Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323130353338.roa
File: 34352e31322e38312e302f32342d3234203d3e20323130353338.roa (raw, json)
Hash identifier: 9eEsgwyF0r3N1jLvS8p1T+nrINhqzeqW+0QYyqYBrT0=
Subject key identifier: 8A:14:00:F4:E6:96:74:70:2D:2B:45:20:65:7B:EC:F4:C8:EB:51:0F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 572016D422229EDACD2C618D5547BF571CC61C56
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323130353338.roa
Signing time: Wed 22 Mar 2023 18:11:16 +0000
ROA not before: Wed 22 Mar 2023 18:06:16 +0000
ROA not after: Wed 20 Mar 2024 18:11:16 +0000
asID: 210538
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:20:16:d4:22:22:9e:da:cd:2c:61:8d:55:47:bf:57:1c:c6:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:06:16 2023 GMT
Not After : Mar 20 18:11:16 2024 GMT
Subject: CN=8A1400F4E69674702D2B4520657BECF4C8EB510F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:7e:f2:fc:70:ec:32:ed:3c:06:8c:34:c5:
84:4a:c6:5f:41:d7:ba:a7:f8:ff:a0:50:1c:61:68:
aa:f4:f7:14:f6:b6:4d:7e:a3:7a:40:e2:87:6b:90:
99:3f:8a:6a:e0:77:71:d6:40:9f:e9:fc:9d:9f:ed:
e7:8a:54:9b:99:26:73:12:98:f3:07:13:fa:56:0f:
93:01:b6:37:82:91:ff:ad:24:a1:1b:34:93:85:58:
45:da:40:97:68:47:4f:6e:63:98:67:77:98:00:3e:
2f:c9:46:f4:c7:38:9f:76:93:98:31:25:f3:66:ce:
43:f5:e8:0c:75:e5:e5:33:c4:48:fd:0b:ae:3b:cb:
02:f3:c0:42:ac:02:f4:ee:a4:2c:80:dc:e1:54:03:
bf:f0:27:df:2d:1e:a3:54:2c:0e:f2:3d:d4:f4:3e:
8f:af:71:c6:b3:ec:15:d6:83:1c:3e:23:66:4c:ad:
41:29:f2:38:a5:5e:e4:1a:2f:55:41:02:8b:36:79:
08:b7:f4:31:ca:6b:d7:f9:b9:8c:b5:45:94:6d:5b:
ee:6c:0a:3a:8f:0d:7f:68:7a:dc:ae:ef:56:35:ac:
83:f1:4e:d1:ad:56:91:8d:6f:c8:f7:f9:2f:8c:9e:
ed:45:cd:4f:f5:cd:b1:9e:7a:eb:c8:b4:b8:10:5e:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:00:F4:E6:96:74:70:2D:2B:45:20:65:7B:EC:F4:C8:EB:51:0F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323130353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:0e:96:7f:7d:4b:1c:80:ae:eb:b4:fb:26:8e:ce:ce:7f:
cc:ad:d3:84:07:d7:62:b9:61:5e:46:36:1f:09:57:94:01:23:
91:71:6d:ab:91:62:8f:c0:57:ad:44:6f:d6:bf:95:7a:00:ca:
d7:ed:72:22:c1:3f:ce:31:47:87:b6:ad:32:c5:b9:68:93:ff:
da:5c:5f:d9:ca:5b:a6:49:fe:6c:0b:40:af:06:f6:8b:27:8e:
64:49:1e:49:d4:7d:40:e6:7a:8c:2a:77:f3:16:67:a3:5b:c7:
28:80:40:7d:dc:a8:e6:8c:59:e9:33:61:36:93:80:c9:9e:4a:
90:9d:22:15:c2:43:86:95:f0:f2:e5:10:9c:b3:8a:de:c5:82:
22:6d:bb:38:9d:fb:ff:89:72:70:0d:02:77:80:09:7d:8c:25:
bc:c8:c4:c9:bf:d8:9b:4d:81:85:22:0e:02:aa:10:2a:2a:2e:
29:c3:2e:c9:34:b2:73:7c:a6:d6:d7:33:95:77:d4:71:37:7d:
59:d9:ed:11:48:f3:50:e1:7b:df:60:18:47:41:37:4b:31:cd:
32:cc:19:a9:af:f9:1d:72:b0:f3:87:db:c3:e2:bc:69:a5:8a:
61:a9:a2:68:14:e4:b3:6b:17:03:76:27:d6:67:68:fa:fd:62:
87:d4:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 00:26:15 2023 by rpki-client on console-fra.rpki-client.org