Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
File: 34352e38362e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DPxDv+lfZCeuU9s3WQz9QYcv7kE8B0TvOm6J1NkH4co=
Subject key identifier: C5:53:6E:72:DE:F7:5D:97:2F:62:08:06:54:F2:8F:AF:B5:D5:08:8D
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 2717BB9722578B34ADD889E91C931AB119E49D79
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
Signing time: Wed 18 Oct 2023 13:02:57 +0000
ROA not before: Wed 18 Oct 2023 12:57:57 +0000
ROA not after: Wed 16 Oct 2024 13:02:57 +0000
asID: 834
IP address blocks: 45.86.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:17:bb:97:22:57:8b:34:ad:d8:89:e9:1c:93:1a:b1:19:e4:9d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Oct 18 12:57:57 2023 GMT
Not After : Oct 16 13:02:57 2024 GMT
Subject: CN=C5536E72DEF75D972F62080654F28FAFB5D5088D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:9d:17:93:d2:a5:b9:00:a5:5a:79:3a:64:
71:f9:0b:b4:6f:fd:fd:88:37:bf:50:f2:2f:7a:30:
99:1e:6b:a6:54:3c:78:bf:c7:14:81:a3:69:65:b4:
12:98:08:9b:d2:a8:9a:29:07:7d:6a:ec:60:df:ef:
51:62:0e:25:fc:bb:51:08:ec:a0:c0:93:2e:30:c6:
aa:4c:d2:7d:25:1a:98:7a:61:8a:51:ff:5d:2a:c9:
27:e6:27:59:9d:b0:20:92:79:0e:7c:54:b4:ef:4a:
b7:76:81:45:fa:b5:2a:fb:74:25:6d:9e:61:38:cc:
34:56:27:c7:50:c6:b0:22:30:49:ce:b9:99:2c:96:
b3:fd:2b:f1:61:c9:27:ef:3b:f0:9a:82:ca:d0:45:
bf:b7:39:d2:e7:c4:2b:eb:56:1b:f2:8d:f4:8d:c6:
89:36:86:e2:78:60:c4:2b:7a:73:dd:67:eb:05:73:
cc:a3:f9:2c:04:ce:52:be:24:f9:49:5b:cc:12:a1:
91:2e:60:ab:7d:1e:1a:d0:33:69:05:54:fd:dc:97:
41:79:32:7d:1a:c1:b8:b0:f4:49:4e:21:90:93:3c:
cd:4a:f7:c6:c2:0d:09:ed:3e:6b:01:11:d5:c4:6a:
9c:3c:69:a1:10:a4:b8:ea:73:fc:52:73:eb:89:83:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:6E:72:DE:F7:5D:97:2F:62:08:06:54:F2:8F:AF:B5:D5:08:8D
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/34352e38362e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b5:da:1d:14:1b:10:ab:38:bb:fd:e6:92:40:14:d8:3e:72:
6a:5b:35:81:4e:80:92:5c:dd:c2:0e:85:d5:e5:81:a7:99:98:
d9:45:6e:f7:d0:6c:99:7e:32:32:02:cb:70:5f:0b:a2:ae:5f:
db:05:07:4e:32:e4:aa:48:76:32:44:53:7d:28:ca:68:a1:4b:
91:c6:0f:d5:e7:12:15:9b:0a:96:f2:63:26:bb:25:ef:d8:7c:
e6:d3:36:03:a6:5d:ae:1f:59:0b:0c:17:e5:2d:8c:a3:76:36:
15:32:86:7a:4b:65:41:c3:ba:41:16:bb:47:2b:d6:eb:43:ad:
be:0a:e9:ec:6a:33:e3:8f:9c:f6:cd:d9:e7:4c:e6:9e:da:f7:
95:78:c5:94:10:21:0c:76:72:62:ce:d5:98:d7:2b:f5:c0:d8:
de:f3:86:09:b1:e8:c8:e9:b5:62:bf:a1:24:46:2f:66:dd:3f:
bf:cf:c7:82:ab:9c:2c:df:d7:23:d5:4f:24:32:7c:4a:2c:f4:
a8:7d:8e:52:a5:9d:aa:a1:69:ac:e0:b7:45:b1:ef:22:a3:82:
3e:d7:5a:76:e6:2a:65:31:da:66:48:e8:2d:7b:2e:f7:2a:ae:
be:37:97:e3:10:54:d8:65:f7:b9:b2:32:d3:b3:93:8e:8e:df:
74:b9:87:f6
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUJxe7lyJXizSt2InpHJMasRnknXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzEwMTgxMjU3NTdaFw0yNDEwMTYxMzAyNTdaMDMxMTAvBgNV
BAMTKEM1NTM2RTcyREVGNzVEOTcyRjYyMDgwNjU0RjI4RkFGQjVENTA4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/J0Xk9KluQClWnk6ZHH5C7Rv
/f2IN79Q8i96MJkea6ZUPHi/xxSBo2lltBKYCJvSqJopB31q7GDf71FiDiX8u1EI
7KDAky4wxqpM0n0lGph6YYpR/10qySfmJ1mdsCCSeQ58VLTvSrd2gUX6tSr7dCVt
nmE4zDRWJ8dQxrAiMEnOuZkslrP9K/FhySfvO/CagsrQRb+3OdLnxCvrVhvyjfSN
xok2huJ4YMQrenPdZ+sFc8yj+SwEzlK+JPlJW8wSoZEuYKt9HhrQM2kFVP3cl0F5
Mn0awbiw9ElOIZCTPM1K98bCDQntPmsBEdXEapw8aaEQpLjqc/xSc+uJg2PXAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUxVNuct73XZcvYggGVPKPr7XVCI0wHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzQzNTJlMzgzNjJlMzkzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1WXjANBgkq
hkiG9w0BAQsFAAOCAQEAerXaHRQbEKs4u/3mkkAU2D5yals1gU6Aklzdwg6F1eWB
p5mY2UVu99BsmX4yMgLLcF8Loq5f2wUHTjLkqkh2MkRTfSjKaKFLkcYP1ecSFZsK
lvJjJrsl79h85tM2A6Zdrh9ZCwwX5S2Mo3Y2FTKGektlQcO6QRa7RyvW60Otvgrp
7Goz44+c9s3Z50zmntr3lXjFlBAhDHZyYs7VmNcr9cDY3vOGCbHoyOm1Yr+hJEYv
Zt0/v8/HgqucLN/XI9VPJDJ8Siz0qH2OUqWdqqFprOC3RbHvIqOCPtdaduYqZTHa
ZkjoLXsu9yquvjeX4xBU2GX3ubIy07OTjo7fdLmH9g==
Generated at Wed Oct 18 14:11:13 2023 by rpki-client on console-fra.rpki-client.org