Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
File: 34352e382e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cjPjaTZBvsFws3TZ76BYXuDX4b5Y4ya68bDnoHlNK0E=
Subject key identifier: 5E:DB:52:38:06:89:0C:6A:28:2F:B0:F0:C6:D6:49:D4:6C:05:F2:3C
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 41D57A1FF759A3F02DE8FA4D1818DD63C2188D20
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
Signing time: Wed 09 Aug 2023 00:00:06 +0000
ROA not before: Tue 08 Aug 2023 23:55:06 +0000
ROA not after: Wed 07 Aug 2024 00:00:06 +0000
asID: 834
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d5:7a:1f:f7:59:a3:f0:2d:e8:fa:4d:18:18:dd:63:c2:18:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 8 23:55:06 2023 GMT
Not After : Aug 7 00:00:06 2024 GMT
Subject: CN=5EDB523806890C6A282FB0F0C6D649D46C05F23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:cf:6a:25:73:bd:f7:c4:cb:9e:65:fc:ed:
06:a2:68:a1:b1:a5:1e:8d:fa:4d:5d:c0:53:47:5c:
44:47:f0:7e:ca:a8:1a:12:ed:ec:0b:69:b5:7b:d0:
88:e7:f2:b0:ba:6d:cb:66:14:95:b3:b3:30:16:b5:
c3:7c:6d:ed:d6:ac:23:04:40:3c:ed:67:dc:a0:29:
db:46:d2:eb:92:a8:05:a4:97:7c:48:d1:4f:5e:6a:
51:d8:8f:cb:82:86:09:c6:77:12:46:08:70:72:91:
ce:09:9a:27:5d:ec:68:be:46:35:0d:01:b1:29:99:
56:bd:64:0a:ee:0f:c3:bf:78:1a:b0:ba:6e:86:d7:
04:ec:00:be:f3:74:cb:92:84:e4:d4:2b:23:86:46:
a9:83:a4:28:d1:bb:18:57:8b:d8:0c:67:40:7f:0c:
7c:7e:31:fe:be:ba:db:c2:d4:ae:cb:f0:22:45:d0:
4c:26:d6:f8:96:6f:f9:17:91:2a:ab:ca:7b:1c:f5:
72:ea:32:35:e7:a8:f0:ac:b5:61:01:d3:ef:81:da:
56:a8:13:73:20:ab:ed:e5:88:5a:8d:cd:0b:d6:94:
19:8d:37:68:90:b6:89:f9:f8:17:42:3e:fd:eb:73:
11:b5:5e:b9:9b:fc:ed:70:f1:e9:65:f6:3c:27:38:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:52:38:06:89:0C:6A:28:2F:B0:F0:C6:D6:49:D4:6C:05:F2:3C
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4f:47:f7:6d:d1:3c:4f:ed:ef:9c:3e:4c:65:e9:27:1d:84:
76:20:d6:3f:42:d3:f6:73:47:6b:39:92:35:26:28:09:7b:74:
de:8f:04:09:3c:c7:61:e9:7c:61:bf:61:7c:15:b3:9a:60:44:
65:b9:52:a1:e2:c0:e3:9f:36:dd:32:1d:05:8f:f3:40:08:64:
cc:75:02:9c:91:c4:a0:36:27:4e:5e:14:7c:e3:31:47:b7:5f:
a9:e8:ea:85:06:83:de:2e:cd:6a:db:dc:c5:03:3e:4f:ff:9d:
60:1a:a6:09:e2:af:d8:8b:d0:15:fc:ea:d9:24:dc:19:60:a2:
6d:91:3b:82:88:f8:71:9d:33:d4:77:e8:2f:e9:81:0e:60:86:
51:d5:68:a9:ef:39:ec:a1:5a:ac:64:d9:4c:54:ab:9a:29:b8:
ee:c0:38:11:46:94:85:4d:ab:d3:99:76:9b:42:da:d9:ec:3e:
3d:93:5f:fd:76:b8:22:83:4b:71:3b:ba:72:4a:99:f6:cb:dc:
ae:1d:f3:09:03:d1:fa:3c:5b:a6:f6:43:ee:4d:a5:99:6e:de:
2a:34:f4:87:00:b4:87:d5:dd:8e:63:e8:70:d0:de:78:02:69:
1f:11:63:7e:43:55:86:f4:22:bd:9c:e9:16:63:45:b2:34:7d:
12:c1:2b:49
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 9 12:53:05 2023 by rpki-client on console-ams.rpki-client.org