Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e203630373231.roa
File: 34352e31302e3135392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 9iNNGEsn/BsMivM/qMG/IoXImoYKtRLLEEYpflP2dEI=
Subject key identifier: F2:0C:FC:44:F0:75:68:42:3E:8B:8C:15:2E:CB:A8:C0:A9:C0:A1:F7
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 28B3EAC0E69F04F487B3BAB0D2AB56F67F187D5E
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e203630373231.roa
Signing time: Mon 27 Mar 2023 08:28:12 +0000
ROA not before: Mon 27 Mar 2023 08:23:12 +0000
ROA not after: Mon 25 Mar 2024 08:28:12 +0000
asID: 60721
IP address blocks: 45.10.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b3:ea:c0:e6:9f:04:f4:87:b3:ba:b0:d2:ab:56:f6:7f:18:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:12 2023 GMT
Not After : Mar 25 08:28:12 2024 GMT
Subject: CN=F20CFC44F07568423E8B8C152ECBA8C0A9C0A1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:86:9d:87:1e:02:0c:f2:22:c8:ce:a2:3d:
82:0c:ed:c6:38:ad:c4:8e:06:9c:71:96:5a:3d:15:
83:2d:9f:5c:a6:fb:bb:ab:b4:5c:a2:12:ed:98:f5:
65:0a:a5:70:be:04:c6:49:0d:2a:10:eb:a9:9b:20:
09:89:7f:27:42:87:ff:a1:e6:68:a1:0e:d3:58:d1:
45:83:7e:0f:1f:18:53:f4:00:20:09:7e:27:90:ca:
38:fd:9d:e6:d0:87:14:e9:00:e5:bb:02:eb:f1:8f:
04:6f:72:7e:61:85:35:a0:3f:02:e8:d1:87:09:06:
54:db:d0:0d:c4:e3:fc:39:9c:26:1d:a5:92:99:3f:
7c:b2:92:62:04:8a:ef:d3:24:20:a2:ce:83:b0:a3:
d2:98:c1:93:a0:45:43:23:80:4c:46:94:ba:17:87:
ba:de:42:e2:f5:71:30:10:ca:87:5f:18:4b:a8:a4:
cc:ce:3e:8b:75:7a:2a:ed:9b:a0:fa:b6:5e:1e:9a:
b0:2e:79:a8:37:ae:aa:d4:8d:75:8d:5b:73:d4:4f:
86:9f:f6:b2:eb:e4:48:1a:c9:1f:98:52:ca:7b:c6:
c7:00:6a:01:ec:75:6c:91:68:9a:17:ac:f2:87:79:
60:ad:df:e3:ad:44:74:de:df:fa:a6:bf:40:2c:ae:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:FC:44:F0:75:68:42:3E:8B:8C:15:2E:CB:A8:C0:A9:C0:A1:F7
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31302e3135392e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.159.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ef:fb:8d:b0:33:2b:f1:8b:ef:1e:72:4f:ed:7e:33:83:77:
9c:0f:65:7b:37:8a:a0:2c:05:5c:dd:ae:45:12:7a:a1:5f:0a:
0d:2f:e8:0a:59:9b:a2:7e:bd:c9:8f:89:70:49:b5:c8:30:8a:
28:2a:ca:cc:a0:61:30:33:fe:ca:75:7f:08:be:89:bf:c2:cd:
0e:36:d6:cc:3c:37:cd:f3:69:02:0e:a8:59:02:17:2f:7e:d1:
3d:a4:27:b1:81:e4:c1:56:49:6d:16:62:53:93:16:16:42:a9:
28:f6:00:64:b0:34:28:25:b4:6c:fc:1f:18:af:a5:c9:a0:9a:
59:e4:41:32:03:e7:52:9c:d3:9e:e2:92:33:74:9f:c5:20:0e:
90:95:00:d3:7a:df:ec:f9:78:51:04:06:3d:83:74:10:da:ac:
23:25:ca:fb:da:60:54:f2:f1:c4:d0:15:86:a8:8b:10:6d:01:
12:d5:b9:44:c1:0f:a3:aa:30:4e:89:16:60:04:1b:0f:b2:1e:
26:01:ee:b7:c2:06:0f:e9:2e:84:78:8f:2a:88:cb:ca:cb:a9:
be:c2:3d:64:7c:bc:21:2b:ae:2c:90:ea:1b:d1:f0:1b:bf:97:
d2:82:7c:54:16:8b:93:a6:58:32:6a:50:85:c2:a7:0e:ba:ae:
53:f0:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org