Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32312d3234203d3e2033333230.roa
File: 34362e3235302e3234302e302f32312d3234203d3e2033333230.roa (raw, json)
Hash identifier: JlbPkzrRyCZ+cmZmGUMwt8/F1PadWjuWrJvxKWzUvKs=
Subject key identifier: 5D:06:FF:51:18:33:C4:19:FE:63:F5:BE:17:55:EB:BE:96:C3:CD:DB
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 629FCB255693E768D3A681E0687E6FF09B33B572
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32312d3234203d3e2033333230.roa
Signing time: Mon 19 Dec 2022 12:08:58 +0000
ROA not before: Mon 19 Dec 2022 12:03:58 +0000
ROA not after: Mon 18 Dec 2023 12:08:58 +0000
asID: 3320
IP address blocks: 46.250.240.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9f:cb:25:56:93:e7:68:d3:a6:81:e0:68:7e:6f:f0:9b:33:b5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 19 12:03:58 2022 GMT
Not After : Dec 18 12:08:58 2023 GMT
Subject: CN=5D06FF511833C419FE63F5BE1755EBBE96C3CDDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:f1:9b:e1:d4:25:9e:7e:a4:ea:ad:d0:f3:
cb:9d:d9:b0:c9:e9:8a:89:e5:c4:00:1d:f0:8c:97:
8c:9c:b8:bf:4f:a9:fa:92:d4:5f:47:27:65:eb:03:
d3:0c:22:93:06:6d:f3:b8:d4:26:f6:1a:7f:fe:0e:
85:f5:e8:f6:a4:d0:ed:5b:94:23:43:fc:51:76:22:
ac:f7:a5:44:8d:eb:f5:5a:87:ae:13:4d:2f:87:8e:
2e:56:20:12:3c:d5:19:d7:8e:a0:5c:4e:d2:64:05:
0e:0d:25:6c:a6:63:77:f1:cc:11:09:d6:9e:16:27:
6b:d7:de:58:2d:cb:a9:b4:65:cc:c9:3a:d1:84:f7:
40:55:ab:19:82:1e:2e:5e:3d:08:e2:6c:02:78:5c:
fd:b8:95:43:88:c2:16:fe:fc:a1:5c:5d:cb:1b:22:
6c:10:a8:c7:bc:98:f2:8b:3b:c3:da:08:ca:a0:52:
7f:0d:cb:ad:99:3f:d9:b1:37:00:01:2b:d7:e7:65:
74:f4:57:e4:0f:50:28:68:84:cc:e0:36:89:ea:4e:
0d:1c:b6:8c:a4:8e:25:9b:6b:6b:96:81:40:a9:09:
69:e8:67:72:72:c2:b7:8e:35:5d:da:60:ba:1b:6b:
6a:e0:b1:6b:46:0c:7d:71:1d:dc:79:20:0b:28:79:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:06:FF:51:18:33:C4:19:FE:63:F5:BE:17:55:EB:BE:96:C3:CD:DB
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32312d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.240.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:a4:dc:88:e1:4c:bf:ac:dd:fd:88:91:43:c7:d1:5d:38:f5:
fc:9e:9d:52:19:71:b6:07:b4:00:de:21:4a:88:3f:a2:6b:c6:
6c:d4:d8:43:27:b7:eb:97:b0:8c:0d:c5:b4:a3:1d:68:3e:2a:
f2:7b:cd:b7:96:06:7c:26:f9:38:5e:f4:e8:f1:ea:1f:15:d1:
a5:e3:93:66:1c:b1:92:29:fc:e6:58:ab:dc:9c:53:14:41:a5:
63:f6:0d:b1:a9:21:e0:23:ab:fc:9b:56:78:61:65:ce:40:fb:
78:e2:20:de:2a:09:b5:11:e8:44:02:dd:54:45:75:19:51:f5:
27:73:19:2e:17:08:68:de:a6:ee:a8:3d:6a:60:78:3e:8e:d2:
69:a4:c7:56:4e:37:5d:19:e9:6d:99:46:69:0a:02:e2:a5:99:
38:c7:22:b9:c5:98:8e:81:35:03:08:95:4d:82:cb:96:b1:3b:
2f:a8:8d:b3:ba:21:d9:65:e4:56:4e:6f:ae:df:2b:8b:db:bd:
6e:b2:71:ce:1a:6f:37:db:2a:07:95:54:92:f6:2f:1c:67:36:
e6:31:c4:1f:08:95:64:5a:60:dd:9e:73:e2:a6:dc:bd:a3:5d:
7e:3e:d5:fd:ef:f4:ec:75:1d:4e:04:ce:ec:df:fc:bb:49:54:
a3:85:19:15
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYp/LJVaT52jTpoHgaH5v8JsztXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx
NjJlMWFhZDAeFw0yMjEyMTkxMjAzNThaFw0yMzEyMTgxMjA4NThaMDMxMTAvBgNV
BAMTKDVEMDZGRjUxMTgzM0M0MTlGRTYzRjVCRTE3NTVFQkJFOTZDM0NEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaPGb4dQlnn6k6q3Q88ud2bDJ
6YqJ5cQAHfCMl4ycuL9PqfqS1F9HJ2XrA9MMIpMGbfO41Cb2Gn/+DoX16Pak0O1b
lCND/FF2Iqz3pUSN6/Vah64TTS+Hji5WIBI81RnXjqBcTtJkBQ4NJWymY3fxzBEJ
1p4WJ2vX3lgty6m0ZczJOtGE90BVqxmCHi5ePQjibAJ4XP24lUOIwhb+/KFcXcsb
ImwQqMe8mPKLO8PaCMqgUn8Ny62ZP9mxNwABK9fnZXT0V+QPUChohMzgNonqTg0c
toykjiWba2uWgUCpCWnoZ3JywreONV3aYLoba2rgsWtGDH1xHdx5IAsoecd3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXQb/URgzxBn+Y/W+F1XrvpbDzdswHwYDVR0j
BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0
OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ
dUdxMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt
M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzQzNjJlMzIzNTMwMmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzMzMzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy76
8DANBgkqhkiG9w0BAQsFAAOCAQEAw6TciOFMv6zd/YiRQ8fRXTj1/J6dUhlxtge0
AN4hSog/omvGbNTYQye365ewjA3FtKMdaD4q8nvNt5YGfCb5OF706PHqHxXRpeOT
Zhyxkin85lir3JxTFEGlY/YNsakh4COr/JtWeGFlzkD7eOIg3ioJtRHoRALdVEV1
GVH1J3MZLhcIaN6m7qg9amB4Po7SaaTHVk43XRnpbZlGaQoC4qWZOMciucWYjoE1
AwiVTYLLlrE7L6iNs7oh2WXkVk5vrt8ri9u9brJxzhpvN9sqB5VUkvYvHGc25jHE
HwiVZFpg3Z5z4qbcvaNdfj7V/e/07HUdTgTO7N/8u0lUo4UZFQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org