Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35392e302f32342d3234203d3e20323130373033.roa
File: 34352e3135382e35392e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier: rdGZMTkt+SdhoJOCl7xsQ1xdiSSUQo5Ap+WJQJCJcUU=
Subject key identifier: 75:F6:26:78:1A:8C:11:EE:41:7E:1F:B7:81:49:75:FE:76:91:A2:46
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 316B00F5A51EEF9DA22D612E88C154E8455EAD99
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35392e302f32342d3234203d3e20323130373033.roa
Signing time: Wed 22 Mar 2023 18:13:58 +0000
ROA not before: Wed 22 Mar 2023 18:08:58 +0000
ROA not after: Wed 20 Mar 2024 18:13:58 +0000
asID: 210703
IP address blocks: 45.158.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6b:00:f5:a5:1e:ef:9d:a2:2d:61:2e:88:c1:54:e8:45:5e:ad:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:08:58 2023 GMT
Not After : Mar 20 18:13:58 2024 GMT
Subject: CN=75F626781A8C11EE417E1FB7814975FE7691A246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:97:f9:62:fb:9b:1d:7b:47:86:f6:05:fe:
63:16:bb:6d:01:52:45:d5:72:d3:47:2f:39:06:66:
f1:c4:3c:25:7a:2f:fa:2e:eb:8e:d4:fd:30:73:d2:
b2:64:45:d6:b9:2d:65:c6:8e:d3:3d:0a:d0:b4:d8:
18:d3:f3:38:7d:84:f8:92:fa:94:22:b7:c1:52:2d:
44:e9:3b:c3:53:e6:3d:0e:8f:6c:ae:03:4f:2a:44:
5d:c4:26:74:96:1d:3a:c0:3d:09:f7:af:ea:64:21:
34:92:56:2a:44:fd:69:85:4c:f0:02:30:74:af:5c:
c5:89:f7:91:4f:b8:1e:cd:72:96:87:af:54:0a:d6:
00:85:7e:ea:a8:e3:7e:28:64:db:5d:e4:37:1e:bf:
9c:dd:a4:24:93:e9:14:0a:ab:3d:55:34:8c:6b:c6:
33:43:99:d7:5a:bc:af:a3:05:8f:f4:83:a2:75:18:
13:3e:37:f1:bf:46:96:ee:2a:35:97:eb:2d:69:e3:
94:4b:28:43:bd:42:20:0c:d9:85:de:c9:78:07:02:
41:f0:9f:e2:46:36:7c:b9:34:40:a8:52:db:ed:57:
d9:b3:2a:19:5f:b8:c3:df:b3:5c:b6:07:06:8b:d6:
04:b1:db:54:da:2e:5b:d9:42:45:06:1e:d4:03:c1:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:26:78:1A:8C:11:EE:41:7E:1F:B7:81:49:75:FE:76:91:A2:46
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35392e302f32342d3234203d3e20323130373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6a:18:0c:f4:09:cc:d1:4e:c4:b5:eb:f8:c8:ab:98:b6:2e:
ee:68:03:49:11:fc:3a:2f:6a:2b:31:f4:f9:6a:6d:94:03:b3:
d9:fa:9b:24:b0:f5:3e:bd:5b:ed:85:2e:59:6d:32:d9:5d:75:
40:12:f7:83:e5:42:50:ee:4a:e9:bf:f1:c8:b4:3e:6f:c6:c9:
56:c1:f3:d4:69:3f:bf:39:c6:30:35:d6:c7:99:3e:ec:f2:fe:
54:84:82:e3:04:80:67:df:ac:07:c8:27:ab:de:84:96:45:23:
b0:4f:5e:c1:67:f6:cb:19:f9:3a:f1:c5:a3:6b:80:6f:37:49:
b2:bc:54:cc:cd:15:5a:0f:65:c8:48:83:72:35:c6:d2:0c:25:
5f:8c:13:d4:35:ef:e7:db:8b:a7:59:44:88:5d:3e:45:7f:cd:
8f:5d:69:32:37:82:9a:fa:b0:78:5b:e1:e1:b8:ad:7a:30:e1:
1e:80:67:a6:2f:50:b9:4b:04:fb:69:9a:a9:48:28:bc:cb:4f:
de:54:09:94:d8:28:1d:c2:79:bc:04:21:5a:8c:a0:7f:67:f8:
89:4f:52:6e:6c:88:06:0d:3f:64:d3:65:42:d6:49:e1:37:ce:
30:8e:18:03:c9:f1:9c:59:31:4e:ba:07:9f:cf:fe:ae:a5:d6:
c1:3e:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org