Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135372e302f32342d3234203d3e203531373635.roa
File: 34352e31302e3135372e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier: n/lUWciCwmzFmQPL0cE7wzI+NxWM4pfsy4HZ3TeMo2U=
Subject key identifier: 68:32:6C:0C:6C:8F:20:4D:BA:1E:5A:0F:94:67:D9:7C:42:87:2C:57
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 15B12DF2293A6EA72BD3F2A7C8F34EF4271B19A5
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135372e302f32342d3234203d3e203531373635.roa
Signing time: Thu 25 May 2023 13:13:02 +0000
ROA not before: Thu 25 May 2023 13:08:02 +0000
ROA not after: Thu 23 May 2024 13:13:02 +0000
asID: 51765
IP address blocks: 45.10.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b1:2d:f2:29:3a:6e:a7:2b:d3:f2:a7:c8:f3:4e:f4:27:1b:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: May 25 13:08:02 2023 GMT
Not After : May 23 13:13:02 2024 GMT
Subject: CN=68326C0C6C8F204DBA1E5A0F9467D97C42872C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:c0:ca:40:32:de:bd:94:72:2d:64:30:28:
02:48:19:6f:56:ec:af:00:da:1f:3f:83:b4:d8:bb:
86:20:cd:9d:23:ff:d4:fb:4d:6e:c0:d6:f7:23:fa:
f5:1a:a5:69:3f:4f:8a:92:a2:f2:7d:55:3d:3c:b8:
74:cb:3e:40:c0:cc:d8:29:a8:ad:9d:ae:2c:97:9d:
1a:e3:14:c7:dd:2d:a7:09:cb:f6:4f:28:81:c7:79:
00:a8:0b:fb:d5:e7:f9:a3:cb:de:ac:a9:11:6d:99:
ae:21:d8:fa:45:b5:76:0c:85:cc:4b:89:93:98:cb:
c7:0b:39:c2:48:ef:0a:fa:76:48:40:29:77:df:b9:
45:75:bd:2a:d3:8d:d3:b2:29:9e:1f:d0:5b:09:f2:
8b:79:5b:d5:12:43:61:3f:50:f4:65:96:e5:3b:4f:
d9:2e:a9:42:78:bf:aa:b0:4b:b9:15:03:16:12:42:
56:22:3d:60:88:97:67:e4:67:fd:82:ae:9d:43:b0:
37:ad:a9:e4:08:d4:67:6e:e4:52:06:3a:53:2a:5f:
88:ff:9d:b4:f8:35:ad:4e:7a:33:a6:ab:87:c4:3c:
cf:cf:5c:c5:84:29:03:9b:32:81:fb:9e:09:96:f7:
53:4e:3f:dc:c7:a9:12:c6:48:b8:62:2e:df:8c:8e:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:6C:0C:6C:8F:20:4D:BA:1E:5A:0F:94:67:D9:7C:42:87:2C:57
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135372e302f32342d3234203d3e203531373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a8:49:78:c0:c2:6f:39:7f:eb:78:84:36:c5:57:86:af:51:
f4:d0:85:5f:9d:82:a4:39:9a:34:47:8a:16:4a:ac:21:2d:b4:
a4:81:78:58:61:0b:09:67:4d:c3:cb:1b:0d:9c:78:be:05:1c:
bb:c8:9e:af:5a:52:dc:8d:b9:7e:5c:78:b8:6d:54:c2:12:bc:
f0:ed:e9:24:8e:64:85:98:60:4d:88:05:13:b2:d1:d4:d0:e2:
92:43:ce:bb:9e:b7:d2:d5:9f:52:48:63:78:00:32:66:04:77:
c8:27:17:99:e9:a3:40:fc:58:35:a6:a8:8d:47:72:d0:0a:1b:
38:44:07:d0:2b:38:28:8f:36:a3:05:bc:93:22:ac:42:d7:b6:
6c:1f:0e:69:6f:5a:88:b1:96:cf:86:c3:b0:7a:70:7b:5b:6f:
f4:e1:48:01:29:ab:cf:33:c9:e3:87:ee:6f:2c:82:71:9d:b2:
43:d3:61:e5:6f:3c:7a:d8:1c:f7:00:e7:1f:f2:fd:ad:2d:ea:
7a:a3:39:7f:c9:5d:f2:f9:35:6b:60:87:8c:3d:13:e9:07:23:
af:ad:1a:8a:ae:62:1f:ee:d5:b6:d9:4a:fa:b1:a9:0d:f5:6f:
a2:d4:a6:49:6d:24:a8:ba:63:5b:0c:0d:b3:07:e8:02:e6:b2:
09:aa:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org