Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e20383334.roa
File: 34352e39332e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wBXrLPVwX2S51+wqt+s06R6LelN60L9kjE/UfPeZpaw=
Subject key identifier: 42:55:D6:E3:63:0C:9E:8D:DC:A8:E5:54:E4:40:84:07:C5:9B:AE:92
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 32C786387D39C06B52FFAB976C87133A100E0B2A
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 10:00:10 +0000
ROA not before: Sun 02 Jul 2023 09:55:10 +0000
ROA not after: Sun 30 Jun 2024 10:00:10 +0000
asID: 834
IP address blocks: 45.93.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c7:86:38:7d:39:c0:6b:52:ff:ab:97:6c:87:13:3a:10:0e:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 2 09:55:10 2023 GMT
Not After : Jun 30 10:00:10 2024 GMT
Subject: CN=4255D6E3630C9E8DDCA8E554E4408407C59BAE92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:69:30:71:a8:50:ab:e9:24:06:95:65:2b:
f8:4f:98:c1:9c:89:d5:7f:19:65:d8:2a:9e:27:0b:
52:fd:11:d4:bb:26:3a:c7:f2:45:61:06:8b:87:40:
24:9d:de:76:d8:9b:1a:92:22:c7:e1:d1:24:41:18:
3e:42:87:8c:f2:de:03:f7:a0:ca:fe:22:be:ed:25:
d5:d8:3f:7e:13:d2:a5:b5:fa:f8:f3:38:a7:9e:d1:
2d:b5:ad:76:e5:f0:ea:26:9c:6b:fb:40:2e:fd:a3:
ed:f2:b9:a7:ba:8b:cc:59:5c:63:45:93:fa:a2:9d:
9a:c1:3f:ba:39:4c:77:69:e9:18:53:b6:a3:1a:c2:
b9:32:b6:a4:8e:b3:67:e9:68:03:fe:91:65:5d:f8:
c0:b5:ea:fb:15:c4:50:a3:1b:75:48:65:d9:52:d1:
90:cb:34:c5:d1:ca:31:c8:52:ec:25:89:e3:09:1b:
98:ad:1a:24:2a:30:57:64:b9:01:fd:75:2c:90:a1:
83:0b:43:cd:b5:0c:d3:6d:a8:14:a8:74:4b:ed:e9:
5b:9b:5f:3d:da:13:a4:76:3c:df:8c:66:42:37:e3:
d1:c6:d4:ea:32:12:09:0b:9e:04:b3:5f:a0:3d:bc:
8d:17:06:74:2d:4c:d4:23:ff:93:18:48:24:81:d1:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:D6:E3:63:0C:9E:8D:DC:A8:E5:54:E4:40:84:07:C5:9B:AE:92
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.185.0/24
Signature Algorithm: sha256WithRSAEncryption
83:11:00:a9:75:08:6b:00:61:81:c9:00:ec:1b:a6:bb:79:63:
44:d8:b7:c1:04:4e:19:9d:cc:39:9b:6f:35:dc:20:1e:21:79:
58:8d:99:5d:6b:33:da:71:a2:5b:7c:7b:40:eb:9c:f2:d3:c0:
50:47:83:3d:8c:46:55:4c:72:0d:ef:96:27:8f:cf:ca:86:35:
0a:54:4e:69:f0:cd:2e:20:b1:41:18:a9:aa:e4:62:79:0e:23:
ec:5c:1c:1b:b6:81:7f:68:88:68:0d:6b:12:79:2d:8f:cb:5d:
b7:1b:76:3d:28:2a:3f:b8:d0:09:8c:bd:c7:ce:49:b9:29:c0:
11:42:78:03:4d:ed:75:99:ba:d9:48:4d:13:2f:6f:2d:c7:49:
02:8d:5d:26:e5:88:7c:21:2b:f9:d6:67:1d:65:d7:72:eb:57:
57:96:74:74:d8:f0:24:a4:2c:14:c3:4f:fb:d4:c8:1c:cf:b1:
55:e4:70:2e:c9:28:d5:76:7c:59:d9:34:ca:ba:19:dc:3c:3b:
40:5b:28:a5:15:ae:23:d8:b8:8a:72:f8:a3:f2:b8:eb:ce:39:
50:29:94:fb:17:32:91:e2:77:72:2b:c7:9c:dd:e9:7f:17:d6:
2b:4c:58:23:82:22:e4:84:22:84:20:b0:bb:51:49:b3:9c:3b:
e4:22:02:b9
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 20:04:27 2023 by rpki-client on console-ams.rpki-client.org