Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e20383334.roa
File: 34352e36362e3135312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: R5xVrrl7VbgqJ4rBY36ZXHXYCZ+/L6bKBOHSHMEXe7M=
Subject key identifier: 40:DA:DA:F3:DF:CA:7D:18:70:64:80:50:64:B4:A9:24:D3:D9:41:62
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 6DE68707E0E5111334ADA17A10AF24960C467842
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Aug 2023 15:00:07 +0000
ROA not before: Thu 03 Aug 2023 14:55:07 +0000
ROA not after: Thu 01 Aug 2024 15:00:07 +0000
asID: 834
IP address blocks: 45.66.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e6:87:07:e0:e5:11:13:34:ad:a1:7a:10:af:24:96:0c:46:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 3 14:55:07 2023 GMT
Not After : Aug 1 15:00:07 2024 GMT
Subject: CN=40DADAF3DFCA7D187064805064B4A924D3D94162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:92:d5:ac:43:b6:5a:6d:b8:79:99:3a:6a:
3c:57:65:13:5a:93:84:57:ed:90:95:25:7c:f9:4e:
06:65:2f:c7:f0:69:a3:88:b8:2e:d9:c5:a3:be:cf:
b6:6f:fc:9c:0e:89:1d:9c:fd:e5:fa:cf:3b:e6:26:
03:46:af:d8:d4:f1:8c:5f:20:83:02:e9:65:8b:3a:
df:02:bd:0e:c7:af:af:0f:db:9e:76:24:6f:d6:d9:
69:e3:4c:02:3a:dd:f1:2d:78:b5:f0:d3:27:68:83:
f1:af:2f:e0:e7:f5:21:a3:f7:30:01:cc:e2:8d:f0:
9f:59:2c:8b:4a:1b:5e:df:16:ea:a0:da:d5:e9:ac:
ae:f1:41:2f:8a:b0:f3:97:39:a3:79:fc:e1:c9:94:
49:68:4d:57:70:84:e9:28:22:44:99:fc:d2:7c:37:
6a:3a:20:a1:28:1b:71:90:f5:f4:d9:66:78:e1:3e:
d9:df:f1:ff:87:57:bd:79:51:c8:c9:43:03:7d:54:
98:53:f2:4d:0d:71:bc:b3:e6:6d:26:73:fa:83:65:
0f:56:e5:d8:b1:40:de:a7:a0:bd:a3:a3:0e:69:bd:
88:da:7b:0a:7e:3b:77:5c:20:3c:41:df:c7:00:d3:
b8:36:70:ef:52:e1:7f:27:52:b2:e4:46:16:d3:6d:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:DA:F3:DF:CA:7D:18:70:64:80:50:64:B4:A9:24:D3:D9:41:62
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e36362e3135312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c2:11:82:da:17:dd:0d:ff:6a:e0:24:f3:0c:c5:27:54:39:
29:9f:3a:d7:89:0a:d2:50:9f:8a:29:12:5b:71:07:8e:f9:4c:
5f:1a:43:75:b2:0b:6c:33:47:1a:fd:ee:a3:fe:12:07:62:c3:
cf:58:a1:c6:23:0a:ff:dc:85:69:8e:4c:1f:cb:3e:bc:09:9e:
58:17:68:3e:f9:83:75:54:24:7f:af:ed:cf:60:08:5d:e4:ad:
a1:09:c0:ce:f1:b4:a1:b0:1c:55:38:74:68:3a:38:b9:02:77:
b6:ac:4b:0a:e9:4b:9a:42:1c:dc:82:99:36:5a:29:e1:41:24:
d3:94:57:73:b9:af:a9:40:40:95:cd:ea:4d:1c:4c:92:77:3e:
34:ef:dd:5a:f3:8b:98:cc:41:f8:b2:ef:44:5d:87:e0:9e:c8:
95:e9:c5:97:90:b5:f7:ed:8d:a7:85:dd:3d:74:c3:87:6e:a9:
f6:46:47:fa:a2:c5:00:87:14:f3:15:9b:89:06:1e:85:2f:cb:
73:b9:4a:dc:49:72:c3:05:23:5f:a3:e5:00:36:46:45:92:4c:
50:6b:98:23:be:02:c1:d4:36:9c:92:37:c3:6f:b0:aa:96:0b:
ef:82:1d:6c:cc:4b:64:57:35:63:25:4f:ed:a1:73:8a:de:11:
ec:70:82:61
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 4 14:23:54 2023 by rpki-client on console-fra.rpki-client.org