Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20313937363434.roa
File: 34352e38362e39342e302f32342d3234203d3e20313937363434.roa (raw, json)
Hash identifier: vwPXbEBT7j5xcPzMP1sCmbf15JCW1vWsfvwCa13ypyc=
Subject key identifier: EF:0C:4A:77:88:AE:01:3F:21:78:B3:47:AF:42:BA:29:3E:83:90:04
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 3F71AD7E1AF84BA2EE804AB697C74B1B9C142166
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20313937363434.roa
Signing time: Thu 27 Jul 2023 13:57:48 +0000
ROA not before: Thu 27 Jul 2023 13:52:48 +0000
ROA not after: Thu 25 Jul 2024 13:57:48 +0000
asID: 197644
IP address blocks: 45.86.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:71:ad:7e:1a:f8:4b:a2:ee:80:4a:b6:97:c7:4b:1b:9c:14:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jul 27 13:52:48 2023 GMT
Not After : Jul 25 13:57:48 2024 GMT
Subject: CN=EF0C4A7788AE013F2178B347AF42BA293E839004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:68:58:f1:ba:53:e9:a8:91:49:0b:55:c3:
c4:db:a7:31:90:98:49:e3:d3:34:ed:a5:49:e7:8c:
d5:f8:aa:14:e2:2d:c3:7d:46:26:b1:e0:5f:b5:57:
47:8b:25:83:bd:dd:86:c2:95:67:19:ee:0a:43:93:
85:0c:6f:5e:f7:81:60:44:40:ab:e2:3a:c8:b9:a1:
e6:7b:7d:fc:c7:b0:2f:43:2c:fd:21:33:d7:30:b1:
bc:2c:d5:f6:03:39:5d:e1:df:68:b6:5a:14:bd:6a:
ab:8c:5e:ee:78:40:07:01:1f:c9:ee:a4:59:60:82:
de:d5:c5:db:8d:80:09:f0:0c:7a:c1:db:5c:da:66:
32:de:17:ee:9b:d5:9d:aa:4e:1e:29:60:41:b5:de:
50:22:08:f7:7f:e7:76:22:b0:7e:98:47:b9:b0:10:
bf:2f:4b:c3:d3:79:82:48:fa:c2:42:9d:84:e0:21:
cc:9a:09:b7:82:5f:b2:77:ea:c5:cc:a4:19:dc:88:
bd:4f:dd:8b:e3:ea:ad:a6:2f:41:ab:ed:42:87:3c:
cf:fe:3c:13:2d:1c:54:7f:18:18:26:96:71:b4:57:
5b:42:0e:6b:6e:d3:b1:c8:7f:3d:b1:8c:bc:aa:5c:
8c:b4:a6:0a:44:3a:09:63:94:64:b5:7e:e2:8d:3f:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:4A:77:88:AE:01:3F:21:78:B3:47:AF:42:BA:29:3E:83:90:04
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20313937363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c6:93:32:d8:e7:c2:1a:14:36:c8:a5:48:55:16:15:07:dc:
11:eb:d0:51:c1:91:0a:cd:f4:d9:39:b1:b3:40:9c:2e:0d:cb:
6e:c0:03:73:2e:71:5b:15:d6:14:f2:62:aa:06:58:37:2b:89:
79:ac:bd:6f:c2:16:bb:79:5d:06:32:19:61:a2:ec:05:42:f8:
34:ed:44:ad:b7:51:9d:aa:f7:5c:f9:ee:fa:a3:28:45:30:a1:
70:45:29:e9:b4:e6:17:e6:8f:28:ad:71:46:59:08:18:f6:2f:
23:ff:c7:4f:9e:7a:72:18:3b:be:bb:ce:83:31:38:af:7e:f9:
aa:11:95:36:16:cf:c2:58:53:c8:ed:f9:d0:1a:0c:0c:d5:91:
f7:45:ce:fd:65:16:01:f2:e4:7e:d9:36:e2:72:57:7d:7c:ea:
a0:74:5e:58:e5:52:86:80:0c:2b:78:bc:f6:d0:36:7b:44:02:
cb:f2:be:22:1b:01:1d:64:ac:23:06:7a:0e:99:f1:aa:ab:f0:
9e:78:9a:4a:ea:84:e6:95:a5:52:4f:c4:d8:ca:60:7a:88:6b:
13:a8:c6:ed:5b:44:b9:51:3e:3e:86:5d:9a:f0:72:76:a5:10:
3b:f1:8a:99:99:31:7d:16:e2:65:8f:ae:91:5e:c3:e7:94:be:
ea:57:9d:da
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 7 08:32:09 2023 by rpki-client on console-fra.rpki-client.org