Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e20383334.roa
File: 34352e3135382e35372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iEyBAXu2PcX2tDBBHlqldKAD26R1RC5d6D24elfI8o8=
Subject key identifier: 80:E9:B7:01:B4:5B:D0:63:DB:97:2D:79:FA:7A:35:64:A2:F4:D5:9A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 123B715D67DB8395760590B1478FE0E777A4CEE0
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Aug 2023 08:30:08 +0000
ROA not before: Tue 01 Aug 2023 08:25:08 +0000
ROA not after: Tue 30 Jul 2024 08:30:08 +0000
asID: 834
IP address blocks: 45.158.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3b:71:5d:67:db:83:95:76:05:90:b1:47:8f:e0:e7:77:a4:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 1 08:25:08 2023 GMT
Not After : Jul 30 08:30:08 2024 GMT
Subject: CN=80E9B701B45BD063DB972D79FA7A3564A2F4D59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:f4:50:79:36:3b:2e:ab:66:17:15:b8:6f:
7b:20:25:17:7b:14:8c:25:4f:4d:af:94:5d:af:ce:
85:77:25:ac:44:a2:e8:de:78:7d:55:dd:e1:76:3a:
35:e2:af:d8:85:88:3c:a2:33:9d:c1:ee:3f:7d:74:
75:32:f8:5f:f5:90:30:ed:2d:ad:f3:fc:10:28:5b:
13:08:02:09:67:49:0d:dd:41:50:8d:79:53:0d:03:
17:a6:1b:3b:ad:9c:45:06:46:4d:47:df:9f:7a:f4:
6a:a8:f4:28:eb:80:ae:a2:94:56:b3:1d:72:df:47:
60:43:9c:ba:46:fb:54:96:e0:17:ff:28:9b:9b:92:
d7:e4:5a:1e:f8:70:5e:45:b1:21:46:3f:9f:96:97:
f9:e6:b7:4f:da:c8:5c:d7:df:d6:ec:6a:03:f6:6e:
de:71:5d:5d:ce:5a:8c:aa:10:bb:ac:a4:50:8b:f0:
64:d9:eb:6a:f4:e2:c6:f5:f7:75:13:ca:13:7d:13:
4b:cf:56:cf:99:ed:65:43:a0:21:00:3a:cd:57:a6:
82:e1:86:bd:24:77:31:6d:27:71:d9:bd:34:47:db:
ab:39:e2:c4:ac:7b:13:7d:47:1e:15:d4:4e:05:5a:
8e:14:d0:37:cf:36:ea:e2:13:d2:20:cf:39:37:a5:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:B7:01:B4:5B:D0:63:DB:97:2D:79:FA:7A:35:64:A2:F4:D5:9A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:88:62:7d:51:a4:33:1e:1e:ee:dd:61:35:69:bd:c2:7b:25:
45:29:43:5c:23:87:6b:af:bf:ae:d5:9f:41:15:3a:ed:4f:ef:
ee:89:d3:78:73:33:3e:71:b7:c7:51:3c:05:c9:df:56:94:ee:
4e:af:3e:59:f1:f9:11:ef:3b:77:fc:08:75:ce:d6:ec:fb:09:
7c:a8:66:11:91:ec:ff:14:9b:6c:a2:95:39:76:bc:a9:67:01:
8b:7c:3e:55:7a:9e:d8:6a:3d:69:f6:f2:53:e6:4e:16:a0:ab:
0a:ec:22:21:e8:69:54:65:13:bb:bd:9a:fc:e0:68:ee:f4:bb:
92:8f:80:19:54:a8:7d:b4:58:68:e4:d7:4f:a7:7e:f5:24:7d:
4b:5f:35:97:26:28:66:0b:77:26:39:97:1a:5a:3a:15:61:cd:
6b:0e:1e:a6:45:98:32:89:d9:0b:fd:9a:43:d9:79:63:6d:65:
3a:1a:ed:a0:d1:e7:04:c1:70:90:6e:70:9f:11:70:ba:78:21:
39:14:de:2e:50:c2:ad:6d:15:0a:0b:99:3e:68:db:ee:53:ed:
9f:d5:b4:7c:26:b0:a7:69:29:17:43:0e:88:5c:9d:13:d4:9f:
94:de:d8:a9:8d:c2:c7:f3:02:80:82:91:eb:32:49:b3:08:bf:
d5:e3:ba:ad
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 12 15:10:44 2023 by rpki-client on console-fra.rpki-client.org