Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e203433303433.roa
File: 34352e36362e3135312e302f32342d3234203d3e203433303433.roa (raw, json)
Hash identifier: s8Qoxvkf28N2Jv+FPptvih/n7LpXmDAy33tMn69noi8=
Subject key identifier: 75:AF:C5:EF:67:0C:F2:02:50:6B:94:FA:38:08:C6:07:F1:72:6C:F6
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 365E266ABDADC51666EE369ABD99F2727076F4C6
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e203433303433.roa
Signing time: Thu 23 Mar 2023 17:01:52 +0000
ROA not before: Thu 23 Mar 2023 16:56:52 +0000
ROA not after: Thu 21 Mar 2024 17:01:52 +0000
asID: 43043
IP address blocks: 45.66.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5e:26:6a:bd:ad:c5:16:66:ee:36:9a:bd:99:f2:72:70:76:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 23 16:56:52 2023 GMT
Not After : Mar 21 17:01:52 2024 GMT
Subject: CN=75AFC5EF670CF202506B94FA3808C607F1726CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:51:b8:8c:49:52:14:5b:ea:41:6e:f1:7f:
8d:c4:43:57:db:a0:fa:95:ae:2b:de:a9:79:5e:a3:
e1:76:41:7e:a8:b0:ec:6f:da:00:fb:69:0e:51:36:
35:5a:69:13:5e:a0:6b:cc:65:ab:c0:2f:42:cb:bd:
51:0d:0f:d9:9c:9a:2b:c8:a3:18:f1:c5:15:1d:f6:
9e:1f:8c:13:47:07:2d:c7:05:98:fb:7c:4c:21:8a:
f8:bd:c3:c5:87:e9:27:27:47:8e:ac:16:0e:ec:8a:
d3:e0:b3:f8:29:42:39:55:3a:cc:f0:fe:85:f9:15:
8c:4e:7d:7e:27:8f:51:9a:c5:c4:35:ce:40:87:a7:
e1:4d:1e:99:ac:be:9e:85:1c:05:7c:b7:84:34:ef:
bd:d0:af:ed:36:a1:52:08:25:ee:7f:1c:14:a8:9a:
75:99:4b:f0:e4:f3:0b:b1:26:e8:84:05:30:05:62:
b9:0b:b8:f0:06:1e:1f:02:f2:e3:15:f6:90:0f:09:
3c:ea:a5:93:8a:ce:4d:13:a3:c3:f3:4e:60:d4:9d:
52:b1:14:8a:c2:e8:6b:90:84:63:57:80:f3:b5:26:
f6:7d:74:aa:75:af:ea:e6:7f:1b:0d:29:aa:38:f4:
c6:87:a8:cc:da:83:43:bd:6c:dd:03:28:62:7f:05:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:C5:EF:67:0C:F2:02:50:6B:94:FA:38:08:C6:07:F1:72:6C:F6
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e203433303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e5:75:36:94:ee:bd:6c:57:4c:41:f8:60:66:07:48:a5:5d:
6b:ad:45:5e:ee:8c:79:02:71:07:4e:2d:8f:df:f8:c4:4a:90:
78:32:94:28:44:c1:8e:3c:14:85:92:a5:26:e5:38:a8:a8:41:
85:94:a9:17:b3:ad:3c:5d:b3:05:20:7a:9a:25:92:77:ac:b9:
54:44:dd:f8:ad:72:5c:01:44:20:29:84:d6:88:93:55:47:ea:
04:a9:bb:41:c0:20:3d:93:c6:7a:0c:c8:b0:a5:60:42:4d:ed:
d0:9c:d3:4c:10:b5:6f:7d:b6:c4:d3:ba:e7:49:1e:e8:76:da:
7d:72:af:35:2b:0b:77:d8:50:e5:95:ea:aa:ce:69:f6:b5:30:
16:68:89:e4:8f:37:38:97:94:9f:79:59:d0:fb:ae:e8:c4:94:
ca:1c:c9:18:50:30:12:11:40:c5:61:af:df:06:7d:56:17:d4:
07:e9:c9:cf:9f:64:87:65:a8:41:9b:1b:92:dc:bd:5d:3f:b1:
ed:f1:41:2b:53:ed:e6:78:db:98:b0:6c:b2:f6:9f:05:76:d2:
8b:2f:54:3b:49:fd:b0:a1:8a:5a:1b:0f:b6:36:0e:38:98:20:
95:38:a7:74:77:f4:fe:25:d5:9a:50:93:e8:21:ba:25:42:5a:
e2:1f:0e:b6
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 3 15:20:39 2023 by rpki-client on console-fra.rpki-client.org