Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20323131343539.roa
File: 34352e31322e38302e302f32342d3234203d3e20323131343539.roa (raw, json)
Hash identifier: ggzAhoxRyDnLwVV871lWpXgXFhMhvS+56e4Nx6zrAVo=
Subject key identifier: 7F:E6:A0:95:DE:C0:4C:9D:A7:24:CE:8D:C0:C2:15:77:A0:5F:47:6E
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 51CFFDAFFE57850F18C8D647B99203074B803DA0
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20323131343539.roa
Signing time: Wed 22 Mar 2023 18:10:54 +0000
ROA not before: Wed 22 Mar 2023 18:05:54 +0000
ROA not after: Wed 20 Mar 2024 18:10:54 +0000
asID: 211459
IP address blocks: 45.12.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:cf:fd:af:fe:57:85:0f:18:c8:d6:47:b9:92:03:07:4b:80:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:05:54 2023 GMT
Not After : Mar 20 18:10:54 2024 GMT
Subject: CN=7FE6A095DEC04C9DA724CE8DC0C21577A05F476E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:fc:f7:e9:b2:e6:53:53:19:e7:e6:1d:50:
c2:4c:4c:89:50:ad:84:7b:a1:9f:08:08:75:20:39:
be:b2:c6:9c:9e:1a:a7:de:cf:8d:ba:c2:8f:28:8a:
6d:b1:88:cd:c7:c2:2d:29:24:17:4b:72:0f:6d:c5:
fa:c4:67:d9:f4:e3:15:81:be:e9:41:bf:fc:aa:81:
c8:b1:2e:d0:d8:fb:64:13:41:44:2d:9c:37:85:03:
44:bf:b5:02:67:6a:31:3c:1d:91:53:41:a9:df:da:
62:aa:8c:82:2b:c4:07:c4:6d:f7:b4:3f:0f:1b:a0:
6e:5a:dd:ba:2f:6a:55:e1:ec:b5:ee:6a:f9:46:c8:
71:1d:d0:4f:07:37:81:57:82:0a:e3:22:fa:1c:4e:
7b:0f:de:02:50:eb:69:ac:37:f1:12:bb:c5:3f:3a:
98:13:d8:bf:95:d5:a5:b4:90:72:46:68:1c:cb:65:
7e:91:8f:61:48:ff:e1:56:2f:38:12:72:af:e1:89:
f1:0d:30:fa:5a:66:05:cb:cf:0d:dc:cc:82:62:72:
43:1f:f4:ef:55:c8:bc:d0:2e:5e:fc:8f:2e:dc:24:
90:f1:6d:cd:48:55:fb:18:66:27:01:fd:4a:fd:da:
d1:00:be:cb:74:f7:24:ee:b8:a8:b4:30:d0:01:0d:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:A0:95:DE:C0:4C:9D:A7:24:CE:8D:C0:C2:15:77:A0:5F:47:6E
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20323131343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ca:35:ab:bb:77:ab:d0:d5:94:6f:6d:39:6f:5c:26:4a:b5:
71:ef:5e:cd:81:e0:7c:85:15:b4:27:5b:be:39:bf:29:74:e6:
69:dd:5e:1e:13:05:0a:ea:92:4e:a4:70:4c:53:32:51:49:c3:
7f:b1:ba:f0:6f:40:c4:42:df:64:9b:61:96:82:e9:3b:24:83:
75:4e:11:8e:d0:1d:a1:5e:97:47:e9:57:b9:1c:5f:78:59:b6:
b5:30:a6:59:3d:65:ec:d0:92:60:86:d6:71:bd:95:b6:53:e4:
fe:b7:fc:cf:74:aa:03:d8:87:a8:fd:19:30:a0:97:f9:df:64:
4f:df:f8:25:ce:d1:0f:0e:4b:a2:b0:65:53:90:b8:9d:b8:f1:
0e:88:69:b2:ef:b4:7b:00:0e:8d:aa:4f:37:a7:c4:9a:44:af:
47:6b:fa:39:58:30:1b:ae:0f:47:1a:9d:9a:a1:41:ba:31:2e:
70:b9:41:52:ce:a9:8e:5e:46:82:b4:60:8e:2a:cf:57:d9:03:
0f:b2:6c:e2:0f:8d:f0:95:5c:b4:3f:9d:6e:cb:bd:b5:cb:96:
a5:26:ec:cb:06:cf:b3:a7:f0:fd:96:58:3a:e9:e2:ce:8d:c2:
4d:b3:b8:5c:22:70:ae:89:af:c1:3a:94:e5:c4:79:aa:85:fe:
c2:e8:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 10:59:43 2024 by rpki-client on console-ams.rpki-client.org