Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20383334.roa
File: 34352e39332e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: R4WhGhWyBtRQtCZ5COtSQxY6nbocnVwInwAA3YSeleU=
Subject key identifier: 9A:03:1E:DF:AF:73:DF:D8:37:D8:88:DB:38:2E:4E:79:14:BF:86:38
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 4BBEA6914C3E08849EDC1CA3A3FC034302D7E449
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Jul 2023 11:00:08 +0000
ROA not before: Wed 05 Jul 2023 10:55:08 +0000
ROA not after: Wed 03 Jul 2024 11:00:08 +0000
asID: 834
IP address blocks: 45.93.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:be:a6:91:4c:3e:08:84:9e:dc:1c:a3:a3:fc:03:43:02:d7:e4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 5 10:55:08 2023 GMT
Not After : Jul 3 11:00:08 2024 GMT
Subject: CN=9A031EDFAF73DFD837D888DB382E4E7914BF8638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:85:a0:b5:99:f8:4b:ea:41:fe:3e:02:b8:
d7:51:32:51:1c:51:6e:5b:d6:3a:9a:c0:f0:96:b2:
5f:56:e4:77:1b:07:e9:58:c6:4c:63:af:78:b0:62:
66:ad:86:b8:c2:b9:f1:07:d8:86:8e:86:9c:81:44:
ad:6b:b0:4d:85:e0:64:c0:29:9f:54:99:e6:d6:9a:
8b:65:d8:95:9c:29:51:bb:f5:e6:37:85:39:a3:42:
2e:89:35:3c:72:44:1b:5f:53:e2:d3:1e:42:68:72:
9e:48:3b:60:fb:f0:e6:37:6b:50:a7:49:65:ea:72:
6b:72:3a:be:c0:02:37:e5:15:3a:56:62:21:bc:4e:
12:bc:2a:66:96:c7:bb:b0:30:ea:f5:c7:dc:b7:3a:
00:e8:8f:77:35:02:1b:02:20:a1:02:57:0e:76:7b:
fd:1f:cc:4b:95:8e:dd:a3:5e:98:80:a6:93:d0:4a:
47:8e:c5:e5:c2:3f:de:10:de:bc:df:3b:8b:47:7a:
80:9d:90:df:20:a9:f9:2c:15:7f:17:2e:49:e6:76:
f5:21:d6:29:9c:b1:3b:f9:df:ae:59:56:c4:9f:08:
d9:80:ac:07:30:af:4b:76:de:02:1b:91:6a:6a:8b:
da:5f:6b:fd:30:1a:e0:e5:b3:1e:cb:a7:03:f6:03:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:1E:DF:AF:73:DF:D8:37:D8:88:DB:38:2E:4E:79:14:BF:86:38
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:02:6f:a4:01:7e:c2:07:f4:78:d9:e9:0c:cf:81:85:a6:4a:
0d:8a:af:b5:fc:14:c7:a7:08:1b:9f:ee:01:c1:90:4c:50:b8:
7f:9c:6f:58:a2:59:6b:13:92:2c:ee:47:1f:07:d1:6f:0a:27:
15:17:b1:6c:ad:4d:a5:47:06:35:97:b7:cb:23:f9:8c:c3:a8:
2b:1d:74:88:98:8a:a9:2b:46:a1:5e:ed:b4:80:93:01:fc:a8:
27:a5:13:43:8d:a9:60:2b:64:b4:6f:d2:35:24:e7:1e:a5:ec:
c8:84:36:29:fe:d8:ce:c1:e3:f6:c3:c0:55:44:3b:86:63:58:
12:48:af:c8:6a:27:4a:a0:98:90:3b:1b:5c:63:89:7d:97:13:
66:b4:b3:63:42:d6:a8:2b:75:6e:64:5c:46:1b:68:43:1d:8d:
66:59:62:f2:46:67:da:d5:f5:89:fc:02:60:ec:cd:88:d7:a6:
79:51:18:de:e7:4f:ab:fb:ae:27:a2:36:91:79:fa:75:85:ee:
c4:a3:60:63:a5:ae:ae:40:f9:bc:08:a2:1d:3f:60:2e:7f:e0:
f0:7b:ff:8c:21:3c:16:83:43:c0:59:8c:04:b6:cd:97:df:dd:
63:db:99:e8:d1:20:59:ac:11:7a:f3:cc:09:f7:77:7d:2d:f6:
a2:82:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 20:06:54 2023 by rpki-client on console-fra.rpki-client.org