Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e203433323630.roa
File: 34352e31322e38312e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: z8qZwQxtZSAUbUCqOkM+7lP1t9EjSMjxWPX3n4OfJiM=
Subject key identifier: 92:93:79:42:FB:61:75:A8:D6:DD:6F:2A:29:DA:27:C7:63:75:BB:70
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0D093BCA7221CB96D66B181201BE74FC2BDBFDA4
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e203433323630.roa
Signing time: Wed 22 Mar 2023 18:11:02 +0000
ROA not before: Wed 22 Mar 2023 18:06:02 +0000
ROA not after: Wed 20 Mar 2024 18:11:02 +0000
asID: 43260
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:3b:ca:72:21:cb:96:d6:6b:18:12:01:be:74:fc:2b:db:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:06:02 2023 GMT
Not After : Mar 20 18:11:02 2024 GMT
Subject: CN=92937942FB6175A8D6DD6F2A29DA27C76375BB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:3b:77:3e:05:2e:5d:12:a3:48:7b:71:bc:
52:8d:c1:63:ce:fa:54:67:fb:ca:5f:3d:1b:76:f5:
ab:73:56:5d:94:2d:4e:36:fe:3f:f3:2d:24:a9:a8:
64:9e:b1:ee:3b:92:b4:cd:7a:a5:9b:4d:57:49:03:
4c:da:1e:22:85:d1:85:c4:b5:a2:e3:c4:c7:35:c7:
0f:38:c2:38:54:72:e6:91:9a:f8:71:82:a9:59:e5:
5d:b5:dc:24:2c:6a:15:1f:ca:2b:14:91:7b:0a:d6:
74:6f:30:4a:a2:49:2e:2f:83:9e:8a:d5:43:82:33:
7d:84:f5:b4:0e:4f:35:d6:79:a2:07:04:66:24:ec:
6c:21:e9:4e:92:4a:40:25:4e:72:37:b4:66:2c:5f:
78:69:06:5f:69:c9:30:54:26:cc:7a:33:d3:9c:49:
79:ff:c5:06:b7:10:3c:f7:55:85:97:8f:3b:1c:0b:
b6:c7:14:58:f5:1a:d6:a4:0a:b2:8f:1d:c3:8a:d0:
d1:b3:8e:2a:aa:85:42:95:67:11:5e:6a:d0:a4:d1:
80:52:b4:b7:dd:72:35:d1:72:5f:b5:cc:09:d8:c0:
aa:2f:5f:97:42:dd:5a:0b:34:28:2d:22:50:41:7c:
97:45:72:35:fe:67:b0:33:ad:b7:5b:21:4e:17:38:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:79:42:FB:61:75:A8:D6:DD:6F:2A:29:DA:27:C7:63:75:BB:70
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d1:c7:92:8d:2f:c0:70:17:0a:23:4a:2f:a6:1e:e3:4a:9e:
7d:eb:b4:31:de:37:59:96:d2:02:2b:cd:21:99:0a:4b:5a:e8:
73:e3:09:ed:08:36:98:a2:11:68:5a:85:ad:05:8a:a4:17:53:
b9:b8:b5:90:91:c9:c3:70:27:0e:0b:8f:65:70:a9:65:16:af:
36:00:be:db:e1:e8:2c:fa:af:bf:f6:4a:b1:6f:91:f7:49:61:
5e:0e:75:41:13:37:78:8c:9f:7b:a3:7c:a6:fc:af:d6:55:18:
36:b5:f2:6c:c6:d8:85:34:1a:41:c5:d2:e6:d5:82:1a:79:df:
98:2f:cd:cd:23:d4:b7:a6:95:e6:82:6e:e4:aa:a9:54:04:70:
ea:d5:b2:30:7d:b0:36:6f:b6:65:47:28:69:2b:60:6c:4e:b8:
3d:c5:27:f5:ec:ed:36:b0:36:de:ce:0d:f0:69:ac:4c:a1:7e:
ca:ac:76:5a:f1:87:58:98:8e:e1:94:0b:25:a5:21:34:55:f6:
9f:59:4a:5e:2c:98:70:60:77:fb:7b:54:64:3a:c9:e7:71:98:
db:14:54:be:59:3d:1e:fc:5c:bc:5f:3e:1c:98:40:77:9f:63:
ac:34:02:40:43:77:d1:93:db:d1:39:a6:a9:dc:0c:11:98:7f:
9f:20:03:c4
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 1 00:26:15 2023 by rpki-client on console-fra.rpki-client.org