Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
File: 34352e38362e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sQWsD2B0y3WWg/a22FSp0gyjFKsTMZtt94kqEOamQak=
Subject key identifier: 27:87:01:9B:CE:6B:FE:42:DA:BD:6B:48:71:14:78:71:DE:26:B1:F7
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 652284B17D5F46CEE7E57839DFCB0427C5AEAC69
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Aug 2023 08:00:05 +0000
ROA not before: Mon 07 Aug 2023 07:55:05 +0000
ROA not after: Mon 05 Aug 2024 08:00:05 +0000
asID: 834
IP address blocks: 45.86.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:22:84:b1:7d:5f:46:ce:e7:e5:78:39:df:cb:04:27:c5:ae:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Aug 7 07:55:05 2023 GMT
Not After : Aug 5 08:00:05 2024 GMT
Subject: CN=2787019BCE6BFE42DABD6B4871147871DE26B1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:d6:01:bb:10:bc:cf:4d:93:7d:ff:db:cb:
40:91:88:e1:d6:39:ce:5c:54:35:e0:91:36:f2:ad:
eb:77:0c:9f:7f:c9:87:8d:d4:57:f2:36:f5:14:fc:
02:3e:2f:74:61:c2:06:77:65:f4:ef:b0:3b:76:2f:
c1:79:d7:f3:ca:73:30:1f:31:91:43:04:36:21:1b:
ea:d3:6c:0b:aa:61:62:ee:57:c9:f8:0b:7f:f0:76:
27:a2:89:1c:9c:30:57:e1:fa:5a:86:ff:67:de:f4:
73:b0:eb:35:5b:67:70:f8:cb:2c:e3:8e:fd:7a:9d:
87:48:17:e7:2d:ed:68:6d:eb:35:c0:fa:57:53:5c:
15:c1:2b:ed:9e:e7:4a:55:d5:80:39:c0:d2:12:a4:
65:c0:ee:3e:5b:5f:78:74:f6:17:59:a3:cf:91:0d:
e7:6a:88:67:8a:89:18:53:e9:56:2f:e4:e1:80:13:
e3:6c:c4:ae:03:e3:06:53:2c:22:94:70:8c:e9:18:
65:27:ae:d2:ad:51:c0:a4:8f:46:17:dc:0d:10:bb:
ef:13:44:c2:25:f3:dd:58:39:78:80:c4:97:25:f4:
ef:c9:86:ef:42:c6:e8:c1:67:96:ce:03:92:a5:7f:
94:bd:5c:ce:35:fe:86:b1:a4:64:bd:f8:56:f3:1f:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:01:9B:CE:6B:FE:42:DA:BD:6B:48:71:14:78:71:DE:26:B1:F7
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
96:53:64:81:a3:a2:44:db:12:ff:ec:66:13:7e:18:30:c5:5e:
6a:91:ee:cb:1c:01:31:fd:b9:51:c3:74:e8:23:47:12:23:63:
b8:24:b3:f6:07:e7:96:86:57:b2:76:9e:fd:04:22:4d:6d:cf:
9e:e1:56:30:5a:c8:59:e7:ef:76:bb:61:36:c1:b2:96:43:5e:
61:e8:6b:13:b0:0b:cf:1f:70:75:ae:a3:cb:b7:bb:d2:1a:84:
8a:ad:6d:83:24:38:40:33:47:9e:34:86:78:ca:46:b9:bf:27:
d6:1d:c0:1e:9e:a5:ce:9f:8c:09:02:e3:0c:fe:4f:cb:12:76:
81:f2:91:a3:dc:82:8e:5a:0f:1b:89:28:ac:29:33:9f:99:ec:
14:12:45:17:65:99:91:a3:95:8f:50:65:c3:dd:f5:90:d7:d7:
47:fb:cd:46:24:ff:c0:87:a4:2b:2a:cc:09:92:4e:bd:b3:a7:
09:0c:d0:aa:df:10:40:8d:fc:02:93:a8:15:49:4e:86:be:03:
db:3a:3a:77:d3:80:e0:75:a9:b6:46:96:90:cd:73:5a:12:44:
d4:24:ac:f8:dc:5a:f1:a3:e1:54:fc:69:17:f1:20:f4:91:d6:
f3:53:74:5f:b3:5f:01:b2:f4:1c:5b:ec:84:22:11:8f:62:45:
25:5b:53:5a
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 09:49:21 2023 by rpki-client on console-ams.rpki-client.org