Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e20333939393736.roa
File: 34352e3135342e362e302f32332d3234203d3e20333939393736.roa (raw, json)
Hash identifier: RseDmhlv7jv6ocmq3tjFPQB7g4Krcfiu0ODR5enN6LA=
Subject key identifier: 2A:CC:80:C8:95:84:90:0A:EE:19:20:EE:CC:7F:49:90:EA:EA:3C:2A
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 7BFD1B4BB970EDF095C62D50036956843803B682
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e20333939393736.roa
Signing time: Mon 06 Mar 2023 20:36:01 +0000
ROA not before: Mon 06 Mar 2023 20:31:01 +0000
ROA not after: Mon 04 Mar 2024 20:36:01 +0000
asID: 399976
IP address blocks: 45.154.6.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fd:1b:4b:b9:70:ed:f0:95:c6:2d:50:03:69:56:84:38:03:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Mar 6 20:31:01 2023 GMT
Not After : Mar 4 20:36:01 2024 GMT
Subject: CN=2ACC80C89584900AEE1920EECC7F4990EAEA3C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:d7:31:7c:35:57:8b:57:30:05:47:bf:e5:
df:fe:fa:78:54:ec:9e:f5:ee:3c:a2:93:59:9a:d1:
ff:3f:6d:c7:9b:dc:a7:82:96:8c:4a:90:ef:e1:d9:
3a:d2:61:ec:11:d2:7f:3e:6c:0e:63:b9:4b:b0:14:
d5:9c:26:74:1d:ea:8e:6b:39:fc:3a:a8:c3:c1:73:
1d:cd:ab:e7:31:07:df:16:d5:fc:cb:65:f6:db:f1:
f4:16:af:3f:fa:44:87:ce:42:fa:8b:e4:e0:e6:35:
a0:8a:78:a1:f5:01:fc:36:8f:fc:9e:28:2b:c6:d8:
16:fc:73:e3:45:9f:8a:96:d9:cd:36:e0:ba:3f:ee:
bf:bc:bf:f5:cc:87:0f:6c:c7:76:fe:02:33:15:49:
e5:67:9d:d6:c7:d7:9a:45:31:82:4a:dc:6f:37:04:
0b:2b:38:8f:cd:dd:f6:96:6f:10:80:29:6e:b6:ce:
0c:96:8c:a8:50:18:d7:e8:2f:ea:13:52:ee:3a:fa:
fa:5e:d4:5f:c8:9d:01:a1:e8:d8:26:cc:e3:96:58:
c7:0e:1f:1b:77:7a:99:4f:66:97:c1:70:4a:93:ac:
50:bc:d7:e3:89:81:e4:1a:33:1d:c4:dc:2e:0f:90:
dd:e9:49:fa:c0:79:5a:3a:e9:02:84:ea:d5:53:05:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:80:C8:95:84:90:0A:EE:19:20:EE:CC:7F:49:90:EA:EA:3C:2A
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e20333939393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:1b:0a:74:d0:34:8b:83:5e:c4:28:23:b8:8b:42:d0:43:ed:
aa:c0:ef:18:3c:c7:9c:0c:98:74:86:2c:5b:4d:7a:d3:5d:57:
eb:75:78:f1:18:f6:a9:62:e2:cc:31:fc:a1:e9:1c:82:f0:ab:
a3:a1:7f:49:0e:8f:08:61:6c:d5:e1:88:b1:2a:d0:0e:47:43:
d9:ae:16:f6:ad:bc:71:10:45:5f:3b:0f:7f:5c:27:97:5e:c3:
60:8b:fe:27:e0:36:c7:0f:ad:b1:a5:0c:35:9d:36:8a:2e:8f:
bd:5c:60:8d:9c:61:f1:4a:fd:5e:74:c2:92:5c:73:c9:0e:a5:
83:6c:a1:48:6c:8a:7b:56:5e:18:8b:1a:e1:8d:6c:2d:04:46:
ef:7e:c2:6e:12:2b:ac:78:76:75:17:81:f7:9d:ba:4d:20:d2:
e8:30:56:d5:32:75:83:cb:d1:11:42:b2:24:2c:46:7e:a8:ae:
d8:5a:8a:4c:95:02:85:8a:43:cc:6c:69:82:ad:2e:b2:53:43:
7b:d8:66:1e:db:d0:00:2b:45:d2:87:ba:95:2c:6c:93:d5:87:
77:e1:f8:24:6b:97:2e:20:c9:1d:b1:fa:24:5d:7a:4c:dc:b0:
bf:8e:fa:be:a2:f3:28:87:fb:51:1e:b2:79:8e:e6:4a:f7:a5:
63:94:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org