Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e20323039323630.roa
File: 34352e38302e372e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: HamgmGVcOOvRIaLj7ZFQmTEB3IPav0REweg9Sj0HEP8=
Subject key identifier: FF:D6:A6:48:2A:45:B8:F4:B6:C9:93:76:19:75:49:E1:E5:2A:AF:43
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 76A310732F569FBBDAA20E065AE80334A340712A
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e20323039323630.roa
Signing time: Thu 04 May 2023 10:56:21 +0000
ROA not before: Thu 04 May 2023 10:51:21 +0000
ROA not after: Thu 02 May 2024 10:56:21 +0000
asID: 209260
IP address blocks: 45.80.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a3:10:73:2f:56:9f:bb:da:a2:0e:06:5a:e8:03:34:a3:40:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 4 10:51:21 2023 GMT
Not After : May 2 10:56:21 2024 GMT
Subject: CN=FFD6A6482A45B8F4B6C99376197549E1E52AAF43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:1c:87:57:69:f2:6a:25:49:59:c1:b1:ca:
2b:9f:2f:72:50:c1:e1:d3:0c:14:32:54:c3:c1:a1:
bc:fc:d1:55:60:48:c5:5f:ff:39:fb:e0:89:24:e5:
c3:1b:8d:1a:a0:a5:b7:fd:51:a5:c6:b2:7e:2d:58:
5c:87:b8:8f:9f:b3:2e:24:37:50:08:36:b1:94:dc:
f3:58:89:bd:be:07:7c:bc:35:3c:5b:f4:4b:94:28:
ad:f7:af:20:88:cd:e6:06:e1:3c:f5:a9:44:07:51:
da:03:38:e0:a6:b7:54:7e:13:46:a3:ae:07:2b:12:
58:62:9c:70:4f:ea:0e:c5:1b:10:ec:d2:97:97:d8:
b1:b4:05:40:17:d2:1b:ef:9d:f6:2c:67:96:8d:e4:
f3:54:a0:55:11:29:76:76:0f:47:1c:a6:7c:02:9f:
f7:ac:40:d9:32:48:fc:c6:53:3f:52:fb:72:98:35:
89:dd:b8:45:5a:d6:ab:25:b4:3e:77:43:6a:8e:c4:
5e:12:f2:06:59:9a:a9:e2:74:fa:d0:1f:08:b0:0f:
0f:63:f4:b1:68:09:4c:31:21:37:2b:ce:66:8c:40:
08:ac:46:5f:e5:20:ba:44:7b:cc:b1:23:34:b6:56:
4f:e1:27:19:90:42:b2:33:64:35:45:d9:65:be:df:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:A6:48:2A:45:B8:F4:B6:C9:93:76:19:75:49:E1:E5:2A:AF:43
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9d:82:6d:23:80:93:0d:81:71:79:c8:d3:a8:8f:e4:94:1b:
20:9e:e9:76:cb:05:e3:ed:b0:08:ae:5c:e1:57:f4:8c:3e:74:
ca:c5:98:c0:1e:bf:dd:2e:89:e1:a9:a5:f1:18:5c:a0:2c:4c:
2b:2b:58:a9:99:49:c7:28:57:c7:82:32:f2:08:ad:0b:19:22:
18:0b:7b:e7:f1:23:71:92:81:b6:1b:11:5d:3c:04:ef:1d:f3:
cb:b3:05:fb:c9:a9:3c:37:db:4c:15:04:a0:cb:5f:ab:e0:f1:
6a:8f:57:b8:0e:05:b8:b5:47:42:c7:3d:2a:d0:1e:6e:9f:7c:
81:d2:e5:6d:e0:28:b3:34:6a:51:0e:0b:75:5c:88:96:e8:19:
3a:48:1f:f5:31:58:e9:50:3c:2a:91:47:ad:63:b5:dc:32:ce:
cb:11:2b:91:36:50:dd:9d:2c:e4:cb:a4:3c:4a:e2:c6:4f:b1:
d6:f7:d9:f6:a9:12:86:8e:e0:cb:fd:c1:55:f3:8a:3e:b3:3d:
5f:5b:3b:bc:3d:ee:16:d9:c5:61:21:01:36:af:a9:21:84:09:
de:80:f9:07:c0:36:88:27:6b:4b:15:59:bf:7c:5c:c4:ed:1e:
a6:7e:57:f8:98:dc:30:e7:d2:ec:dc:8c:5d:f6:10:2c:b9:8b:
50:27:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org