Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
File: 34352e3134302e33392e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: z5BweBb8mzDcrn3Wol52ShTjuibk+p29C1GTNIpMmB4=
Subject key identifier: 87:D0:73:40:FF:B2:FA:BA:A3:75:D0:E1:FB:61:7C:7F:5B:52:8B:77
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 3D9D94C5A1785ABB3795B5E78C2E6D7FCD6978A6
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 27 Sep 2023 12:05:29 +0000
ROA not before: Wed 27 Sep 2023 12:00:29 +0000
ROA not after: Wed 25 Sep 2024 12:05:29 +0000
asID: 400866
IP address blocks: 45.140.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9d:94:c5:a1:78:5a:bb:37:95:b5:e7:8c:2e:6d:7f:cd:69:78:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:29 2023 GMT
Not After : Sep 25 12:05:29 2024 GMT
Subject: CN=87D07340FFB2FABAA375D0E1FB617C7F5B528B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:12:fb:76:5d:ff:ce:d9:20:41:3b:9e:89:
8b:a9:d1:f1:2d:cd:58:1c:ef:1d:b9:f9:ca:37:90:
c1:95:77:05:ad:f6:bf:e4:c2:ae:7e:7a:03:c5:21:
fa:d3:de:b5:6b:4d:97:9b:b5:69:c9:97:2e:25:06:
88:ea:5a:a1:66:4d:f2:e5:1a:47:78:63:ad:49:a2:
37:39:65:e0:5d:b2:9b:3a:76:1e:55:36:4b:74:32:
15:f0:64:c5:d3:b5:a0:2a:0f:5a:f6:dd:d0:79:3b:
7f:f0:9c:52:b8:85:e5:38:fb:4d:2f:85:b7:90:98:
47:ba:3c:dd:5c:82:7d:37:93:db:7b:df:90:ff:e2:
85:c7:b3:e4:cc:6b:a7:94:e7:0c:b1:1e:fa:0e:41:
e3:db:66:97:64:a5:96:66:76:c3:ad:90:51:a9:0f:
6d:cf:62:65:38:b9:78:34:83:ce:b9:16:c9:d1:2e:
06:b7:15:3b:03:28:d9:c7:51:8e:d4:34:e3:ba:ba:
54:0c:3c:0c:fb:04:5d:d6:e8:66:95:45:a5:82:1f:
62:2f:d1:0c:7b:1d:3d:4a:ff:00:df:bd:be:8d:28:
2a:f5:68:c8:da:75:a0:34:45:fe:a8:86:38:a2:04:
2a:01:54:ff:ed:bd:e6:53:09:27:0f:ea:8e:10:49:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:73:40:FF:B2:FA:BA:A3:75:D0:E1:FB:61:7C:7F:5B:52:8B:77
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33392e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.39.0/24
Signature Algorithm: sha256WithRSAEncryption
94:81:89:3a:65:12:68:94:04:f4:2c:9b:52:2c:17:f1:91:53:
9a:ab:bd:c4:c3:59:29:be:87:55:2f:68:b9:7b:78:d0:b5:88:
ca:10:f7:9f:9d:78:50:cb:7e:ed:b5:04:24:34:f9:fd:f9:e4:
83:b2:64:9e:bb:cf:38:11:e8:70:23:67:51:ad:8f:d7:5e:50:
a0:9c:30:eb:60:40:0c:15:92:f3:b6:fd:50:c2:9e:8d:9e:c1:
6d:14:6e:3e:b9:fe:c2:9d:be:94:59:84:60:51:09:e2:9d:a5:
ab:a5:32:fc:f2:3b:f9:c8:ae:2d:ff:d6:47:62:62:64:74:3e:
3d:e2:60:d3:5d:b0:8e:04:36:61:21:36:fa:3b:c5:50:eb:46:
28:5d:12:d0:c9:e5:78:1c:55:33:dd:42:8d:69:89:5b:5e:a0:
05:37:e5:eb:c2:00:bc:4b:e8:73:a6:2c:94:eb:f3:36:33:02:
99:f7:93:7e:6d:51:f6:80:bc:69:11:61:be:ea:c7:73:52:d6:
4e:a2:2d:95:05:0d:41:64:ad:fd:92:43:ba:2c:57:65:bb:50:
65:6b:9e:dd:49:f1:ce:47:c1:cf:7e:6e:e6:64:ff:da:d4:eb:
39:5f:72:55:bc:08:ce:e7:33:3c:be:54:6a:01:a8:e5:84:d5:
c3:28:36:cf
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 20 00:46:19 2023 by rpki-client on console-fra.rpki-client.org