Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203339333833.roa
File: 34352e31332e3135312e302f32342d3234203d3e203339333833.roa (raw, json)
Hash identifier: zcI9lLYDUWkmrUv8MisEKbhMO1WdESR+xAJOwjwPElc=
Subject key identifier: BB:86:01:EA:A0:D0:3B:05:41:AB:CA:6C:BB:93:68:7D:66:90:24:99
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 1C2A5F0D5C2B1B9BD43DB2F69AAC078E81F27504
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203339333833.roa
Signing time: Thu 02 Nov 2023 09:35:27 +0000
ROA not before: Thu 02 Nov 2023 09:30:27 +0000
ROA not after: Thu 31 Oct 2024 09:35:27 +0000
asID: 39383
IP address blocks: 45.13.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 07:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2a:5f:0d:5c:2b:1b:9b:d4:3d:b2:f6:9a:ac:07:8e:81:f2:75:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Nov 2 09:30:27 2023 GMT
Not After : Oct 31 09:35:27 2024 GMT
Subject: CN=BB8601EAA0D03B0541ABCA6CBB93687D66902499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:79:7d:77:94:c5:2f:38:85:81:ad:4b:2d:
a4:83:af:f0:b6:bb:9e:a3:d9:e3:0a:12:9f:95:b5:
40:5c:00:25:ed:0b:af:2c:d6:38:96:a5:d8:88:d0:
38:2e:3b:c7:9d:c4:f6:39:af:d2:47:10:4d:50:05:
52:9f:63:76:42:b9:62:33:49:52:f9:e7:09:3e:03:
6b:d3:e6:bc:38:04:30:a2:5c:f8:85:d5:7b:11:dd:
bb:5c:81:2b:0f:0a:bc:38:58:f3:e5:6f:d9:9e:62:
4b:68:a8:26:66:c7:6c:ab:81:5c:75:6e:0d:46:6c:
85:f2:89:c7:a2:aa:32:e8:f9:c0:72:0e:d4:8e:75:
b1:28:4c:81:0b:a8:8b:d2:42:75:3d:74:86:84:ff:
df:74:8c:15:43:f7:25:05:cd:16:a0:bf:f2:ab:fc:
72:bd:90:3b:60:e2:b4:16:8c:5c:02:6f:d6:f4:01:
2a:24:0b:17:d1:4d:e3:49:f3:65:3a:98:4f:a7:09:
f5:e9:68:27:ba:1e:4c:b3:ee:a8:4d:40:84:6b:00:
f0:d3:93:86:84:a3:51:64:3f:cc:64:51:63:16:7c:
40:a1:b4:47:03:c1:d2:83:a1:e5:02:87:de:00:12:
64:15:26:9a:3c:06:cb:0a:b8:97:19:b0:e0:ae:d8:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:01:EA:A0:D0:3B:05:41:AB:CA:6C:BB:93:68:7D:66:90:24:99
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203339333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.151.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1d:14:e3:7d:4e:0f:ce:aa:cb:92:3a:be:55:ad:c5:1d:64:
c9:17:5f:63:67:b0:89:03:4f:76:7b:bc:b0:c1:66:fb:ab:33:
7a:78:43:34:73:f8:0a:1a:df:2c:3e:78:af:82:37:1d:1f:60:
59:e3:ee:fe:00:6d:82:ae:6a:db:e1:a9:62:8f:ba:4f:f1:e6:
d6:31:87:97:bd:22:e9:7c:c2:77:97:80:95:3e:60:7b:65:00:
01:94:c3:6e:09:14:4e:ef:e3:a5:49:4b:c8:e5:4a:6e:1a:1f:
03:c8:2d:7d:1f:a9:ca:2c:82:ab:ec:98:45:e9:11:4e:49:a3:
14:4a:8d:b0:2b:a7:70:65:7e:b9:b7:f5:40:9f:e5:c8:c4:cc:
b2:ae:4f:eb:c9:09:55:66:69:c8:67:34:b5:32:db:af:f0:29:
75:9d:8e:13:6e:10:c1:01:ee:34:12:eb:bc:8a:ad:8d:df:98:
01:06:20:43:6b:90:ce:70:8f:23:36:be:ba:aa:63:bb:38:24:
46:c8:d0:5b:9c:59:2e:6f:96:67:cd:66:13:d8:7d:13:52:fe:
c4:dc:4e:d3:17:2e:c0:ed:e1:4c:ee:41:96:21:75:ad:d5:63:
c4:8b:a3:fe:1e:2a:29:73:7d:47:3e:9c:50:dd:74:59:fb:ac:
75:ae:2c:81
-----BEGIN CERTIFICATE-----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Generated at Thu Mar 28 10:37:33 2024 by rpki-client on console-fra.rpki-client.org