Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20323037363333.roa
File: 34352e3133372e39382e302f32342d3234203d3e20323037363333.roa (raw, json)
Hash identifier: HuxWhDSisXKrw7m7RioGJ0MeLvxcNagrWmyvWdqdHWc=
Subject key identifier: A1:89:F7:1C:8C:33:33:DC:22:52:D6:85:46:4D:CD:57:8B:BD:C2:E0
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4586F533521E5CE2B6F2C9FD42D272ECA8D41771
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20323037363333.roa
Signing time: Thu 06 Apr 2023 11:58:23 +0000
ROA not before: Thu 06 Apr 2023 11:53:23 +0000
ROA not after: Thu 04 Apr 2024 11:58:23 +0000
asID: 207633
IP address blocks: 45.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:86:f5:33:52:1e:5c:e2:b6:f2:c9:fd:42:d2:72:ec:a8:d4:17:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Apr 6 11:53:23 2023 GMT
Not After : Apr 4 11:58:23 2024 GMT
Subject: CN=A189F71C8C3333DC2252D685464DCD578BBDC2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:f5:ff:99:7b:6e:03:65:b3:68:13:46:49:
76:bf:62:a2:0b:4d:4c:64:06:8f:d0:75:5f:60:c2:
61:a7:94:fd:5f:e9:d2:7b:a0:99:bb:7b:a2:80:90:
98:bf:b2:7c:43:ed:19:58:9b:5f:4b:78:c9:97:7a:
60:bb:25:fa:55:cb:02:be:2f:06:8f:dc:1a:1d:88:
f2:34:3b:a9:45:9f:99:84:76:a0:d5:f9:f9:bd:08:
78:0d:98:fa:fa:d9:61:e6:c8:7a:b4:8a:6d:ca:7c:
e7:a6:80:75:c6:cf:29:c3:95:99:c8:d6:88:f6:7f:
28:cc:ab:9f:dd:7d:28:e6:59:fc:a9:15:c4:ba:28:
33:2f:bf:3e:ef:13:07:35:71:be:f0:ae:5d:61:c2:
d7:b9:f5:a8:41:f6:96:9f:0c:74:3e:5b:e3:2a:6a:
2c:a9:d4:f9:86:82:88:cd:06:1c:3e:2f:f2:5c:99:
47:c0:5e:9a:1f:8b:6b:57:ad:d4:5e:7c:62:41:b9:
89:d6:e3:c4:1d:e8:bd:14:91:27:93:c8:1e:c9:da:
e5:8b:a6:ec:14:85:9d:76:f2:b6:28:4b:b6:26:06:
e5:1c:21:74:82:23:0f:f8:c0:fa:c8:c5:9d:6f:48:
12:29:22:aa:a7:e6:d7:1a:57:83:21:57:d9:bb:88:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:F7:1C:8C:33:33:DC:22:52:D6:85:46:4D:CD:57:8B:BD:C2:E0
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20323037363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:36:d7:34:2e:c7:11:53:e5:82:bc:04:b1:8c:92:e7:92:51:
4f:42:45:95:89:7c:81:45:70:75:25:75:c1:ba:2f:6c:7e:de:
c5:17:f1:5e:0d:47:5f:1a:f8:c5:10:6b:19:a6:1d:d6:81:cf:
ad:90:e3:4e:1d:f5:b7:27:f6:7b:bd:5f:d2:32:b6:44:f0:03:
9a:4f:8c:a7:5e:51:88:2c:42:30:01:4d:d3:c1:25:1d:0e:3d:
e8:bc:47:10:06:5b:30:b9:4b:c6:db:2b:01:fa:40:aa:48:5e:
dd:1d:36:37:b7:3f:d8:dc:be:e3:53:43:d3:76:95:7c:88:f3:
09:ad:7a:38:e8:c6:ac:e7:ae:67:7d:2b:5c:0a:01:6d:09:39:
af:82:bf:6c:5a:f8:50:3b:e4:2d:dc:f3:3b:e0:04:1a:23:24:
64:d9:ff:06:ea:51:11:d8:df:81:b5:4e:fe:95:b0:e9:e1:5b:
5b:7a:7d:b4:8b:5d:b0:f3:8f:3c:ed:f0:f5:e5:f5:04:68:78:
ee:b6:2c:08:5a:9c:2f:8b:e3:1e:8c:0a:54:69:79:f0:21:af:
ab:7d:04:68:fa:5c:73:6c:87:4c:5a:7f:a2:7f:92:91:ef:82:
89:a1:1d:bb:59:65:4d:c1:50:62:8a:5c:49:f8:07:b2:5a:dd:
85:25:2a:1e
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 6 00:52:25 2023 by rpki-client on console-ams.rpki-client.org