Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20343030383636.roa
File: 34352e3133372e39382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: wRt969qFofyHs/VpKx5CBPS5tvo83UHqaXPDDjiqpOk=
Subject key identifier: 8B:4E:A2:94:FC:18:1A:D1:95:A6:BF:A9:E4:2B:44:BB:6C:AB:16:CE
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 42A6DB487874AE0CE55CC71C38D9CC49761FD358
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 15 Nov 2023 08:30:28 +0000
ROA not before: Wed 15 Nov 2023 08:25:28 +0000
ROA not after: Wed 13 Nov 2024 08:30:28 +0000
asID: 400866
IP address blocks: 45.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a6:db:48:78:74:ae:0c:e5:5c:c7:1c:38:d9:cc:49:76:1f:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Nov 15 08:25:28 2023 GMT
Not After : Nov 13 08:30:28 2024 GMT
Subject: CN=8B4EA294FC181AD195A6BFA9E42B44BB6CAB16CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:a6:9a:20:40:49:46:b6:b5:f6:54:d3:0b:
85:74:10:9b:9a:04:a0:a7:b0:c9:b9:02:7e:5e:9a:
2f:b6:f5:4a:19:d5:18:6e:d2:85:c6:38:a5:aa:42:
26:db:0c:d7:1a:db:b4:11:e1:9d:7d:a8:77:35:a4:
b9:31:15:5a:ed:1a:7f:36:bd:f1:00:b6:4c:75:69:
a5:10:e7:8d:9e:a1:cb:db:41:ef:d4:5e:6a:2f:ef:
82:82:ef:db:f0:46:f3:1f:3b:3e:9d:dc:14:31:0d:
9d:ed:60:ea:e2:93:aa:cc:e0:c7:fc:12:86:20:86:
97:07:3d:4e:55:e2:6f:55:ff:65:e4:9a:d3:9b:da:
73:d5:95:c8:e5:8a:96:54:55:9c:3b:cf:71:a8:88:
09:ab:fe:3b:28:30:49:b0:78:20:f3:81:20:9d:a5:
cd:d4:22:ac:39:a0:4e:ce:24:2a:27:b1:6e:3c:e6:
76:d8:8a:a0:df:e7:43:2d:16:98:71:d0:22:f2:c0:
d0:7d:1b:0e:cb:2b:d0:2d:91:cb:8c:be:97:01:a1:
84:6b:5c:6d:6a:98:75:3e:2a:e9:32:92:03:80:fe:
39:e1:c4:70:a5:9e:eb:eb:e1:ac:91:e4:2b:b0:21:
0d:14:f8:e4:5c:ae:1e:70:32:c0:04:8e:ea:52:08:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:A2:94:FC:18:1A:D1:95:A6:BF:A9:E4:2B:44:BB:6C:AB:16:CE
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b1:19:4d:15:a4:84:43:09:3b:6f:e0:90:c0:45:dc:6d:5e:
0f:94:cd:d6:56:3a:0f:6c:8f:e6:46:d8:41:6d:fd:0c:9d:bf:
52:a9:8d:85:b5:83:94:91:de:3d:00:38:ce:1d:40:07:d8:60:
19:b4:f8:c2:c5:73:20:3a:8c:23:fc:7e:86:fa:06:e6:3e:f5:
1a:68:51:fb:4d:13:b3:29:42:59:8b:87:ef:ec:c3:b2:f3:1a:
60:c4:29:2f:63:dd:9a:0e:7f:5b:b5:13:dd:39:4b:a7:05:a7:
7b:3e:a4:6e:93:d2:3e:01:b6:da:4e:df:fb:2d:b9:4a:2d:f4:
a4:e5:53:35:98:e3:bd:63:15:c5:9f:27:3c:7a:75:f5:dc:4b:
ee:38:60:12:f5:cd:c6:65:59:56:a4:0e:9d:b4:c6:a0:52:fc:
2d:ba:6d:8d:f0:e1:77:d2:00:5b:97:cd:c4:cc:0a:f0:cf:36:
b4:a3:50:62:e5:cc:c3:9c:ad:55:47:51:65:54:84:51:80:39:
0f:fa:96:04:84:3e:3e:5c:7f:f4:eb:21:80:97:5c:8d:47:52:
e7:e1:bd:c8:75:4a:e0:0f:6b:05:33:53:54:74:5a:d0:db:c2:
6a:f7:29:d6:4b:a6:cb:81:09:cd:24:ef:64:77:6c:10:3a:04:
7d:28:cb:fb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQqbbSHh0rgzlXMccONnMSXYf01gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yMzExMTUwODI1MjhaFw0yNDExMTMwODMwMjhaMDMxMTAvBgNV
BAMTKDhCNEVBMjk0RkMxODFBRDE5NUE2QkZBOUU0MkI0NEJCNkNBQjE2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl6aaIEBJRra19lTTC4V0EJua
BKCnsMm5An5emi+29UoZ1Rhu0oXGOKWqQibbDNca27QR4Z19qHc1pLkxFVrtGn82
vfEAtkx1aaUQ542eocvbQe/UXmov74KC79vwRvMfOz6d3BQxDZ3tYOrik6rM4Mf8
EoYghpcHPU5V4m9V/2XkmtOb2nPVlcjlipZUVZw7z3GoiAmr/jsoMEmweCDzgSCd
pc3UIqw5oE7OJConsW485nbYiqDf50MtFphx0CLywNB9Gw7LK9AtkcuMvpcBoYRr
XG1qmHU+KukykgOA/jnhxHClnuvr4ayR5CuwIQ0U+ORcrh5wMsAEjupSCLfhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUi06ilPwYGtGVpr+p5CtEu2yrFs4wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzEzMzM3MmUzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzgzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYliMA0GCSqGSIb3DQEBCwUAA4IBAQCDsRlNFaSEQwk7b+CQwEXcbV4PlM3WVjoP
bI/mRthBbf0Mnb9SqY2FtYOUkd49ADjOHUAH2GAZtPjCxXMgOowj/H6G+gbmPvUa
aFH7TROzKUJZi4fv7MOy8xpgxCkvY92aDn9btRPdOUunBad7PqRuk9I+AbbaTt/7
LblKLfSk5VM1mOO9YxXFnyc8enX13EvuOGAS9c3GZVlWpA6dtMagUvwtum2N8OF3
0gBbl83EzArwzza0o1Bi5czDnK1VR1FlVIRRgDkP+pYEhD4+XH/06yGAl1yNR1Ln
4b3IdUrgD2sFM1NUdFrQ28Jq9ynWS6bLgQnNJO9kd2wQOgR9KMv7
Generated at Mon Dec 11 00:47:37 2023 by rpki-client on console-ams.rpki-client.org