Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e20383334.roa
File: 34352e39332e3138362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: hMNUeKz966pI/svZYP75xYN2jKEX5zQQBjiw5cxT2Bo=
Subject key identifier: 8E:A1:34:96:52:7B:09:4F:05:0C:D9:43:AF:31:9C:35:84:A4:16:1F
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 2449126CF669A15EC9AEA9F34DF6EF26C38DECC6
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e20383334.roa
Signing time: Wed 31 May 2023 00:00:10 +0000
ROA not before: Tue 30 May 2023 23:55:10 +0000
ROA not after: Wed 29 May 2024 00:00:10 +0000
asID: 834
IP address blocks: 45.93.186.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:49:12:6c:f6:69:a1:5e:c9:ae:a9:f3:4d:f6:ef:26:c3:8d:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: May 30 23:55:10 2023 GMT
Not After : May 29 00:00:10 2024 GMT
Subject: CN=8EA13496527B094F050CD943AF319C3584A4161F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:89:f8:b3:fb:63:50:b1:79:3d:81:2e:c9:
07:11:b6:ba:ae:d2:f2:15:5b:94:d6:07:fd:f5:18:
ae:d3:20:fa:a8:31:2b:c4:22:b0:2b:11:4d:ca:23:
79:62:b7:c0:5e:ac:89:3f:a0:bc:54:24:53:d5:46:
2b:c9:45:f7:e7:57:0f:fc:dd:d3:3b:4b:87:2e:ec:
18:d9:91:87:c7:20:3d:61:ae:19:02:b2:44:ad:55:
ca:6b:e8:d7:24:fd:34:17:10:d1:a7:d3:43:63:cf:
de:ab:83:21:f5:ef:20:97:3c:1a:2b:ff:3f:30:0b:
e6:0c:51:f2:df:0d:cd:8e:f7:95:59:59:7a:11:a7:
4d:44:80:88:cf:c0:70:32:27:05:59:1a:65:f6:8e:
c8:fa:48:db:0e:12:d9:7d:7d:68:12:74:16:d0:a0:
2f:0f:61:49:09:38:29:fe:a1:fa:63:c2:e7:8c:68:
45:f6:fa:84:70:7f:be:0a:a3:e2:17:63:e8:75:e5:
9d:bd:f1:0c:a3:fe:e5:be:1f:fa:56:de:6e:c3:99:
95:4c:fe:e6:fd:d6:b7:d3:41:c7:6f:5c:cd:6f:25:
60:a4:a3:8e:50:c1:f7:7e:8f:9b:15:3b:79:48:de:
ab:93:2b:39:62:e8:b0:42:20:f7:a1:f2:73:4a:a4:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:34:96:52:7B:09:4F:05:0C:D9:43:AF:31:9C:35:84:A4:16:1F
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:92:1a:05:86:7b:47:6d:b8:3e:cf:70:8b:d4:3f:0e:df:93:
9d:00:cc:3f:99:ba:23:29:60:0c:b7:10:86:79:d9:72:91:f2:
be:40:c2:89:82:5f:bd:d7:59:83:0c:35:a8:32:c4:e4:de:24:
dd:02:6b:f2:6a:b0:e2:bf:74:62:d8:37:bb:af:18:4d:2c:51:
76:d3:65:05:4b:48:a1:ea:26:de:d1:55:34:71:2c:7c:dc:58:
c6:05:67:88:0d:db:8b:17:68:60:d9:62:a0:79:1e:c5:f7:f9:
c8:df:26:97:37:28:df:fa:8d:f4:79:33:b1:43:b4:75:75:d4:
69:d3:07:c1:f0:5c:7b:4a:2a:b4:fd:f4:48:ac:de:a5:b7:e7:
cb:41:93:30:a0:ea:33:2c:59:55:6a:3c:e9:c0:5c:fe:88:c1:
ad:84:74:a1:b8:c2:67:cd:57:2c:75:28:22:8d:ce:fa:8f:54:
07:6e:6c:8e:7d:1e:fa:8e:11:a9:83:5e:44:f1:87:3d:f4:5e:
68:ca:fa:2e:65:9e:1b:c6:e5:4b:a5:4e:b2:c8:3a:d0:af:1e:
32:57:94:ef:68:9c:48:b0:02:d6:9c:55:d3:0c:9d:e9:e4:08:
3b:d2:d8:14:c6:15:8b:fd:7f:c4:13:ca:06:9a:6b:1c:89:42:
7a:1b:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 08:51:39 2023 by rpki-client on console-ams.rpki-client.org