Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323032363733.roa
File: 34352e31322e38312e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: hJE+oxXIdKV3a87SvTxd1ohFx7hwc0Amy6WueqKWoaQ=
Subject key identifier: 80:52:EB:AE:9D:D2:87:8D:9C:DB:15:B7:92:71:B0:93:19:BB:74:2A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 41303B754E7350FF0AF7D2EEA7161B6A780A8F89
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323032363733.roa
Signing time: Wed 06 Dec 2023 21:15:49 +0000
ROA not before: Wed 06 Dec 2023 21:10:49 +0000
ROA not after: Wed 04 Dec 2024 21:15:49 +0000
asID: 202673
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:30:3b:75:4e:73:50:ff:0a:f7:d2:ee:a7:16:1b:6a:78:0a:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 6 21:10:49 2023 GMT
Not After : Dec 4 21:15:49 2024 GMT
Subject: CN=8052EBAE9DD2878D9CDB15B79271B09319BB742A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:a3:d9:9a:f6:f3:cf:d0:ee:8d:11:65:89:
35:88:aa:73:56:3a:1b:ea:8c:78:04:94:a3:d9:7e:
57:f7:6b:11:3a:8c:95:ab:c5:2c:de:44:d1:c1:76:
27:e4:a4:84:e3:c7:57:f7:88:df:cf:6f:aa:c9:63:
4b:71:d1:2f:f4:b8:b5:68:5b:07:fa:39:0c:1d:50:
df:60:b4:5e:b5:b5:9d:bb:e4:9e:ad:3e:1b:4f:59:
67:4e:ab:1b:da:66:3d:f6:ea:0c:2b:02:00:3d:8b:
28:31:45:48:dd:ed:2e:1f:91:c0:ec:d7:68:0e:91:
7e:e2:ae:e1:2e:74:fd:c5:76:12:52:47:44:ad:b2:
e7:11:ef:fa:29:50:cd:b8:f7:c7:b9:79:24:9f:93:
9c:42:a2:fa:8d:ec:31:ec:89:1f:fa:43:80:57:44:
f9:f8:5d:86:14:9f:cd:ee:72:20:d4:95:a9:1f:fb:
a7:ff:4c:19:d7:f8:aa:3c:16:b7:c2:41:65:f6:b1:
ec:0d:5a:56:0a:48:b0:50:88:f9:57:69:83:bd:8a:
00:c8:c5:71:45:f9:c7:a7:6f:34:68:cb:71:d7:ba:
6f:e1:f8:3c:49:ee:77:59:92:0a:e0:21:f3:81:fb:
59:75:14:10:bd:c8:23:b0:2f:ad:4e:b5:e0:f7:d0:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:EB:AE:9D:D2:87:8D:9C:DB:15:B7:92:71:B0:93:19:BB:74:2A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c9:a3:9a:cd:f9:04:5e:de:ba:fa:eb:92:0e:59:d3:8f:a9:
09:e1:1b:2e:10:01:32:2a:f3:2d:f4:d8:eb:f4:9f:a9:b0:51:
5b:89:3b:00:76:7e:ab:de:18:ad:8f:5e:23:ce:86:3b:b6:a1:
2a:83:55:2a:86:3e:ca:40:1f:d0:ce:44:6f:b0:86:a1:7d:30:
d6:71:8a:75:23:37:7e:5f:23:3b:e5:43:16:aa:16:25:08:52:
8d:84:2f:1e:38:e0:7b:d5:02:9a:70:20:bd:14:f8:c3:ee:23:
03:7c:87:82:24:6b:2a:09:ea:33:ab:61:5c:84:88:e2:40:50:
88:a9:37:ed:4f:73:ff:a4:5a:d3:4f:28:e5:31:cc:d0:2d:d5:
6a:ed:87:79:a5:10:8a:65:db:65:c5:b6:b0:f1:11:6a:9c:b3:
71:c9:23:9a:52:c8:65:b8:16:73:38:df:c2:19:15:dc:6f:2f:
04:2e:57:34:bc:db:22:ed:5a:ab:4e:03:97:21:e0:15:a6:89:
61:2e:b5:cc:ae:dd:e6:37:80:84:50:ee:bd:ca:a9:2a:b0:30:
73:b0:62:f1:1f:dd:21:7e:5f:f9:be:ee:f8:56:f6:b7:d8:4b:
f5:b8:4b:bf:71:f2:38:01:57:49:6e:0a:e1:d7:07:3f:e7:4a:
92:24:73:39
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 6 01:21:04 2024 by rpki-client on console-fra.rpki-client.org