:00:23 +0000
asID: 834
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9f:f2:e4:d4:dd:c7:d4:85:84:96:b9:a7:71:22:f3:69:48:73:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: May 30 23:55:23 2023 GMT
Not After : May 29 00:00:23 2024 GMT
Subject: CN=1FAA2C7BE52D417821F0EC4C9B9EC0C542BA6372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:5c:ef:55:a9:fe:45:46:3c:65:ac:4b:39:
65:39:0e:46:96:6c:53:72:20:4a:a4:66:45:f9:3f:
b1:07:f7:87:0c:01:5a:0f:c9:99:11:35:eb:ad:ee:
b8:92:7a:47:ec:2a:44:2a:5b:d6:ee:12:6f:6e:68:
89:2b:b7:a6:45:3b:1c:06:ef:57:ec:4b:09:c2:56:
5e:cb:c7:67:d8:dc:4c:34:da:fa:91:a9:d7:aa:66:
66:95:d5:f5:43:93:16:00:68:55:47:54:81:91:08:
63:68:d6:f0:89:80:56:71:8d:84:11:e8:fb:05:a3:
e6:43:54:bd:8b:fb:87:bd:8b:c6:e0:75:64:5d:aa:
77:da:3a:4b:85:e9:2e:ac:08:c4:e5:7c:bb:54:bd:
ba:9b:41:2c:7f:15:a8:c9:34:37:ee:b6:8c:b9:ed:
d8:30:95:43:dc:ed:2d:56:d0:e8:94:cb:8b:8b:ed:
a9:0a:18:eb:91:8e:c2:c6:8a:0f:cc:f0:3d:ed:b6:
91:05:fd:d1:e7:5f:c7:1b:6a:17:cc:d5:f3:d9:a8:
c8:67:69:02:b4:c1:40:e3:ed:5c:a7:8d:76:a0:4f:
c8:71:72:10:72:95:56:d2:ac:22:c9:24:e7:d3:38:
98:73:54:44:26:22:df:eb:21:25:47:a2:4f:fe:ba:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:2C:7B:E5:2D:41:78:21:F0:EC:4C:9B:9E:C0:C5:42:BA:63:72
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c6:1b:52:79:b1:ef:92:6b:cf:9d:61:ea:6f:5a:b4:9f:35:
87:0d:e6:14:64:db:89:04:9f:67:79:3c:26:f7:de:6f:c3:c9:
03:8d:ad:05:51:c5:89:c9:ce:71:5c:4d:a4:7c:e9:0d:3e:f1:
6b:1e:44:dc:d5:5f:a5:9f:b8:eb:c4:80:bc:d2:b5:90:1b:02:
43:f7:93:22:95:36:5f:1d:c8:ad:dc:08:76:a2:f6:f8:01:08:
61:2b:bb:99:d6:40:c9:2f:af:2a:e2:e9:c3:92:bc:d4:fb:0e:
e0:9d:f8:7b:b4:cb:48:b9:f1:43:91:0e:3d:c8:4f:b5:b5:ab:
fc:75:08:c6:6f:3f:7f:aa:d8:60:9e:35:1c:2b:20:06:d4:54:
ff:c4:99:67:82:e9:ee:cd:76:3e:8c:a4:04:8a:d2:7a:7b:47:
ba:00:b0:dc:f8:04:3d:6d:da:80:87:b4:95:95:a0:66:00:25:
e2:0e:93:ac:be:6b:79:38:a2:44:b2:22:60:84:30:dd:32:6d:
77:59:4f:e5:48:dc:92:71:5f:47:63:c8:3f:40:cf:e5:ea:0c:
7a:82:b8:62:63:b7:d1:c9:a2:a2:60:af:be:ec:c4:4b:ca:76:
d6:25:fb:d2:cf:b4:d0:c3:92:0c:c4:57:25:d0:1a:c8:46:4c:
38:14:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 20:06:54 2023 by rpki-client on console-fra.rpki-client.org