Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa
File: 34352e38312e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Wd9hmyv6VsO8seJheOmoqb9cviZ23HGOdnhd7zu8C2g=
Subject key identifier: F4:12:70:75:FB:92:19:97:9C:13:96:7F:70:A6:29:EC:78:89:B1:F9
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 5134711EA0B7C9978B521014B3AC9644D10A9628
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Jul 2023 00:00:12 +0000
ROA not before: Sat 15 Jul 2023 23:55:12 +0000
ROA not after: Sun 14 Jul 2024 00:00:12 +0000
asID: 834
IP address blocks: 45.81.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:34:71:1e:a0:b7:c9:97:8b:52:10:14:b3:ac:96:44:d1:0a:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Jul 15 23:55:12 2023 GMT
Not After : Jul 14 00:00:12 2024 GMT
Subject: CN=F4127075FB9219979C13967F70A629EC7889B1F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:4a:90:e9:41:4f:c2:18:70:9e:ba:40:02:
c6:73:b9:68:c6:92:27:b3:17:78:36:dd:56:83:ce:
60:e9:dd:a7:f0:46:45:7c:7e:3b:20:6e:0e:e6:04:
e1:a6:31:da:e1:55:12:ec:c3:f4:09:93:95:a6:83:
84:10:a1:d3:9e:ee:74:81:2b:9d:c4:46:56:01:65:
98:1e:99:f5:0e:67:51:cc:42:68:83:9a:16:ff:db:
36:1d:c1:94:ad:57:5d:17:ac:ff:bb:64:db:93:bb:
d7:f9:46:3c:99:ae:e5:bf:bc:c7:9d:5f:84:b3:8f:
b7:15:13:52:f8:41:04:4e:35:ee:ee:f0:dd:ac:6b:
1b:c4:6c:0f:46:1a:0d:08:c2:9e:a7:30:8f:fd:70:
2b:7e:fa:a9:ca:53:4f:06:34:5a:e4:90:15:81:df:
16:59:36:4c:21:3a:f1:80:2a:f3:75:23:85:8d:14:
52:00:65:9b:6a:fd:0b:b2:22:1e:11:60:0e:78:9b:
08:65:db:89:b1:a5:22:4b:38:c1:57:12:c6:cb:3e:
ff:e6:1c:84:b7:5b:05:4f:11:55:41:7f:a0:ed:3c:
ee:52:42:d3:a6:82:3f:ef:f0:9e:20:bf:9c:bb:27:
5b:7a:66:13:21:c2:f1:93:db:e6:b1:e9:fb:e7:f8:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:70:75:FB:92:19:97:9C:13:96:7F:70:A6:29:EC:78:89:B1:F9
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/24
Signature Algorithm: sha256WithRSAEncryption
20:77:a8:26:bb:94:62:d5:7b:95:70:e8:ca:da:cb:0e:86:e0:
ec:69:fb:b8:6b:ea:9b:b8:8e:55:26:e7:b2:7c:34:0f:2f:65:
be:51:02:53:dd:14:78:22:76:da:57:cf:4f:1f:b9:00:65:3e:
86:37:0a:aa:4f:19:52:fc:15:55:d9:94:98:02:3a:37:17:ec:
96:15:3f:55:de:bd:3c:ed:72:d1:3d:45:b6:48:64:0e:35:f7:
9a:6d:0a:67:39:3a:59:85:73:4a:9b:e0:a5:bc:97:3f:22:42:
7a:9c:13:0b:e8:88:02:a9:fd:0e:e8:00:be:f3:4a:6a:22:24:
c3:f6:0f:bf:67:f1:a0:23:ce:22:c3:f9:a0:33:45:5f:53:87:
50:a9:57:6e:c4:d9:4b:5c:98:3f:3e:e9:2c:14:28:35:4f:46:
fb:14:dd:7f:a5:a6:ff:d8:fa:77:3a:1c:ea:5d:06:8c:60:07:
f2:85:bd:e2:47:77:0f:30:87:27:92:92:96:eb:63:30:a5:ee:
0a:d8:fb:c6:7c:4f:69:31:af:36:52:98:94:55:f7:7a:35:78:
9f:53:6f:b2:77:f4:2c:9b:51:86:47:06:90:ce:35:44:f4:6c:
f6:3b:96:ee:7a:48:35:44:4a:18:e5:c4:de:64:c4:6c:3b:5e:
3c:f0:b0:59
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUUTRxHqC3yZeLUhAUs6yWRNEKligwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy
ZTkwZGRmZTAeFw0yMzA3MTUyMzU1MTJaFw0yNDA3MTQwMDAwMTJaMDMxMTAvBgNV
BAMTKEY0MTI3MDc1RkI5MjE5OTc5QzEzOTY3RjcwQTYyOUVDNzg4OUIxRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UEqQ6UFPwhhwnrpAAsZzuWjG
kiezF3g23VaDzmDp3afwRkV8fjsgbg7mBOGmMdrhVRLsw/QJk5Wmg4QQodOe7nSB
K53ERlYBZZgemfUOZ1HMQmiDmhb/2zYdwZStV10XrP+7ZNuTu9f5RjyZruW/vMed
X4Szj7cVE1L4QQRONe7u8N2saxvEbA9GGg0Iwp6nMI/9cCt++qnKU08GNFrkkBWB
3xZZNkwhOvGAKvN1I4WNFFIAZZtq/QuyIh4RYA54mwhl24mxpSJLOMFXEsbLPv/m
HIS3WwVPEVVBf6DtPO5SQtOmgj/v8J4gv5y7J1t6ZhMhwvGT2+ax6fvn+BDjAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU9BJwdfuSGZecE5Z/cKYp7HiJsfkwHwYDVR0j
BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj
Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2
UTNmNC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It
N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1RODANBgkq
hkiG9w0BAQsFAAOCAQEAIHeoJruUYtV7lXDoytrLDobg7Gn7uGvqm7iOVSbnsnw0
Dy9lvlECU90UeCJ22lfPTx+5AGU+hjcKqk8ZUvwVVdmUmAI6NxfslhU/Vd69PO1y
0T1FtkhkDjX3mm0KZzk6WYVzSpvgpbyXPyJCepwTC+iIAqn9DugAvvNKaiIkw/YP
v2fxoCPOIsP5oDNFX1OHUKlXbsTZS1yYPz7pLBQoNU9G+xTdf6Wm/9j6dzoc6l0G
jGAH8oW94kd3DzCHJ5KSlutjMKXuCtj7xnxPaTGvNlKYlFX3ejV4n1Nvsnf0LJtR
hkcGkM41RPRs9juW7npINURKGOXE3mTEbDtePPCwWQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 16:05:48 2023 by rpki-client on console-ams.rpki-client.org