Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa
File: 34352e38392e3134382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Mmi0vdy8kwt7dWCGAI805XKwmB2BfhAUxTLTINDLZDc=
Subject key identifier: 49:0B:DE:5C:B1:FB:D8:84:80:E7:0F:89:21:0A:C1:59:72:1B:64:26
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1CB346465DD617EE70888490D280B5F6B52A7D2C
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa
Signing time: Fri 29 Sep 2023 00:00:06 +0000
ROA not before: Thu 28 Sep 2023 23:55:06 +0000
ROA not after: Fri 27 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 45.89.148.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b3:46:46:5d:d6:17:ee:70:88:84:90:d2:80:b5:f6:b5:2a:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 28 23:55:06 2023 GMT
Not After : Sep 27 00:00:06 2024 GMT
Subject: CN=490BDE5CB1FBD88480E70F89210AC159721B6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:28:79:f2:ac:bd:e6:3a:34:b4:73:b8:7e:
ca:b4:d7:ba:7c:4c:df:dc:f2:c9:c2:a0:f4:97:40:
07:f2:1d:07:bc:16:da:da:07:ee:7f:bb:2f:48:17:
d9:6f:7a:e9:02:3d:36:c6:b9:df:cc:52:c2:14:51:
6c:55:59:7f:e2:1a:91:5d:36:d3:87:3a:f7:c7:ab:
20:2e:ec:ff:48:95:9f:6b:ac:a2:3e:7c:cf:2a:e9:
18:ef:34:f2:43:bd:ca:62:ed:38:ee:17:e9:d0:99:
6a:58:b0:ed:8c:e2:13:12:c6:3b:33:a2:6d:af:ae:
c9:5f:f5:28:f5:9a:06:2a:d1:43:4a:7d:50:73:9d:
85:33:c2:ae:f1:e7:44:04:19:e5:4f:e2:6f:97:fe:
bb:17:c7:b0:16:29:e8:ea:d2:3d:01:36:86:ce:77:
85:ac:e3:c6:84:f0:06:a6:69:ad:e2:88:b0:a9:63:
21:86:75:09:43:6e:2e:e5:5d:b5:14:9a:bc:58:b5:
90:75:79:23:76:79:b0:e0:c9:5c:fc:a3:82:1d:71:
a8:5d:93:70:33:0a:b9:94:f6:1d:8a:e0:ef:bb:2c:
6c:37:3a:8c:a3:e9:10:06:57:54:24:2c:ff:06:eb:
d3:d9:5d:5d:be:91:17:99:b0:a0:8d:cf:aa:28:c0:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:DE:5C:B1:FB:D8:84:80:E7:0F:89:21:0A:C1:59:72:1B:64:26
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/23
Signature Algorithm: sha256WithRSAEncryption
93:3c:07:c6:58:d6:ec:b8:10:c6:73:86:4a:7a:4d:3e:14:c2:
8c:b0:68:d7:01:ff:72:bd:a2:b5:b6:b6:91:fa:58:90:dd:cf:
fd:1a:2e:fa:f7:7b:49:e9:31:e6:cc:db:46:b6:1b:37:6a:cd:
35:06:51:cc:23:6e:99:7c:8d:86:72:33:c1:59:8e:3a:ab:6f:
c9:bc:2e:77:2d:9c:18:a9:7d:a0:54:f4:81:53:31:95:f7:8f:
01:9f:2f:5f:08:97:c1:8d:ec:22:46:da:24:89:86:06:19:74:
6f:09:26:11:ad:ee:fe:35:f3:c6:4a:03:1d:93:84:55:30:ea:
6a:08:cf:6d:24:28:f1:33:aa:e5:f9:c2:49:82:99:ad:a8:90:
70:2a:f7:31:04:38:38:65:0a:e3:fe:0e:1b:d3:91:2b:b2:6b:
89:f4:81:b0:aa:d1:ea:2a:d7:a7:36:0c:b5:d4:d7:b1:bf:76:
88:6c:30:7e:ad:7b:c5:ac:31:ab:16:1c:25:be:81:53:8a:32:
9d:41:9a:f6:71:e3:ea:1c:51:c6:03:fa:f2:f0:cc:23:c3:1f:
1d:5d:39:4b:68:73:72:f2:9c:c4:51:bd:df:1c:bd:b4:ec:06:
e6:03:8b:43:77:5f:1f:8c:7d:b0:f1:92:df:c6:91:60:16:0b:
84:71:2f:cd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUHLNGRl3WF+5wiISQ0oC19rUqfSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yMzA5MjgyMzU1MDZaFw0yNDA5MjcwMDAwMDZaMDMxMTAvBgNV
BAMTKDQ5MEJERTVDQjFGQkQ4ODQ4MEU3MEY4OTIxMEFDMTU5NzIxQjY0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETih58qy95jo0tHO4fsq017p8
TN/c8snCoPSXQAfyHQe8FtraB+5/uy9IF9lveukCPTbGud/MUsIUUWxVWX/iGpFd
NtOHOvfHqyAu7P9IlZ9rrKI+fM8q6RjvNPJDvcpi7TjuF+nQmWpYsO2M4hMSxjsz
om2vrslf9Sj1mgYq0UNKfVBznYUzwq7x50QEGeVP4m+X/rsXx7AWKejq0j0BNobO
d4Ws48aE8Aamaa3iiLCpYyGGdQlDbi7lXbUUmrxYtZB1eSN2ebDgyVz8o4Idcahd
k3AzCrmU9h2K4O+7LGw3Ooyj6RAGV1QkLP8G69PZXV2+kReZsKCNz6oowKR1AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUSQveXLH72ISA5w+JIQrBWXIbZCYwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzgzOTJlMzEzNDM4
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVmUMA0G
CSqGSIb3DQEBCwUAA4IBAQCTPAfGWNbsuBDGc4ZKek0+FMKMsGjXAf9yvaK1traR
+liQ3c/9Gi7693tJ6THmzNtGths3as01BlHMI26ZfI2GcjPBWY46q2/JvC53LZwY
qX2gVPSBUzGV948Bny9fCJfBjewiRtokiYYGGXRvCSYRre7+NfPGSgMdk4RVMOpq
CM9tJCjxM6rl+cJJgpmtqJBwKvcxBDg4ZQrj/g4b05ErsmuJ9IGwqtHqKtenNgy1
1Nexv3aIbDB+rXvFrDGrFhwlvoFTijKdQZr2cePqHFHGA/ry8Mwjwx8dXTlLaHNy
8pzEUb3fHL207AbmA4tDd18fjH2w8ZLfxpFgFguEcS/N
Generated at Mon Dec 18 08:08:48 2023 by rpki-client on console-fra.rpki-client.org