Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e362e302f32342d3234203d3e203336333531.roa
File: 34352e38302e362e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: /slhTKsKCrqMCjeZ4qO4WI7+fQozKqkzYf5AehPRx6I=
Subject key identifier: 61:AF:CB:24:8E:6A:19:A8:67:72:98:83:C2:96:7A:45:9E:A3:6F:49
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6A889FA64D2AAAB280F6388BE793458184AB6871
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e362e302f32342d3234203d3e203336333531.roa
Signing time: Thu 04 May 2023 10:56:21 +0000
ROA not before: Thu 04 May 2023 10:51:21 +0000
ROA not after: Thu 02 May 2024 10:56:21 +0000
asID: 36351
IP address blocks: 45.80.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:9f:a6:4d:2a:aa:b2:80:f6:38:8b:e7:93:45:81:84:ab:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 4 10:51:21 2023 GMT
Not After : May 2 10:56:21 2024 GMT
Subject: CN=61AFCB248E6A19A867729883C2967A459EA36F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:33:04:04:44:06:77:4a:8b:69:9c:f1:ba:44:
93:6b:78:94:eb:6f:9c:18:50:75:2a:16:38:2b:d7:
34:02:e8:3d:41:ae:4f:11:8c:51:f1:8e:bf:3c:8d:
57:3d:10:90:93:56:d6:f7:44:1e:88:25:e5:99:9c:
b0:20:20:05:a2:ef:b5:a4:09:01:09:b9:0b:e3:08:
cc:fb:78:92:c5:f1:82:5d:9d:08:73:a1:2c:3f:98:
1b:94:52:b4:4c:ad:73:26:cc:a7:20:08:01:7a:02:
24:d4:c8:53:75:1b:0b:27:c1:2c:3f:49:ab:2b:7b:
e4:44:9a:5b:ed:2a:7a:a9:52:0d:f3:bf:7d:ca:99:
13:be:bb:8d:4c:21:ba:8b:93:b7:72:fd:98:25:5a:
31:c0:aa:7a:07:e7:d3:8e:6a:88:7f:3b:18:00:e2:
94:c1:48:a5:53:c3:e7:79:6b:aa:c7:86:29:cc:80:
09:ad:e3:37:31:e8:08:b1:4d:93:b3:92:e1:c6:5e:
6c:fe:60:d3:df:0d:8c:26:a2:cd:f6:c3:85:c0:70:
c5:77:06:df:66:4e:06:e2:04:85:a4:09:5e:7a:e6:
2e:dc:53:3e:9c:64:ec:a7:97:ce:a8:9c:7d:b1:7c:
73:85:08:b6:c4:6a:69:f6:a7:3a:08:ce:60:da:35:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:CB:24:8E:6A:19:A8:67:72:98:83:C2:96:7A:45:9E:A3:6F:49
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e362e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:c6:22:6c:46:65:3e:3f:16:69:dc:59:a5:49:c8:cc:55:
8b:e4:e9:31:ed:63:31:f5:99:15:c5:f0:a2:0a:2b:22:0f:c6:
4a:21:5a:ad:df:dd:de:20:62:7b:0f:c9:7c:23:a9:f3:76:7d:
ae:10:dd:07:db:bb:ab:93:7d:17:37:0b:8b:a0:8d:3c:3e:10:
b1:ba:e5:35:13:d5:34:59:80:23:ae:d2:59:9c:0f:f1:44:f7:
06:c5:c9:bd:ef:ce:86:68:26:12:83:3f:02:20:58:58:5a:f7:
dc:ed:be:a6:ca:4a:8d:53:67:30:ff:75:a9:34:1b:d5:2e:df:
bc:8e:99:d5:05:68:42:37:68:bf:a6:82:37:47:a1:99:43:0d:
c7:0e:46:6c:22:74:0d:a5:91:a6:e1:95:64:ac:65:d5:6f:d4:
33:65:1f:bc:d5:5b:c9:3a:82:2d:fa:61:a3:88:a2:b9:8a:99:
0b:4e:88:29:be:24:c9:46:77:f1:9a:c4:40:b2:73:60:69:90:
64:00:a4:9d:f5:73:5a:8a:cc:7b:2a:d6:cc:6d:27:47:93:d3:
80:43:d7:4f:0b:9a:73:a6:ae:ac:20:af:e9:cf:0b:a9:0a:ed:
ac:04:dc:f0:d0:13:da:49:ea:63:ea:2a:4d:b4:2b:93:4c:ab:
6d:2c:e5:86
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 16 12:55:19 2023 by rpki-client on console-fra.rpki-client.org