Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203632353739.roa
File: 34352e31332e3135312e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier: 18C1nBc0ntyFhpv6AF3s8oE3lWTn43yrCnf9l+FIyHo=
Subject key identifier: 12:B5:BE:B9:98:B5:BA:EC:BD:AA:6C:0F:2B:3F:A1:50:97:F2:A7:FD
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 4887C8287D4A87B1B182170EB92358D6E9949EB6
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203632353739.roa
Signing time: Thu 23 Mar 2023 16:59:38 +0000
ROA not before: Thu 23 Mar 2023 16:54:38 +0000
ROA not after: Thu 21 Mar 2024 16:59:38 +0000
asID: 62579
IP address blocks: 45.13.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:87:c8:28:7d:4a:87:b1:b1:82:17:0e:b9:23:58:d6:e9:94:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 23 16:54:38 2023 GMT
Not After : Mar 21 16:59:38 2024 GMT
Subject: CN=12B5BEB998B5BAECBDAA6C0F2B3FA15097F2A7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:d3:4e:46:da:cd:bc:49:a7:24:e4:41:bf:
bb:24:7d:ad:c8:ec:ab:61:40:1c:56:9c:81:6a:48:
66:7d:f8:d6:22:b7:ce:77:2b:cd:32:ee:cb:d8:99:
6e:15:c9:f0:b8:af:43:22:00:cf:30:94:8e:73:b0:
76:e7:36:8b:4a:86:fc:3e:4f:af:29:ca:7b:1f:e2:
1d:2f:5f:25:ac:57:6f:c2:a5:78:e5:94:27:05:6e:
b2:bf:6b:b4:44:e0:2d:29:c7:df:56:cc:d1:c7:d7:
43:d7:42:ff:3d:7b:de:15:28:f5:ab:71:c4:f1:a4:
87:83:cf:14:ae:24:8f:d0:38:ec:14:fd:0e:18:40:
66:43:3d:96:9e:5b:b7:41:1c:9d:d0:00:61:3a:ea:
fc:7d:67:ba:54:cf:11:6d:e4:6d:b3:dc:aa:ab:40:
3d:d8:9f:fb:da:d2:d2:21:96:3f:54:af:6c:15:16:
93:c2:a7:b0:c6:ff:0c:16:a3:62:85:fc:61:bb:b5:
bc:99:07:e7:03:ee:24:dd:0a:34:6a:a2:53:c8:ff:
8a:b4:07:b4:1c:c4:e5:1f:1f:d0:29:e3:38:f9:b3:
b8:bb:b7:f7:1a:1d:54:c5:3b:05:24:c6:c9:5f:ae:
e9:7d:0a:45:d1:88:9b:52:4e:78:fb:e3:80:f7:18:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:BE:B9:98:B5:BA:EC:BD:AA:6C:0F:2B:3F:A1:50:97:F2:A7:FD
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e203632353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d4:51:cf:2b:a1:4d:8b:fd:00:26:95:c1:5f:f6:94:74:6e:
ee:4e:75:9a:5a:43:71:c3:d4:63:a8:d9:c1:6d:2c:a7:c7:de:
c3:2c:52:2d:11:23:50:71:ce:46:25:44:6c:17:38:56:00:3f:
d5:f4:84:bd:89:96:79:a5:ee:db:66:59:c8:99:48:8c:60:c7:
00:af:fb:91:c5:26:fc:72:fe:89:76:f7:b2:b6:41:99:b8:b4:
4b:30:09:01:18:0f:b7:ab:0b:69:d5:e3:84:f6:b1:cd:44:a7:
6c:94:55:71:9a:a9:d4:48:54:07:a1:bd:73:cd:f6:8f:9e:09:
c5:2f:5e:bf:fb:c6:fe:ff:90:10:56:ba:f7:42:44:82:40:13:
c8:e0:be:5a:26:26:1d:41:f6:a8:41:28:64:f1:9a:89:12:0e:
d6:d8:cd:c9:c8:54:b4:6d:94:bc:ab:d4:67:83:37:1b:67:e5:
d6:4b:1a:a1:ce:43:65:7c:25:01:f1:a0:9f:47:f9:f7:9b:10:
52:d0:fc:36:5e:6b:ce:29:11:b6:07:47:79:87:6f:08:2d:a9:
76:fe:cc:5f:9d:2d:01:9b:c7:94:96:b2:8e:98:dc:44:6f:77:
08:f2:99:cb:84:3f:fa:f3:e0:e4:9b:90:c8:47:91:b4:ca:a5:
30:d2:24:73
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 1 00:19:03 2023 by rpki-client on console-ams.rpki-client.org