Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20383334.roa
File: 34352e39332e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Nt/5EM0cUzWXpm0fVyIfarhckM/607AiSGLusQ0EzsQ=
Subject key identifier: 9C:FD:E7:F8:CA:35:E0:EF:D3:7E:4D:7B:13:84:F6:7D:A7:12:E7:5C
Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial: 3AE8B989A56129FED8CD1BF6CD4EF58152FD746B
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Jul 2023 11:00:11 +0000
ROA not before: Wed 05 Jul 2023 10:55:11 +0000
ROA not after: Wed 03 Jul 2024 11:00:11 +0000
asID: 834
IP address blocks: 45.93.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e8:b9:89:a5:61:29:fe:d8:cd:1b:f6:cd:4e:f5:81:52:fd:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Validity
Not Before: Jul 5 10:55:11 2023 GMT
Not After : Jul 3 11:00:11 2024 GMT
Subject: CN=9CFDE7F8CA35E0EFD37E4D7B1384F67DA712E75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:7e:df:dd:af:91:ef:60:50:a2:d1:69:97:
b2:0f:ae:a5:49:54:63:15:33:1e:2a:a0:a0:8e:92:
5e:ca:68:ca:9c:ce:22:45:00:f6:81:c4:19:a4:dd:
ee:5c:9d:d6:a5:5c:7e:21:f8:de:6a:cb:87:63:3b:
fd:77:fb:5b:20:f8:22:4b:70:76:3d:e0:9b:c6:f7:
08:68:89:3c:3a:cd:e2:d1:40:85:fa:06:d5:47:8c:
d7:64:29:6a:b9:c0:0a:67:0c:3a:b5:74:16:fb:2a:
09:5f:a9:74:7a:38:ab:cf:ac:05:a8:8c:d0:bf:14:
fe:b7:db:7e:52:3d:dd:53:da:68:ac:48:40:34:e0:
91:88:ba:b8:b0:bc:ff:c3:2c:9f:6e:30:ed:97:1d:
37:a8:68:61:7d:80:66:a0:c2:1a:68:ef:ed:7f:75:
ac:b6:09:f2:93:df:c1:88:8e:75:c9:63:c4:05:9e:
0c:c7:a1:12:6c:95:6d:a1:c2:ba:9e:ef:c0:5c:82:
f3:98:30:95:81:ad:cb:8f:1f:4f:29:87:7c:f5:00:
7a:f1:86:10:3f:6c:d4:62:27:72:e9:e5:dd:e7:7c:
ff:f6:1f:1f:06:5f:25:f1:e1:ab:59:f1:7e:5c:be:
5e:92:db:96:aa:24:3d:9b:a8:62:1b:d9:14:f8:02:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:E7:F8:CA:35:E0:EF:D3:7E:4D:7B:13:84:F6:7D:A7:12:E7:5C
X509v3 Authority Key Identifier:
keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e39332e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:79:51:5f:ca:92:10:be:87:04:6a:ed:09:30:79:81:75:9f:
64:f1:67:29:ec:4c:70:79:55:28:54:b4:3f:cb:74:28:c6:ed:
eb:20:cd:d3:7e:a4:72:d9:31:65:0d:29:fd:9c:a7:89:8e:5b:
aa:f8:1c:f3:de:15:b4:0d:d1:f2:ae:c6:e1:6d:47:79:e3:33:
69:c0:67:15:b3:b1:1b:27:20:bc:19:a1:28:dd:24:c9:98:b6:
89:71:ab:55:77:1e:b3:52:fd:aa:bb:3d:bc:96:bd:f0:67:3e:
25:d0:28:a5:46:d2:76:3a:b6:64:1c:ca:46:10:c8:86:87:8b:
43:20:29:bd:b0:71:4b:b0:4e:ac:e8:c7:27:77:cb:13:aa:4e:
69:f7:67:8c:3a:41:b0:43:1a:12:c8:12:5f:4f:f5:e0:54:b8:
51:b8:6f:c2:8d:41:09:06:48:cf:d1:d9:34:c0:9e:c8:a7:05:
2d:c6:9c:f5:17:9b:29:f4:a4:d5:f2:e4:ad:50:4e:2d:42:4b:
e6:2e:a1:98:4a:12:41:6f:25:ec:bd:93:af:e4:33:ef:79:2c:
28:fe:41:17:4a:c1:25:26:37:fc:ce:15:96:90:37:7c:4e:af:
15:59:df:16:68:44:05:43:1c:69:a9:60:71:ea:35:3f:75:45:
bc:bd:28:57
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUOui5iaVhKf7YzRv2zU71gVL9dGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4
YTZjOTYxYTAeFw0yMzA3MDUxMDU1MTFaFw0yNDA3MDMxMTAwMTFaMDMxMTAvBgNV
BAMTKDlDRkRFN0Y4Q0EzNUUwRUZEMzdFNEQ3QjEzODRGNjdEQTcxMkU3NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0B37f3a+R72BQotFpl7IPrqVJ
VGMVMx4qoKCOkl7KaMqcziJFAPaBxBmk3e5cndalXH4h+N5qy4djO/13+1sg+CJL
cHY94JvG9whoiTw6zeLRQIX6BtVHjNdkKWq5wApnDDq1dBb7KglfqXR6OKvPrAWo
jNC/FP63235SPd1T2misSEA04JGIuriwvP/DLJ9uMO2XHTeoaGF9gGagwhpo7+1/
day2CfKT38GIjnXJY8QFngzHoRJslW2hwrqe78BcgvOYMJWBrcuPH08ph3z1AHrx
hhA/bNRiJ3Lp5d3nfP/2Hx8GXyXx4atZ8X5cvl6S25aqJD2bqGIb2RT4AvBxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUnP3n+Mo14O/Tfk17E4T2facS51wwHwYDVR0j
BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh
ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw
c2xoby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYt
MTc1OC00YmJkLWFlODEtM2E3MTA3ZDlhODQ1LzAvMzQzNTJlMzkzMzJlMzEzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV26MA0G
CSqGSIb3DQEBCwUAA4IBAQC5eVFfypIQvocEau0JMHmBdZ9k8Wcp7ExweVUoVLQ/
y3Qoxu3rIM3TfqRy2TFlDSn9nKeJjluq+Bzz3hW0DdHyrsbhbUd54zNpwGcVs7Eb
JyC8GaEo3STJmLaJcatVdx6zUv2quz28lr3wZz4l0CilRtJ2OrZkHMpGEMiGh4tD
ICm9sHFLsE6s6Mcnd8sTqk5p92eMOkGwQxoSyBJfT/XgVLhRuG/CjUEJBkjP0dk0
wJ7IpwUtxpz1F5sp9KTV8uStUE4tQkvmLqGYShJBbyXsvZOv5DPveSwo/kEXSsEl
Jjf8zhWWkDd8Tq8VWd8WaEQFQxxpqWBx6jU/dUW8vShX
-----END CERTIFICATE-----
Generated at Wed Aug 30 08:36:14 2023 by rpki-client on console-fra.rpki-client.org