Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20333939303733.roa
File: 34352e38392e3134382e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: jZ0iJtU8oLOBrgU5fWovmCAh4kRsXiVxKO8EzxL5xTI=
Subject key identifier: 1C:D5:14:DB:05:21:BD:35:AC:42:AD:2D:07:65:83:DA:F9:7B:69:E3
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 28B75F322145DE1E932425FC55E8E0DB42353A3B
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20333939303733.roa
Signing time: Wed 27 Sep 2023 12:05:34 +0000
ROA not before: Wed 27 Sep 2023 12:00:34 +0000
ROA not after: Wed 25 Sep 2024 12:05:34 +0000
asID: 399073
IP address blocks: 45.89.148.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b7:5f:32:21:45:de:1e:93:24:25:fc:55:e8:e0:db:42:35:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:34 2023 GMT
Not After : Sep 25 12:05:34 2024 GMT
Subject: CN=1CD514DB0521BD35AC42AD2D076583DAF97B69E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:cc:6e:57:ce:0a:d8:fc:0c:da:36:25:49:
e0:d6:7f:3e:e6:4f:37:65:64:f6:45:4e:be:a4:de:
8d:23:ab:16:a3:6f:4b:2a:f7:f4:ba:f5:e2:2a:92:
a6:ac:3f:9e:17:87:8a:f3:f9:ac:81:1a:bb:16:a8:
e6:11:cf:a9:c1:dc:a1:8a:be:6b:ce:f5:f5:81:cd:
53:fd:13:2f:f8:87:d4:8f:78:a2:27:0a:3d:61:5b:
47:60:45:51:30:44:30:8d:35:00:02:66:8f:4b:54:
71:14:e2:cf:43:98:f6:ce:66:6d:df:c6:5f:c7:68:
39:02:d8:97:15:23:d5:a7:18:10:03:98:aa:b3:08:
8b:87:e0:87:12:5b:84:b4:db:8b:c8:8c:0c:2a:f6:
59:b9:3e:88:58:77:40:bb:06:90:6c:73:fc:63:5d:
f0:7c:82:1a:13:23:47:9e:7b:42:b1:0d:99:b6:ca:
3a:d6:0d:cf:40:0b:17:bd:89:5f:65:db:7e:d9:33:
cb:49:7d:69:c9:4d:f4:c2:7a:93:34:ba:db:ec:ac:
77:c1:1d:f8:f0:95:96:98:04:ee:c3:4e:bb:db:20:
c8:1b:0f:33:d5:1a:04:02:39:68:0f:05:56:90:c4:
02:40:f5:9f:f8:84:6f:e4:ba:7e:f0:d0:1b:3e:ed:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:14:DB:05:21:BD:35:AC:42:AD:2D:07:65:83:DA:F9:7B:69:E3
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/23
Signature Algorithm: sha256WithRSAEncryption
83:e5:aa:2c:c9:84:4f:7a:12:53:c6:86:3c:59:1c:f4:27:fe:
cd:87:cf:76:07:b2:26:d1:07:71:a3:82:95:99:a1:10:ae:6e:
b9:47:12:0a:90:b6:48:7f:30:43:af:a4:61:3d:33:ef:b8:82:
a5:ab:94:9b:9a:09:25:2e:3c:c4:d8:53:26:97:ce:9a:f7:ad:
d6:72:f1:69:30:e5:c3:b4:1b:a5:1b:92:ca:d8:e8:2d:13:7f:
b1:cd:a2:3b:08:c0:5b:fe:ad:d3:99:cf:23:90:06:cc:2c:14:
e4:24:1b:f0:58:4c:46:a0:a3:f7:bb:69:9d:25:f9:1f:9f:83:
f1:3c:4b:a7:8c:13:c6:fb:03:70:40:4a:25:5d:fb:cd:d2:27:
39:e3:ce:2f:5a:57:fa:03:aa:ef:14:32:bd:cd:2a:cc:38:38:
07:69:d0:b9:8a:8f:78:4c:f0:5a:31:03:42:b9:2b:82:11:4e:
d8:a7:d9:74:c0:c0:bf:75:c3:4f:c8:98:a3:ca:d0:e1:ab:16:
3d:2a:4b:80:9f:2f:42:be:98:a3:8e:b0:45:8b:c7:4e:d6:5c:
12:0b:4a:07:59:fd:cd:07:e6:73:ea:d8:4f:30:5f:b8:6c:28:
6d:da:31:75:ff:34:f8:61:ac:4b:5b:ce:5f:58:ef:fb:bb:eb:
74:f1:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 00:45:02 2023 by rpki-client on console-ams.rpki-client.org