Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
File: 34352e3134302e33362e302f32332d3234203d3e203536393133.roa (raw, json)
Hash identifier: Nh7UaklZRzs208hY8FfNUCYESnnOISbxHXxOs/zWTdo=
Subject key identifier: 0F:66:75:69:D9:B4:64:2A:78:94:45:1B:DD:39:5A:83:FC:A9:47:A5
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 50C4E1052254BD03FB0F6969B7E8E98BD2D4773B
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
Signing time: Wed 27 Sep 2023 12:05:31 +0000
ROA not before: Wed 27 Sep 2023 12:00:31 +0000
ROA not after: Wed 25 Sep 2024 12:05:31 +0000
asID: 56913
IP address blocks: 45.140.36.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:e1:05:22:54:bd:03:fb:0f:69:69:b7:e8:e9:8b:d2:d4:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:31 2023 GMT
Not After : Sep 25 12:05:31 2024 GMT
Subject: CN=0F667569D9B4642A7894451BDD395A83FCA947A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:69:19:6f:5e:42:4a:cc:7a:f4:ed:34:11:
e1:a4:ee:c2:e4:a9:bd:d4:cd:60:b2:5a:51:dd:98:
aa:c2:56:01:ac:01:21:25:75:c7:ae:0d:75:d6:2a:
24:01:e4:a4:6c:51:c0:ee:fd:ba:b7:3a:66:39:59:
aa:d9:8e:b4:02:a0:bf:14:cb:3e:33:62:28:1f:93:
32:44:87:44:01:66:b5:0e:62:66:9d:cd:54:3b:d2:
18:92:48:89:8d:47:5e:c9:ab:32:20:cb:65:73:20:
74:1a:49:4c:d6:c6:90:73:da:ee:1f:cd:8c:3b:c9:
a3:23:fc:9a:68:4f:86:5e:39:7a:de:85:0b:eb:f0:
da:3d:15:95:a1:13:b3:54:d6:7e:a2:fb:fa:bf:ff:
79:83:eb:4a:e6:19:f5:47:a1:b5:52:90:97:ad:18:
ee:09:2c:6c:1b:46:bf:4c:a1:1b:e1:5c:00:18:98:
34:9f:38:b8:51:64:29:c8:59:d1:19:10:df:c8:ea:
89:ef:0a:d7:fa:3c:f8:1d:21:2d:d8:a0:cb:f1:aa:
88:a6:e4:02:a8:cb:a3:da:26:d4:d5:e8:ef:92:7a:
ce:bd:a7:bd:76:81:7e:7a:9d:19:a4:9f:04:46:c9:
9f:4d:a9:90:46:c2:d9:a6:7a:72:90:4a:54:ab:17:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:75:69:D9:B4:64:2A:78:94:45:1B:DD:39:5A:83:FC:A9:47:A5
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:32:b6:1d:78:a4:36:da:97:8f:b9:d9:f8:b2:f5:e6:6e:d1:
a5:52:83:21:eb:82:50:c3:26:9a:74:30:eb:07:48:68:ae:cd:
1b:c5:c0:21:b3:73:44:9d:47:dc:6c:ac:ee:2f:a2:45:c9:a6:
58:11:83:44:24:fb:5d:06:40:1e:19:d9:db:02:24:2b:c9:08:
81:2e:40:94:31:1a:12:f4:8b:fe:7a:8b:17:02:e6:14:8d:35:
16:1c:3c:19:d7:6a:5a:ad:c0:7e:7b:9d:dc:18:fc:70:80:b8:
db:08:f0:c7:bc:ab:f3:03:05:bb:0f:33:8f:71:06:75:f9:47:
b7:fe:cd:62:4d:e1:ec:77:78:7e:74:4a:63:25:a8:99:93:bc:
dc:98:b4:a4:00:a3:6d:06:1b:48:11:8c:96:6f:9d:cc:46:5b:
0e:8e:20:65:81:16:bf:8b:6e:b1:d7:42:54:ef:76:93:c5:08:
6b:c7:70:b9:9e:bd:3c:48:34:39:dd:9c:76:93:78:4d:b4:2e:
f7:1c:46:0f:59:46:b3:17:e7:fd:0e:25:8e:8f:58:6e:d1:ec:
c0:ca:7c:33:d7:ca:6f:87:1b:ef:5c:18:89:0b:5e:5c:58:10:
75:2e:37:5e:f8:8d:53:b2:a1:7c:c5:c6:3f:cd:bf:5c:49:7a:
89:6d:9b:dd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUMThBSJUvQP7D2lpt+jpi9LUdzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzA5MjcxMjAwMzFaFw0yNDA5MjUxMjA1MzFaMDMxMTAvBgNV
BAMTKDBGNjY3NTY5RDlCNDY0MkE3ODk0NDUxQkREMzk1QTgzRkNBOTQ3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1GkZb15CSsx69O00EeGk7sLk
qb3UzWCyWlHdmKrCVgGsASEldceuDXXWKiQB5KRsUcDu/bq3OmY5WarZjrQCoL8U
yz4zYigfkzJEh0QBZrUOYmadzVQ70hiSSImNR17JqzIgy2VzIHQaSUzWxpBz2u4f
zYw7yaMj/JpoT4ZeOXrehQvr8No9FZWhE7NU1n6i+/q//3mD60rmGfVHobVSkJet
GO4JLGwbRr9MoRvhXAAYmDSfOLhRZCnIWdEZEN/I6onvCtf6PPgdIS3YoMvxqoim
5AKoy6PaJtTV6O+Ses69p712gX56nRmknwRGyZ9NqZBGwtmmenKQSlSrF1DdAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUD2Z1adm0ZCp4lEUb3Tlag/ypR6UwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDMwMmUzMzM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjM5MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2M
JDANBgkqhkiG9w0BAQsFAAOCAQEAbDK2HXikNtqXj7nZ+LL15m7RpVKDIeuCUMMm
mnQw6wdIaK7NG8XAIbNzRJ1H3Gys7i+iRcmmWBGDRCT7XQZAHhnZ2wIkK8kIgS5A
lDEaEvSL/nqLFwLmFI01Fhw8GddqWq3Afnud3Bj8cIC42wjwx7yr8wMFuw8zj3EG
dflHt/7NYk3h7Hd4fnRKYyWomZO83Ji0pACjbQYbSBGMlm+dzEZbDo4gZYEWv4tu
sddCVO92k8UIa8dwuZ69PEg0Od2cdpN4TbQu9xxGD1lGsxfn/Q4ljo9YbtHswMp8
M9fKb4cb71wYiQteXFgQdS43XviNU7KhfMXGP82/XEl6iW2b3Q==
-----END CERTIFICATE-----
Generated at Tue Oct 31 00:39:29 2023 by rpki-client on console-ams.rpki-client.org