Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e342e302f32342d3234203d3e203439393939.roa
File: 34352e3135342e342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 10sUf9gnbfZnx3ypn0XRUBbHRfKGSeWPXMdasbRoTOc=
Subject key identifier: 96:49:6A:A0:CB:37:90:9C:AA:18:E0:72:43:33:AB:26:3D:4C:51:F2
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 5E6BB45B1C663AC8664BD875AD178CA98935F019
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e342e302f32342d3234203d3e203439393939.roa
Signing time: Mon 05 Jun 2023 06:15:58 +0000
ROA not before: Mon 05 Jun 2023 06:10:58 +0000
ROA not after: Mon 03 Jun 2024 06:15:58 +0000
asID: 49999
IP address blocks: 45.154.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:b4:5b:1c:66:3a:c8:66:4b:d8:75:ad:17:8c:a9:89:35:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Jun 5 06:10:58 2023 GMT
Not After : Jun 3 06:15:58 2024 GMT
Subject: CN=96496AA0CB37909CAA18E0724333AB263D4C51F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:70:ac:f4:8d:e4:d6:ed:6a:fe:b9:94:55:
a0:93:d8:3b:cc:dc:a4:35:57:cd:8c:48:60:d7:c0:
bb:26:e7:3f:51:7e:74:f2:36:0e:32:7a:b7:b8:fe:
45:e7:ec:f9:e2:ae:ec:7a:86:78:15:74:e8:62:c9:
a6:bb:26:10:9d:89:b0:8f:55:d8:64:81:83:e7:87:
02:48:85:80:36:65:84:a8:68:e2:ed:87:5d:7e:e7:
ab:a9:ab:8b:4c:c9:72:ba:3b:41:38:84:7c:75:ce:
f1:64:b8:1b:9b:6b:2f:5a:7e:46:50:af:2b:7e:19:
46:c2:1a:55:ff:ec:24:a1:1e:3c:70:5a:9b:4b:a6:
c1:08:f6:c7:69:02:61:a3:8f:81:e4:2b:7d:4c:4d:
41:f7:8b:e6:bf:36:63:46:3d:23:45:c1:bb:d7:28:
2f:66:a5:79:e2:12:75:f0:35:d4:e1:42:7c:1d:43:
2a:dd:f5:2d:09:9c:05:28:c8:04:18:df:dd:8d:5e:
61:90:ca:47:83:a0:3f:87:4e:f6:42:15:1e:42:f0:
96:77:e6:f2:19:d2:28:f3:65:66:f3:c1:57:38:ab:
01:7f:45:6f:56:53:1c:21:6c:5d:1a:19:5c:d8:78:
08:3b:8b:9f:4a:33:93:e6:09:27:23:06:e3:d9:53:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:6A:A0:CB:37:90:9C:AA:18:E0:72:43:33:AB:26:3D:4C:51:F2
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e342e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fd:47:10:c6:83:9d:3b:ba:8e:46:b1:70:c2:75:25:94:95:
e8:de:4a:0a:36:e2:90:af:36:a5:b0:48:36:ff:56:43:f4:24:
25:26:d2:ac:df:df:d3:9f:85:b7:dd:e0:d5:47:49:07:f1:94:
20:ad:7b:f6:f9:38:dd:32:0c:80:ed:6f:35:17:35:1e:8d:e3:
e2:8d:08:c8:d7:fd:1f:55:bc:85:d6:6e:f3:d4:6b:39:7d:e2:
89:0a:a1:3e:88:e0:33:d6:10:6b:1e:34:76:7d:f4:64:33:87:
4f:90:f9:f2:2f:61:77:95:01:f0:72:e8:05:09:54:0c:1b:30:
59:fb:ad:4d:b9:48:52:62:40:c4:5e:7d:02:59:14:3e:a1:9d:
6f:26:3f:81:7b:9b:d3:1f:81:ce:b6:d4:25:4d:fb:08:c0:f9:
48:3f:6c:d9:d5:ab:95:fb:95:92:7a:d8:66:67:3a:71:4e:63:
d6:d1:9b:54:ff:31:7f:c5:33:86:df:90:37:7a:f4:3c:ac:21:
12:82:54:70:48:cb:7c:a8:44:2a:62:18:e8:c8:ec:cf:b3:1d:
16:f1:bc:67:f8:78:65:c5:b3:39:e0:69:0b:97:a0:44:66:51:
45:bb:12:cd:13:ee:54:68:ff:85:3d:9c:ea:f5:4d:a0:85:16:
78:74:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org