Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e203631313338.roa
File: 34352e39332e3138352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: pwCi4FULX1qnGhsr7sLiVFv/CJ3/wuf6V6u+1q0yo20=
Subject key identifier: 8E:88:F1:3F:4A:11:17:34:70:A9:4A:76:F6:C8:46:89:50:BD:3C:72
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 56451661103F030D5B768695B08949730AF77B47
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e203631313338.roa
Signing time: Thu 01 Jun 2023 15:43:44 +0000
ROA not before: Thu 01 Jun 2023 15:38:44 +0000
ROA not after: Thu 30 May 2024 15:43:44 +0000
asID: 61138
IP address blocks: 45.93.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:45:16:61:10:3f:03:0d:5b:76:86:95:b0:89:49:73:0a:f7:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jun 1 15:38:44 2023 GMT
Not After : May 30 15:43:44 2024 GMT
Subject: CN=8E88F13F4A11173470A94A76F6C8468950BD3C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:85:6c:e8:31:21:65:9a:15:5e:32:e1:dc:
ac:91:10:e9:93:a2:04:ca:7b:3d:1f:03:81:c8:0a:
f0:de:40:cd:bd:0b:92:b5:10:12:33:59:27:d6:85:
3a:f0:f5:ed:ed:49:60:58:2e:1a:60:ec:d2:06:4a:
64:ff:49:76:45:38:ae:20:8b:83:7c:40:6d:13:89:
d8:e7:b9:8e:ef:eb:9b:f7:a4:58:79:47:0a:63:46:
f3:45:60:dd:74:f0:4e:aa:ec:ab:e7:9e:94:a9:00:
fb:3b:11:fc:b4:5e:fe:a3:be:e3:fd:f1:b2:80:fc:
a5:68:60:f3:e8:84:f8:c9:0a:9a:2d:b7:59:1d:fa:
dd:f7:c6:83:fa:73:a7:00:78:61:a6:cd:07:80:7a:
96:75:3f:66:e3:87:9f:17:dc:8b:96:42:ea:e6:6a:
6d:01:5e:44:5c:89:fc:98:ff:a8:dc:7a:41:7e:e2:
d7:ed:48:c2:5d:77:2f:df:aa:57:b5:a2:b4:8c:b7:
2a:22:f0:d8:68:56:3b:40:67:a4:d1:b4:44:61:a4:
05:b0:4b:c9:4f:42:1c:53:e3:32:4a:bb:59:0c:67:
88:bf:70:83:e7:89:b0:e8:20:4c:32:3d:ba:5a:ed:
56:19:19:1e:99:13:26:29:0d:04:c8:17:69:59:f8:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:F1:3F:4A:11:17:34:70:A9:4A:76:F6:C8:46:89:50:BD:3C:72
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.185.0/24
Signature Algorithm: sha256WithRSAEncryption
37:37:6e:c2:51:5b:fd:63:94:d8:0c:a1:25:e3:44:6e:df:09:
38:9e:b1:16:23:bb:4f:b1:45:0b:d9:48:f7:cc:8e:b8:a7:fc:
49:bd:fb:b8:f7:b9:93:e0:3f:41:2f:21:aa:7c:16:63:73:56:
68:bb:86:be:80:c9:35:71:fd:03:de:53:04:07:52:8e:3d:cf:
d4:c3:ba:19:ca:55:65:92:b4:5c:a3:61:ce:2f:93:81:80:dd:
1f:be:33:33:3b:f2:16:e8:a5:8f:24:c6:4c:91:2c:aa:d5:ee:
fc:ea:db:b3:f9:2e:85:de:eb:16:89:07:c6:dd:25:75:8e:54:
55:93:fd:c8:9b:3d:11:d9:0a:1f:ab:ac:38:6b:76:bd:4b:36:
05:28:ac:be:76:38:d0:19:e4:19:3b:e5:ae:04:a8:17:fc:1c:
b5:78:64:d7:98:ca:c2:dd:a0:48:6d:5f:18:03:c5:d0:16:69:
47:99:b9:5d:4e:8f:24:66:6e:d2:4c:91:22:dd:25:b2:9c:8c:
43:ec:e0:c3:89:87:10:49:2d:51:61:99:7c:04:ba:ee:11:d8:
79:95:74:87:69:bd:59:13:10:7f:46:cf:00:21:69:15:d2:7f:
67:52:8c:02:41:c2:4d:37:eb:dc:b8:fc:8c:64:6a:96:a8:cc:
76:e6:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org