Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20323131363139.roa
File: 34352e382e3137332e302f32342d3234203d3e20323131363139.roa (raw, json)
Hash identifier: gEXUemW/wZIwqB76N/WMU7UkP5GmXRa7zjq8xNgVtoo=
Subject key identifier: C2:0A:C8:F9:0F:78:F7:C6:CC:44:AE:B3:97:63:E4:84:26:57:21:99
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 018A4ADF7FE697B2C762D7EE4054D0DB8244886D
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20323131363139.roa
Signing time: Tue 09 May 2023 11:15:22 +0000
ROA not before: Tue 09 May 2023 11:10:22 +0000
ROA not after: Tue 07 May 2024 11:15:22 +0000
asID: 211619
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:df:7f:e6:97:b2:c7:62:d7:ee:40:54:d0:db:82:44:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: May 9 11:10:22 2023 GMT
Not After : May 7 11:15:22 2024 GMT
Subject: CN=C20AC8F90F78F7C6CC44AEB39763E48426572199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:c6:65:5a:48:a9:e3:ad:75:5a:0c:38:a6:
72:fe:9e:af:8d:27:3f:fa:77:f2:ef:a8:1a:18:ba:
0f:ea:20:c5:ca:af:19:42:ae:09:57:37:f0:d7:fa:
05:90:17:41:e8:7b:45:b5:6e:de:44:03:77:33:2c:
25:9d:a8:a7:2f:74:f0:d4:cb:fc:9a:60:ce:a6:d4:
4a:8d:a0:9b:56:a8:2e:f5:51:9a:23:0b:0d:6a:89:
67:5d:d6:c3:35:77:93:a9:60:0a:ea:2c:a4:aa:df:
56:71:0c:f8:b2:8b:47:f2:25:a2:b6:78:94:2f:e6:
23:98:26:d3:37:da:6f:52:4c:70:16:46:f5:a1:1d:
c9:f8:c8:19:9a:8d:e2:5f:70:6f:a5:15:e4:a9:e6:
35:1f:f9:42:05:7b:7d:a9:27:1f:aa:7b:a6:de:39:
6c:83:3b:19:9e:87:69:b8:a6:93:7c:91:38:6c:4a:
52:bc:a6:84:72:ae:d5:b4:97:30:63:d9:59:02:50:
7b:50:ca:74:a9:ad:b9:60:39:f4:10:54:62:2a:56:
18:c8:7e:07:53:bb:f6:af:34:a1:80:e8:d6:40:21:
2c:12:25:00:f2:a1:67:ad:df:88:7b:ed:22:64:d7:
b9:30:c7:c5:4e:8c:30:cb:74:6a:9b:fa:89:70:c5:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:C8:F9:0F:78:F7:C6:CC:44:AE:B3:97:63:E4:84:26:57:21:99
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20323131363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:82:fc:ea:b9:c8:11:20:63:66:bb:ae:7a:3f:7e:c3:1f:a1:
9e:45:6a:69:35:89:16:71:9d:54:8f:3b:ae:37:ed:82:f2:d7:
85:b4:ef:2c:58:0e:fd:13:ff:82:7a:6b:eb:0e:03:60:cc:ff:
ce:e6:8b:46:7e:cc:60:ce:45:33:a3:b5:53:ff:a1:a8:35:6e:
39:3e:94:98:0b:b5:db:c5:51:7e:be:2a:ed:3a:58:de:62:b2:
aa:8b:a9:b6:ef:44:26:b1:f2:66:db:c4:e0:b4:93:a1:80:c8:
e0:7b:02:5a:ff:ff:8f:cf:7e:b3:c6:9d:ba:f1:b3:42:42:2a:
1e:aa:2c:52:e9:58:a6:b5:65:63:6e:77:b1:84:ad:78:e4:43:
59:09:41:6e:fa:71:f9:ad:6d:95:22:bc:c5:54:26:b2:bb:b6:
60:c9:8d:c8:26:32:29:c8:19:d6:5b:3f:e4:63:c7:66:d1:10:
c3:3e:d6:94:75:d3:68:7e:e5:19:4e:fa:23:3d:19:46:41:8d:
2e:21:5a:b4:86:f4:a5:76:83:c3:63:61:ca:07:4d:92:04:59:
81:87:06:91:86:70:56:de:b9:5c:6e:b6:b0:7d:8c:2d:4b:ae:
46:7b:a3:72:a8:36:74:4c:25:10:1c:25:de:27:cf:53:7c:43:
69:e1:06:55
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 9 00:37:30 2023 by rpki-client on console-ams.rpki-client.org