Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203531353539.roa
File: 34352e38312e35372e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier: idmxxmn3XIRSJHCj2SN2/YE5lwxiDQkBV+WXYiFXygU=
Subject key identifier: 91:A5:52:D6:03:F0:AE:DE:99:2A:84:01:CF:05:BF:91:15:5A:A4:42
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 6F67067033AC1A475D785A3C44A0FC65968B19BA
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203531353539.roa
Signing time: Wed 05 Apr 2023 16:42:17 +0000
ROA not before: Wed 05 Apr 2023 16:37:17 +0000
ROA not after: Wed 03 Apr 2024 16:42:17 +0000
asID: 51559
IP address blocks: 45.81.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:67:06:70:33:ac:1a:47:5d:78:5a:3c:44:a0:fc:65:96:8b:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Apr 5 16:37:17 2023 GMT
Not After : Apr 3 16:42:17 2024 GMT
Subject: CN=91A552D603F0AEDE992A8401CF05BF91155AA442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:7a:61:37:ca:49:7e:b5:66:12:16:1a:cd:
71:57:6e:bc:4d:b0:a4:37:c4:f9:59:c3:ad:72:53:
6f:74:1f:57:d2:97:5b:2d:bc:31:2a:ad:a4:26:03:
dd:bc:9c:12:62:c2:66:3c:fa:0d:b4:16:b6:28:fb:
4c:ac:ad:86:2c:20:d4:48:5b:bb:a6:11:cf:3b:bf:
6f:18:ce:37:a9:1a:57:1c:b8:4f:66:b6:9b:6d:60:
e1:c3:bb:77:46:d3:6e:49:aa:ce:b7:98:c9:55:3c:
41:66:b2:e4:7a:94:2c:0a:be:66:cc:65:ea:d1:29:
36:b2:ce:c8:e1:93:75:ed:ae:60:ae:3e:87:c5:ed:
2e:25:1f:d8:bb:33:15:2f:51:98:68:6a:60:87:af:
25:ac:60:2c:26:25:29:49:cb:eb:d2:ac:86:45:65:
72:7c:64:5e:79:15:6e:28:c8:a4:54:7b:2b:f9:ee:
d3:c6:01:d6:89:76:38:d3:68:d0:61:aa:65:ff:7a:
d1:03:0c:3d:1a:ab:da:fd:25:74:51:a6:ea:a7:81:
0e:33:01:07:91:a8:20:44:ed:e0:ed:79:29:1f:9d:
41:e7:6e:7b:40:ed:68:ec:97:55:80:7f:d6:ec:14:
06:8e:79:be:2b:a0:69:85:e9:d8:18:a4:ee:db:12:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:52:D6:03:F0:AE:DE:99:2A:84:01:CF:05:BF:91:15:5A:A4:42
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203531353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.57.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2b:71:b2:2b:e7:fe:9e:b3:9c:d8:01:a3:f5:c3:6e:46:f1:
ac:e4:3f:eb:1d:2f:21:aa:c9:17:3b:82:af:ee:42:55:df:21:
f1:a2:cf:76:05:3d:e3:92:de:72:1a:b9:0c:31:50:3b:7f:95:
b0:05:77:b1:88:76:1d:7a:a1:9b:4b:04:a0:33:49:51:57:d0:
65:82:fd:67:e9:07:b6:26:22:72:70:40:4f:09:33:b3:24:ea:
b3:83:83:48:e1:a1:42:fe:78:08:b5:6c:b6:cc:1f:a7:20:5a:
0f:77:34:30:99:47:98:8e:07:13:47:82:59:f6:0f:d9:bf:51:
16:4d:b7:eb:69:cb:4e:a6:e5:a8:69:51:d4:eb:26:ed:d7:6e:
f8:d5:25:02:c2:4c:c4:75:63:16:10:cb:2d:27:36:b8:58:4a:
86:13:38:d0:75:8e:2d:7d:bb:db:74:d9:94:2a:46:d6:61:4d:
62:20:36:c6:3d:e9:ce:fb:e1:38:7b:d1:66:3a:cd:72:28:92:
a2:eb:7e:c9:2c:5c:68:16:16:f3:71:eb:aa:d6:96:ac:2a:d0:
6e:99:0c:28:aa:d3:92:58:78:f1:ba:ee:f2:5f:99:3d:35:a7:
22:4e:04:0c:45:59:09:eb:d8:b6:07:42:34:34:24:7f:19:6b:
80:38:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org