Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
File: 34352e3132382e31322e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: ySPWjdnUVKG2NRfyfRimJYSKE74uD5h9q0jRrmsuhpI=
Subject key identifier: 97:77:B9:88:91:24:9D:23:A4:9D:9E:3D:51:42:44:4B:1A:33:B7:5A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1486B149799038162B70F31550BFEADF171CA094
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
Signing time: Wed 27 Sep 2023 12:05:38 +0000
ROA not before: Wed 27 Sep 2023 12:00:38 +0000
ROA not after: Wed 25 Sep 2024 12:05:38 +0000
asID: 399073
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:86:b1:49:79:90:38:16:2b:70:f3:15:50:bf:ea:df:17:1c:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:38 2023 GMT
Not After : Sep 25 12:05:38 2024 GMT
Subject: CN=9777B98891249D23A49D9E3D5142444B1A33B75A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:05:d2:57:82:02:9d:6d:8b:00:14:20:52:
70:a6:e6:3f:fc:30:83:d6:4a:5a:c6:ab:78:b0:b2:
8a:5a:cb:bc:d4:1c:f1:7f:90:82:e7:37:8b:c1:d7:
5d:0b:1e:84:2c:51:dd:59:29:f7:0f:5e:05:ca:1c:
7d:6b:f6:a9:d3:da:af:d4:0b:5a:1a:3b:5f:23:8f:
01:8f:8a:46:6b:0a:5a:e3:6d:7a:1a:22:5b:8f:a8:
b1:a7:e1:71:08:3e:98:29:98:07:78:7d:c8:88:22:
94:28:19:63:45:5e:54:96:28:3e:76:0a:8b:e8:9e:
e7:57:1f:7b:3c:40:12:b4:b5:75:0e:a6:31:3b:cd:
2f:5b:1e:de:02:66:f3:78:3f:1e:af:1a:e0:c0:3a:
db:2e:6d:60:53:11:80:1a:c3:a7:a5:f7:98:fe:69:
2c:ff:2f:2a:82:fa:14:0f:72:74:c4:90:2b:3c:76:
c1:f8:12:5d:78:b7:f3:34:cc:c9:3f:21:43:ef:97:
21:97:aa:9b:a5:b0:be:8f:c9:a0:38:13:62:0c:76:
ca:93:77:0a:9a:6f:db:fd:e2:d8:a9:0a:44:ca:35:
f0:21:de:57:08:5a:6b:a2:63:61:c0:fd:e2:48:2d:
06:69:6d:b2:eb:e4:45:8d:9b:51:a3:cf:45:5b:8f:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:B9:88:91:24:9D:23:A4:9D:9E:3D:51:42:44:4B:1A:33:B7:5A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
15:33:7b:df:a9:e7:9a:dc:55:39:d3:db:ed:77:2f:76:ed:93:
0a:b3:79:46:db:11:b6:64:5c:74:97:3e:64:b8:1a:37:26:51:
84:df:02:a3:b4:01:0c:44:54:f5:41:3e:59:e4:ae:b2:05:19:
4e:9c:d6:93:94:da:0c:6f:30:1c:79:29:a3:bb:9e:8e:0b:3b:
ee:96:b6:b6:b8:e1:62:bc:83:1d:0c:de:5b:c2:c9:b5:4b:b4:
01:a9:5d:05:68:ad:22:2a:d9:d7:58:a1:30:69:0e:b0:6c:c5:
8f:85:9e:2d:db:0d:df:4e:77:cc:06:c0:ec:a6:88:54:de:e4:
c0:52:67:69:3a:9d:4e:22:0f:31:54:08:dc:46:8b:81:72:6e:
0b:75:ea:dc:7b:ab:52:fb:42:b9:9c:01:f7:69:d0:15:70:8c:
d0:71:21:7e:dc:ea:ed:d7:34:a2:39:4a:68:a7:ac:2e:10:01:
01:2a:41:7d:43:35:66:72:b8:8e:c7:53:f9:2c:88:f1:d4:f0:
e7:dd:77:56:e1:b2:7f:64:c5:6f:a1:d2:e2:27:85:59:4e:2c:
79:5d:a3:d8:e3:74:00:12:29:ab:29:ad:58:e9:eb:44:92:32:
62:ab:2a:f4:19:69:31:80:43:b4:bd:24:83:7e:0f:d7:8f:80:
05:1d:ba:42
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFIaxSXmQOBYrcPMVUL/q3xccoJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzA5MjcxMjAwMzhaFw0yNDA5MjUxMjA1MzhaMDMxMTAvBgNV
BAMTKDk3NzdCOTg4OTEyNDlEMjNBNDlEOUUzRDUxNDI0NDRCMUEzM0I3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrawXSV4ICnW2LABQgUnCm5j/8
MIPWSlrGq3iwsopay7zUHPF/kILnN4vB110LHoQsUd1ZKfcPXgXKHH1r9qnT2q/U
C1oaO18jjwGPikZrClrjbXoaIluPqLGn4XEIPpgpmAd4fciIIpQoGWNFXlSWKD52
CovonudXH3s8QBK0tXUOpjE7zS9bHt4CZvN4Px6vGuDAOtsubWBTEYAaw6el95j+
aSz/LyqC+hQPcnTEkCs8dsH4El14t/M0zMk/IUPvlyGXqpulsL6PyaA4E2IMdsqT
dwqab9v94tipCkTKNfAh3lcIWmuiY2HA/eJILQZpbbLr5EWNm1Gjz0Vbj5ejAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUl3e5iJEknSOknZ49UUJESxozt1owHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMjM4MmUzMTMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzOTM5MzAzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LYAMMA0GCSqGSIb3DQEBCwUAA4IBAQAVM3vfqeea3FU509vtdy927ZMKs3lG2xG2
ZFx0lz5kuBo3JlGE3wKjtAEMRFT1QT5Z5K6yBRlOnNaTlNoMbzAceSmju56OCzvu
lra2uOFivIMdDN5bwsm1S7QBqV0FaK0iKtnXWKEwaQ6wbMWPhZ4t2w3fTnfMBsDs
pohU3uTAUmdpOp1OIg8xVAjcRouBcm4Lderce6tS+0K5nAH3adAVcIzQcSF+3Ort
1zSiOUpop6wuEAEBKkF9QzVmcriOx1P5LIjx1PDn3XdW4bJ/ZMVvodLiJ4VZTix5
XaPY43QAEimrKa1Y6etEkjJiqyr0GWkxgEO0vSSDfg/Xj4AFHbpC
-----END CERTIFICATE-----
Generated at Fri Sep 29 00:45:02 2023 by rpki-client on console-ams.rpki-client.org