Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203235313938.roa
File: 34352e38372e3137322e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: imtAsvRIH2947pRrZAEu5i3wECyYIkNHjSBBaK0uDK4=
Subject key identifier: 27:C9:62:5A:5D:7C:D5:50:FC:15:3B:F8:85:CC:0C:45:FA:33:8E:91
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 628A65756ADD6D1420D58567E32DF841A4E62175
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203235313938.roa
Signing time: Thu 11 May 2023 03:40:33 +0000
ROA not before: Thu 11 May 2023 03:35:33 +0000
ROA not after: Thu 09 May 2024 03:40:33 +0000
asID: 25198
IP address blocks: 45.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8a:65:75:6a:dd:6d:14:20:d5:85:67:e3:2d:f8:41:a4:e6:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 11 03:35:33 2023 GMT
Not After : May 9 03:40:33 2024 GMT
Subject: CN=27C9625A5D7CD550FC153BF885CC0C45FA338E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:6a:39:d8:41:8d:15:79:af:a9:50:9f:94:
64:e4:94:33:77:02:9f:17:37:7d:fe:68:6f:13:df:
ba:9b:62:2e:ef:9c:a5:66:14:8c:85:fe:cb:b8:8a:
b9:e4:bb:2b:8e:02:4a:08:84:1f:f7:74:39:97:e2:
52:0e:91:7b:27:3e:8f:31:2c:e2:ff:57:84:c2:37:
08:56:f7:b9:e7:4e:8e:36:f0:58:d7:d9:e9:6c:52:
e0:f2:47:b4:1b:e2:2c:77:e2:23:93:ad:c9:41:4f:
b7:0c:94:55:5c:68:4b:bf:db:71:7e:41:5a:ca:10:
fe:cd:09:12:88:b7:37:ef:5b:4e:75:f6:00:88:6c:
38:74:4c:88:59:1c:65:27:6b:33:ba:64:ac:b3:f5:
4a:89:13:5f:e7:83:1e:fd:c3:a2:6d:0a:3b:a4:63:
97:b3:dd:ec:35:b9:22:b4:2e:bd:16:c1:47:99:3c:
15:ff:9e:c8:1e:fc:0e:36:cf:51:c2:4e:9e:81:1a:
a4:b2:de:44:df:f1:25:67:40:23:75:9a:06:b8:c2:
19:4b:5c:29:c5:da:14:c5:49:93:f2:02:ce:4b:f4:
67:99:af:4a:1c:69:55:48:ab:b5:88:07:2c:83:90:
56:67:96:af:a9:e1:43:36:b8:a6:7a:fe:d8:95:97:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:62:5A:5D:7C:D5:50:FC:15:3B:F8:85:CC:0C:45:FA:33:8E:91
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
84:56:98:73:bd:fb:db:83:39:f1:9f:a6:92:64:6d:e5:4f:fe:
5b:99:e2:bf:bf:e1:6f:b0:d5:75:cb:8f:f8:d4:0d:b1:8e:6e:
47:ac:fd:a8:4c:c2:6f:20:59:8e:99:9f:36:0f:9f:59:81:b0:
81:d7:22:10:17:15:54:83:e0:41:35:be:14:54:31:d6:87:fb:
44:68:c0:da:09:33:7b:ac:6c:bb:d2:8f:c3:21:78:cf:e1:4a:
da:77:30:b8:4a:df:64:fc:8b:81:86:a2:7e:a4:bd:10:95:b2:
0a:5d:37:60:ef:08:71:22:23:fb:b4:9b:5c:5e:11:ee:23:dc:
83:1a:bb:02:79:f9:c3:84:b1:14:b5:ef:58:76:29:2c:6b:5d:
0e:e6:54:20:60:a9:22:dd:f6:79:97:76:29:c1:1a:ca:ec:a0:
e9:2c:53:dd:c6:ce:c9:47:bc:d9:25:06:32:7a:43:90:7d:c2:
33:5d:3a:8c:30:53:75:48:91:4f:98:3a:f4:24:05:01:f8:12:
96:b6:2d:68:0d:0d:54:e6:74:13:df:0b:be:3b:39:6c:c0:56:
38:9e:9b:33:a6:19:84:32:db:0e:bc:e2:59:75:dc:4f:71:37:
3c:43:70:40:95:d7:c2:6e:0c:fa:67:8c:88:92:31:6f:d2:4c:
7a:6d:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org