Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e203535313534.roa
File: 34352e38362e39342e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier: GNKM3rHCT4L7X4nC/67NYxG27gW9QbdVAeamxqTi4fM=
Subject key identifier: 2C:DD:15:3E:06:93:39:1C:A6:DD:EC:77:0C:F7:E7:F1:07:B3:6D:CD
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 6355118720A3673856DA13E3F5E0B90C9E27F702
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e203535313534.roa
Signing time: Tue 22 Aug 2023 09:20:15 +0000
ROA not before: Tue 22 Aug 2023 09:15:15 +0000
ROA not after: Tue 20 Aug 2024 09:20:15 +0000
asID: 55154
IP address blocks: 45.86.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:55:11:87:20:a3:67:38:56:da:13:e3:f5:e0:b9:0c:9e:27:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Aug 22 09:15:15 2023 GMT
Not After : Aug 20 09:20:15 2024 GMT
Subject: CN=2CDD153E0693391CA6DDEC770CF7E7F107B36DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:aa:73:e6:fd:4c:36:8a:e9:57:9a:8d:81:
05:2f:07:6d:77:30:1a:31:dc:32:a5:a5:4c:36:b9:
cb:9e:c7:b7:ae:5c:ca:49:c2:21:90:cc:41:21:dc:
42:e6:83:fd:af:60:fd:1f:36:94:8f:9d:e0:bf:42:
c5:51:6d:da:74:40:eb:41:b0:16:24:a5:7f:aa:f2:
45:07:5b:b0:58:94:32:21:9b:6d:0b:a4:a2:8f:21:
a5:08:24:68:14:60:15:e4:af:12:e4:54:c3:7a:b7:
4b:ae:71:2a:14:02:2e:76:8d:fa:7d:1d:96:25:0b:
d2:b7:c8:82:f5:17:7c:b2:68:76:91:82:09:6e:a1:
dc:ad:64:8f:0a:12:40:7b:90:dd:74:1b:11:32:a1:
6b:e3:5d:97:37:f4:54:2a:ab:93:1c:a0:57:45:3d:
e3:20:63:9a:a7:3a:9d:01:2a:a5:82:81:86:45:c3:
3c:25:2e:f2:34:44:08:43:09:24:6d:dc:87:34:e4:
8c:75:fa:ca:98:8c:b0:5f:b5:9c:cd:da:2b:27:8d:
5a:0c:dc:6a:50:af:c9:74:51:7a:5b:41:20:c5:b1:
d4:d1:32:f6:46:90:8b:a4:46:c9:34:bf:67:9b:23:
d2:8c:a1:56:3a:64:cf:98:32:7e:67:2b:a3:c3:e0:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:15:3E:06:93:39:1C:A6:DD:EC:77:0C:F7:E7:F1:07:B3:6D:CD
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e203535313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
50:50:2d:76:e7:09:95:d7:f9:ca:d9:ff:26:1f:ca:cf:fc:e8:
e9:3e:c1:ce:e0:e7:7b:18:c4:fb:a3:46:bf:c1:73:eb:fe:a4:
5c:fc:8a:d7:94:1d:aa:08:c0:86:5f:5f:f6:59:e6:4b:ed:0f:
01:78:c8:75:a0:61:01:08:f9:af:e5:b5:03:15:a1:de:a3:ab:
8b:fd:29:33:f1:f4:62:bb:ab:49:62:b2:a9:7e:9a:81:47:e6:
a6:85:89:9a:75:14:06:29:58:e0:7e:20:46:5b:01:7e:3a:72:
45:4e:93:9d:40:07:27:18:76:43:f8:91:f6:4c:64:71:df:69:
60:4e:e0:af:3c:7a:20:23:de:1e:5e:7a:b4:7c:3b:1d:a8:cc:
c1:16:45:7b:b8:d6:9d:07:8d:28:df:bd:7b:8a:8b:a5:5c:9b:
c5:89:93:6b:5a:8c:fe:be:72:60:b4:48:d2:b1:5f:63:ab:92:
cf:42:19:68:a9:5a:fe:95:5a:e1:03:13:d4:2c:e5:e4:62:47:
37:89:fb:ad:74:08:36:9d:2d:f5:98:b1:ba:a2:01:be:ed:e6:
60:6d:8e:b7:30:ae:55:44:71:76:fe:0c:92:2e:c3:21:11:5e:
29:0d:76:21:27:3d:70:c4:94:8f:e0:9f:8e:61:0a:4e:de:ff:
dc:7d:e1:b1
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 18 13:55:19 2023 by rpki-client on console-ams.rpki-client.org