Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20333937353633.roa
File: 34352e39332e3138342e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: wzEQVVLafEWmxG/rllGgeRzlekY+xydQjVOJAXvz6eU=
Subject key identifier: 93:70:BB:25:23:25:75:08:A0:4B:C5:08:15:FF:3F:7A:52:B7:CE:6C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 1A1CE202A4D2799D36FCD327A4C6C4887ED2ED1C
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20333937353633.roa
Signing time: Sat 03 Jun 2023 12:07:24 +0000
ROA not before: Sat 03 Jun 2023 12:02:24 +0000
ROA not after: Sat 01 Jun 2024 12:07:24 +0000
asID: 397563
IP address blocks: 45.93.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1c:e2:02:a4:d2:79:9d:36:fc:d3:27:a4:c6:c4:88:7e:d2:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 3 12:02:24 2023 GMT
Not After : Jun 1 12:07:24 2024 GMT
Subject: CN=9370BB2523257508A04BC50815FF3F7A52B7CE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:b9:61:35:54:c5:c6:81:fe:cc:0f:65:6d:
34:2a:08:4f:08:62:70:39:89:aa:17:f4:8b:dc:32:
88:18:9f:bb:b7:7b:b9:ef:67:f6:b8:db:41:ac:3b:
97:62:51:79:4d:48:fe:4b:6f:da:f3:05:e4:6c:cb:
7d:79:c2:b3:c6:7f:25:89:2d:6d:3b:64:bb:1d:7e:
1b:e6:f6:6e:4c:c8:f5:f9:bc:fc:aa:14:14:b0:54:
0f:21:95:09:ac:ff:7a:23:26:aa:ba:1c:32:26:35:
fb:33:29:5b:b6:2a:2e:70:6e:f5:d3:94:4c:a9:ed:
1e:3b:1a:2e:ed:a0:49:20:13:3e:85:9a:29:d4:f7:
ad:7a:49:05:7b:dc:40:a7:9c:02:90:a4:a7:fc:0c:
bd:b0:2f:b2:a4:e1:65:e4:67:fb:b0:26:6b:31:1e:
e6:a3:a8:cc:b4:b1:62:57:28:3c:cf:43:ae:bb:54:
37:ba:21:8e:03:31:bf:65:d7:aa:ee:88:31:85:1a:
49:63:71:4c:42:01:f9:b0:ec:46:65:b7:2f:eb:e1:
51:86:c1:a6:67:f1:7b:3b:40:6c:06:d7:27:7a:12:
23:58:9b:f7:46:b5:3b:0b:d3:3d:93:f7:93:26:d2:
9e:5e:ff:64:3c:37:d9:f3:15:da:f0:be:fc:9d:b9:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:BB:25:23:25:75:08:A0:4B:C5:08:15:FF:3F:7A:52:B7:CE:6C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cc:49:4a:b4:7f:2e:17:07:ad:3b:f0:29:4b:f0:3a:5a:ac:
9c:ce:a1:b7:06:01:f8:a8:3b:f3:10:27:e0:03:ac:f9:49:a0:
ca:bf:fa:b6:ad:87:3d:bd:fd:e8:9b:71:43:e5:d5:16:ee:32:
da:10:d4:3a:73:9a:ed:39:7c:d3:84:e5:b8:80:cd:24:85:ae:
1a:ec:cf:dc:12:e7:1f:76:ec:4a:b3:4c:f2:7b:cc:02:64:a7:
28:04:5b:69:34:0c:64:64:57:c6:06:4b:db:fb:ce:e5:b3:5f:
ec:d4:29:3c:e5:a9:c5:3b:69:4b:80:0f:9b:74:01:78:0a:20:
c4:62:ab:f1:77:9f:3b:f8:07:d0:9e:b4:c2:c8:6c:e3:e1:6a:
b2:a3:fa:7f:8d:a6:48:7a:02:34:4b:ff:97:3c:41:e1:83:2e:
c9:08:df:86:30:83:12:ff:a1:0f:cc:ec:8e:a5:a1:5e:c6:46:
64:ac:21:b4:07:fd:d7:b6:c1:43:ee:93:87:56:f3:78:cd:4c:
b6:72:ee:f8:cc:f9:71:46:92:fd:28:e5:c7:eb:42:9a:03:49:
19:c5:b9:ec:5a:0a:f3:1e:03:08:78:c3:bd:80:4d:3a:6b:e6:
01:32:a2:6c:19:c8:13:02:90:a5:d7:91:03:ac:9c:6f:87:eb:
41:91:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org