Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e20383334.roa
File: 34352e31332e3135312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: R9CzWLv+K3mD8otDgwOnLwW8JQPd0W+PVene9Qglv8c=
Subject key identifier: 7C:21:DA:3B:D5:3D:B3:48:84:CB:D6:E5:D5:AB:1B:25:85:E3:CD:00
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 6056777621EE254AAA2DEBEBE5E7EA277B899A41
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Nov 2023 00:00:05 +0000
ROA not before: Tue 31 Oct 2023 23:55:05 +0000
ROA not after: Wed 30 Oct 2024 00:00:05 +0000
asID: 834
IP address blocks: 45.13.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:56:77:76:21:ee:25:4a:aa:2d:eb:eb:e5:e7:ea:27:7b:89:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Oct 31 23:55:05 2023 GMT
Not After : Oct 30 00:00:05 2024 GMT
Subject: CN=7C21DA3BD53DB34884CBD6E5D5AB1B2585E3CD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:96:67:30:b0:89:28:c4:97:63:80:20:45:
7e:fb:f9:7e:56:e3:52:ad:c7:d8:ea:03:d9:79:81:
01:30:19:10:99:f2:34:0a:20:c6:b3:c4:97:ee:d1:
c5:63:cf:1f:b0:e4:3e:e2:73:34:df:4c:d1:a8:66:
5d:44:fd:0b:77:96:94:fc:ee:aa:d4:f0:c2:2c:4b:
3c:40:ea:0c:bf:2f:f2:2b:9a:41:26:a6:90:e3:82:
46:d7:ed:7c:e9:98:e6:2c:cb:d4:ce:62:e2:29:3c:
99:1a:95:fb:96:db:1c:78:8b:9c:b2:4c:3a:78:bc:
f6:22:08:f6:12:ce:fc:45:41:cb:0f:ca:de:c8:f4:
07:05:8a:47:c4:07:a8:a6:49:0b:cd:a4:0e:aa:48:
c3:f4:53:a7:e6:d3:6c:4a:69:c9:c2:d9:8b:ed:c0:
22:6f:88:92:9b:df:ab:0f:4d:9f:1a:51:90:40:f8:
7d:fe:cf:b4:11:23:53:b8:b6:5b:74:50:6a:c4:44:
06:68:ae:b8:d3:cc:f2:19:91:95:b6:55:ea:84:08:
c5:dc:0b:07:49:38:5c:3f:06:7e:c3:45:f9:5c:41:
a4:95:ff:92:57:8a:98:d4:33:9e:fd:2f:f0:4d:cc:
61:f6:ab:8b:69:bc:ab:aa:b4:8b:95:f3:de:05:f3:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:DA:3B:D5:3D:B3:48:84:CB:D6:E5:D5:AB:1B:25:85:E3:CD:00
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e31332e3135312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.151.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fa:fd:65:a6:1e:45:2b:4d:96:28:5a:f5:01:54:28:ac:18:
e9:53:1f:97:82:2d:11:75:51:a6:a4:26:4c:e3:c5:2a:b4:93:
71:11:0f:69:b2:4a:de:a2:4e:45:48:6d:8f:87:66:8c:e7:06:
ce:f4:b4:23:b3:1e:98:33:3f:d8:42:6f:bf:50:5c:9e:c4:85:
e7:d6:b6:f3:e5:bd:40:43:14:05:9b:e9:c6:2c:16:7e:cb:22:
3d:ab:90:42:3e:39:e8:22:32:cf:33:a3:5d:1a:0a:24:26:f7:
4c:c0:ba:95:b7:0b:51:70:05:d1:8d:8b:2a:70:52:ba:2d:7a:
a0:f9:8e:00:e3:58:25:33:57:bc:f3:c4:62:cd:d4:e6:aa:7b:
d4:0d:53:50:29:21:2f:fc:0f:40:41:22:3c:51:94:72:64:21:
e4:0b:05:68:27:a3:34:b4:6d:56:60:1e:38:63:55:cb:07:c9:
65:c8:23:b1:b5:af:6a:f8:8d:e0:48:dc:7b:f2:96:10:65:22:
7f:40:60:b2:26:47:58:2e:59:e3:c0:d0:66:4f:0c:7d:ae:42:
6b:0f:fd:21:20:d7:5e:cb:56:00:ee:ce:5b:4f:23:23:db:85:
7a:f9:37:66:4d:0d:0d:c0:ed:2e:10:af:08:e8:07:92:de:ee:
b5:c5:db:25
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 2 09:56:00 2023 by rpki-client on console-fra.rpki-client.org