Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
File: 34352e38392e3135302e302f32332d3234203d3e20333939303733.roa (raw, json)
Hash identifier: 9h+njLvLgKoWSLaQUgrD+amoEMDCiFuXMkObeBd5eOE=
Subject key identifier: 83:2F:68:8C:B7:7E:E4:8B:EB:56:CC:88:82:48:31:D0:F5:39:FC:F8
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 17CDB78E316C774CC8687608E6C3C869F7B15F12
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
Signing time: Wed 27 Sep 2023 12:05:26 +0000
ROA not before: Wed 27 Sep 2023 12:00:26 +0000
ROA not after: Wed 25 Sep 2024 12:05:26 +0000
asID: 399073
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cd:b7:8e:31:6c:77:4c:c8:68:76:08:e6:c3:c8:69:f7:b1:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:26 2023 GMT
Not After : Sep 25 12:05:26 2024 GMT
Subject: CN=832F688CB77EE48BEB56CC88824831D0F539FCF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:e1:b1:06:30:82:6e:a9:0d:17:2b:7c:7a:
11:39:fe:13:d6:d6:3f:a6:71:68:19:2b:76:55:82:
00:f7:49:7e:e9:a8:0e:1c:bd:13:54:ed:7f:8a:cd:
91:e4:d3:1c:5a:e2:97:82:9f:c9:99:76:70:5f:bc:
89:92:b5:7c:ec:43:11:d2:b7:ca:3c:f1:f9:7d:35:
b6:af:a8:9f:16:c2:c7:34:33:4f:6d:3a:ea:78:6a:
b4:b2:0d:a0:2c:c6:e2:75:6d:74:0a:9a:f6:2e:54:
fe:2d:0e:0b:f7:1d:df:a7:15:00:85:cf:6e:5f:b2:
01:66:e2:64:f3:8f:d5:7b:26:97:51:6d:cf:19:43:
47:87:2f:b5:bf:04:89:6b:65:a6:52:c5:a5:5e:79:
1f:12:bf:e6:a3:c3:09:a2:2c:e1:d6:e6:c2:47:df:
34:6c:d4:63:f1:5f:74:d0:11:68:68:bc:4e:4a:d3:
c6:d1:3e:76:87:a0:57:2e:c8:65:76:99:03:dd:f9:
2f:2c:22:92:e1:70:6d:3e:f4:1f:39:97:01:85:bf:
89:66:b4:64:05:5b:5e:56:75:4c:a4:d0:67:8f:d5:
46:bf:16:a1:62:4d:80:a3:a5:db:5c:4f:58:0f:ea:
43:22:25:0d:1c:d3:d7:25:52:3d:3b:d4:89:70:83:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:68:8C:B7:7E:E4:8B:EB:56:CC:88:82:48:31:D0:F5:39:FC:F8
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
56:cd:1e:e3:5d:b2:97:68:b1:90:4b:fe:0e:0e:b3:fc:87:e6:
e8:0f:31:05:86:1b:57:cf:29:26:d3:fd:ed:d5:ae:9e:56:45:
1f:a7:66:d2:2b:31:79:43:96:5e:66:88:d9:aa:08:1b:78:bb:
1c:b9:33:40:76:01:bd:8c:b1:ce:8c:4c:e3:88:13:a9:c0:31:
ab:0e:94:ad:9f:ac:2c:a5:b1:69:64:92:ab:e1:65:46:86:47:
4c:95:a3:09:bb:47:e6:81:be:13:fb:0e:36:1b:27:79:20:2e:
cb:60:93:d3:27:2c:ea:3e:00:42:ad:76:3e:22:86:1e:99:e8:
97:ca:71:04:5d:a9:30:8e:b0:61:0a:d6:30:ac:1f:52:f7:fb:
db:94:40:b7:9b:93:22:75:45:db:02:7e:2a:a0:2f:bc:c1:74:
59:db:ee:58:e4:83:2e:e7:30:be:91:53:67:95:7b:23:1a:72:
0a:ff:9b:bb:13:42:59:11:90:c9:ab:8d:2b:fd:2d:d5:06:55:
d3:ad:e3:09:60:f4:9d:14:0c:97:17:21:47:c0:c5:47:fb:fd:
22:a0:59:e7:72:e8:05:95:56:24:66:c9:9b:0f:8b:11:3e:03:
dd:85:b9:da:04:83:25:59:10:09:47:46:ff:6a:ec:15:df:bf:
b1:a4:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 00:47:52 2023 by rpki-client on console-fra.rpki-client.org