Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e203631313338.roa
File: 34352e3135342e352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 5Kxk76V4Zio2X98OSmHs4l3KJWgxYoSSq7NoxvI/elQ=
Subject key identifier: 01:0A:FB:6E:C3:39:A6:5A:A1:1E:6C:65:1D:E1:7C:69:D4:45:8A:02
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 5F925345664343E0A7B0278BCC5B07E8C6003BD0
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e203631313338.roa
Signing time: Thu 22 Dec 2022 14:58:44 +0000
ROA not before: Thu 22 Dec 2022 14:53:44 +0000
ROA not after: Thu 21 Dec 2023 14:58:44 +0000
asID: 61138
IP address blocks: 45.154.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:92:53:45:66:43:43:e0:a7:b0:27:8b:cc:5b:07:e8:c6:00:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Dec 22 14:53:44 2022 GMT
Not After : Dec 21 14:58:44 2023 GMT
Subject: CN=010AFB6EC339A65AA11E6C651DE17C69D4458A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:5f:1a:88:ef:81:66:bc:2c:4f:41:90:99:
41:21:c2:8b:02:96:7d:f1:bd:d8:67:5c:90:63:29:
95:56:fb:71:c4:e2:f1:cb:c8:5d:b3:c1:c9:31:9c:
d0:b9:6c:4a:55:2e:f1:2a:29:56:c0:3d:73:e6:83:
6b:f7:5b:74:33:ba:2c:c3:fd:8e:ff:0b:af:20:d7:
43:cb:61:09:41:c3:37:49:5a:27:26:5a:86:72:ec:
4b:7e:3f:f1:9a:c7:f3:f1:6d:9c:44:1b:8e:9c:93:
cd:42:c5:b9:d8:9b:5c:67:bc:5e:71:b3:25:ba:32:
a8:a8:9f:e2:30:6c:b6:bf:38:9d:03:f6:43:b0:5b:
6e:ba:fa:a0:cd:15:f7:c0:95:f9:3d:18:86:73:1a:
14:a4:bf:5f:e3:93:75:51:04:46:e2:d6:24:67:b2:
cd:40:f7:eb:1b:6a:86:e8:78:48:c0:9d:e5:b9:bf:
e4:19:0d:98:36:37:c3:e1:5a:f4:3e:cf:bc:ae:2d:
e6:b4:50:78:2d:11:d0:f6:62:68:1a:f7:50:ad:50:
54:0d:73:0f:e3:69:bf:6e:5d:d8:98:d2:48:90:29:
39:f7:1d:79:5d:7b:69:f1:18:05:66:ee:f6:8e:20:
fd:c3:bb:5e:16:e3:60:08:e7:71:f9:7c:38:15:17:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:FB:6E:C3:39:A6:5A:A1:1E:6C:65:1D:E1:7C:69:D4:45:8A:02
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:44:ff:5d:5e:66:85:d6:09:a3:fc:29:b3:9e:f7:04:fe:13:
f4:33:cd:21:61:5f:db:74:87:cd:9e:b2:31:3e:22:cc:5d:45:
21:5d:aa:c2:19:c1:d2:22:2f:ce:e1:20:37:9b:60:04:b4:32:
ec:06:83:08:16:0b:6d:85:82:dd:81:24:72:e0:50:b9:79:df:
2c:ac:2b:0f:70:fa:1c:5a:67:d0:30:bb:c5:a4:5f:2e:d8:83:
d3:24:4a:64:fc:5d:e1:39:3b:8b:0f:37:b0:a3:05:c3:16:1e:
9f:1f:c0:cc:91:98:1b:47:ba:1a:e8:d2:d8:49:e7:04:c8:ed:
16:d2:02:37:d3:14:ba:e2:9e:34:09:26:bf:93:be:46:2c:5d:
c4:c4:be:5a:6f:78:f6:c6:38:4e:b9:88:3d:ca:45:4e:7c:61:
8a:d3:61:02:71:20:17:51:a1:3f:d6:d7:a6:df:5a:1c:a3:bf:
82:03:af:ae:ff:98:a0:6c:18:e7:69:bc:97:08:2b:e7:ba:fd:
ae:6a:57:55:f7:e8:bf:1a:36:8f:54:72:8d:b3:f1:54:8f:8e:
02:be:5b:7e:1c:f8:39:d6:6b:fc:ad:9f:35:73:b8:f6:af:95:
66:1e:a5:96:f3:71:21:52:2f:2c:8b:ae:a3:c6:9a:63:26:c1:
4a:79:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org