Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e20333937353633.roa
File: 34352e38312e35382e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: AWOeveucrKcHIT9ImVXyy6ppI8H6HoSBgRlq5u0lKpc=
Subject key identifier: 07:E1:A3:2E:90:61:EB:A4:EE:DD:EF:97:44:4F:DB:41:75:BB:E6:86
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 29883EFD55877C3AA546B6458B0DE904DEB34B85
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e20333937353633.roa
Signing time: Thu 15 Jun 2023 15:26:39 +0000
ROA not before: Thu 15 Jun 2023 15:21:39 +0000
ROA not after: Thu 13 Jun 2024 15:26:39 +0000
asID: 397563
IP address blocks: 45.81.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:88:3e:fd:55:87:7c:3a:a5:46:b6:45:8b:0d:e9:04:de:b3:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Jun 15 15:21:39 2023 GMT
Not After : Jun 13 15:26:39 2024 GMT
Subject: CN=07E1A32E9061EBA4EEDDEF97444FDB4175BBE686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ad:00:09:ec:78:39:b8:8d:08:2c:cd:77:08:
0f:f5:c5:46:39:ce:3f:36:9b:65:4f:c1:51:c7:bb:
c4:ba:47:3f:cd:e5:a5:39:62:0d:0d:11:95:66:d9:
f6:5c:6c:59:ba:61:3e:a7:95:5e:99:f4:f9:f2:9a:
3d:34:8c:a8:45:bd:12:a2:69:76:53:b7:1c:6d:1f:
c6:de:f4:cc:f4:1a:31:f8:a5:44:d2:54:0b:b6:6c:
65:67:9d:c8:bf:a9:85:93:05:5e:16:cc:f4:2b:ea:
8f:7b:8f:86:76:ba:06:7a:60:7f:b2:7e:ec:27:6f:
7d:54:46:60:dc:c9:d0:db:ca:7b:a3:a6:f4:b2:55:
e6:81:0b:2b:b2:03:c0:c5:de:df:1e:a5:0f:bd:b2:
21:84:38:46:2a:49:4d:92:b8:b8:f1:07:34:75:87:
68:80:13:d9:80:4b:14:d4:23:bb:d9:48:c0:4f:d0:
33:f3:61:0f:37:ff:3e:b4:c5:2c:40:41:f8:96:24:
73:13:f8:03:8f:a3:ff:b4:11:cd:ee:ae:59:33:c3:
e1:f1:bf:a1:73:f2:4d:e9:00:de:2f:91:ba:1a:e2:
91:14:b8:b1:5f:27:49:35:94:41:5f:29:0e:71:ce:
50:19:5a:a3:5d:44:35:a1:c1:5d:41:14:8c:8a:6c:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:A3:2E:90:61:EB:A4:EE:DD:EF:97:44:4F:DB:41:75:BB:E6:86
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d3:26:23:87:78:dc:c5:c0:0a:eb:ab:3a:d1:b7:e4:0d:e9:
df:77:f9:a0:87:ad:db:91:a2:5a:b0:95:fa:2e:39:72:d8:bd:
75:ae:de:06:9f:f5:c0:ca:ce:c8:f1:98:c8:d5:dd:0d:47:94:
19:5d:ca:2d:61:5f:27:4e:2f:db:df:d4:48:4a:a9:54:8a:63:
a8:5d:e6:f7:e1:f2:ee:ff:94:a0:03:1d:14:dc:a0:88:d0:eb:
01:94:43:58:4f:a4:d6:be:fc:07:33:53:b4:d9:01:1c:75:e4:
ae:b7:1b:f1:a0:37:60:2e:fd:b3:b1:84:e5:51:03:4c:9f:6c:
97:3c:c0:92:3d:b2:2f:9e:92:8f:dd:0f:95:31:04:c6:de:eb:
08:c9:59:7b:d6:0a:f7:86:e2:72:db:5a:9b:0c:08:1c:53:35:
47:7d:23:34:46:e8:c3:58:14:63:86:3a:54:36:8a:d7:3e:15:
3a:73:a3:7f:31:0d:b7:69:e8:36:5f:7b:d2:d0:2c:b9:c9:a3:
d2:33:41:58:91:54:cb:e4:15:06:06:e1:46:a8:48:d1:bb:97:
b7:23:6d:c9:ed:ed:dc:bf:a1:53:9a:b0:34:63:c7:61:be:96:
45:a6:74:a7:7f:b2:07:20:36:a1:97:d2:fe:cb:23:40:d9:57:
30:a5:20:c7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKYg+/VWHfDqlRrZFiw3pBN6zS4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy
ZTkwZGRmZTAeFw0yMzA2MTUxNTIxMzlaFw0yNDA2MTMxNTI2MzlaMDMxMTAvBgNV
BAMTKDA3RTFBMzJFOTA2MUVCQTRFRURERUY5NzQ0NEZEQjQxNzVCQkU2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7rQAJ7Hg5uI0ILM13CA/1xUY5
zj82m2VPwVHHu8S6Rz/N5aU5Yg0NEZVm2fZcbFm6YT6nlV6Z9Pnymj00jKhFvRKi
aXZTtxxtH8be9Mz0GjH4pUTSVAu2bGVnnci/qYWTBV4WzPQr6o97j4Z2ugZ6YH+y
fuwnb31URmDcydDbynujpvSyVeaBCyuyA8DF3t8epQ+9siGEOEYqSU2SuLjxBzR1
h2iAE9mASxTUI7vZSMBP0DPzYQ83/z60xSxAQfiWJHMT+AOPo/+0Ec3urlkzw+Hx
v6Fz8k3pAN4vkboa4pEUuLFfJ0k1lEFfKQ5xzlAZWqNdRDWhwV1BFIyKbOcDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUB+GjLpBh66Tu3e+XRE/bQXW75oYwHwYDVR0j
BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj
Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2
UTNmNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It
N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM1MzYzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1R
OjANBgkqhkiG9w0BAQsFAAOCAQEAe9MmI4d43MXACuurOtG35A3p33f5oIet25Gi
WrCV+i45cti9da7eBp/1wMrOyPGYyNXdDUeUGV3KLWFfJ04v29/USEqpVIpjqF3m
9+Hy7v+UoAMdFNygiNDrAZRDWE+k1r78BzNTtNkBHHXkrrcb8aA3YC79s7GE5VED
TJ9slzzAkj2yL56Sj90PlTEExt7rCMlZe9YK94bicttamwwIHFM1R30jNEbow1gU
Y4Y6VDaK1z4VOnOjfzENt2noNl970tAsucmj0jNBWJFUy+QVBgbhRqhI0buXtyNt
ye3t3L+hU5qwNGPHYb6WRaZ0p3+yByA2oZfS/ssjQNlXMKUgxw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org