Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33322e302f32342d3234203d3e203432333636.roa
File: 34352e3132392e33322e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: vsACXfxJDvB9THDXriNJP6pBhELq7RCWWOWQUBXxY0g=
Subject key identifier: 57:F4:03:8F:56:6D:B7:D2:7F:18:01:5E:E9:FA:C6:68:86:4E:43:B8
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 7788E0A250829F7E538ED14687D098B529FBC428
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33322e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:24:32 +0000
ROA not before: Mon 17 Apr 2023 11:19:32 +0000
ROA not after: Mon 15 Apr 2024 11:24:32 +0000
asID: 42366
IP address blocks: 45.129.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:88:e0:a2:50:82:9f:7e:53:8e:d1:46:87:d0:98:b5:29:fb:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:19:32 2023 GMT
Not After : Apr 15 11:24:32 2024 GMT
Subject: CN=57F4038F566DB7D27F18015EE9FAC668864E43B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:78:33:88:6f:ce:88:89:17:51:b5:1c:d2:
14:8b:e1:80:c6:66:2a:bd:e3:73:02:1d:4b:aa:9c:
f0:8a:f8:68:18:76:a5:e0:d0:c4:3c:41:57:a7:c1:
6b:09:62:94:10:4f:40:bc:9d:fb:56:3a:79:d9:6d:
7f:ab:d3:ec:23:2c:a9:19:f6:6f:16:01:de:d2:be:
fa:e4:02:f4:6e:47:a7:44:67:63:d5:2c:5d:f2:f2:
75:5f:5c:73:6b:5d:a5:58:18:b4:09:78:76:a7:88:
f4:fb:10:26:9b:b8:ba:36:e5:b8:2a:98:62:a5:e5:
7a:f0:fd:83:4a:22:cc:b3:99:65:e8:8f:84:8a:95:
69:58:2f:dc:2f:88:dd:03:2c:1d:84:43:2a:42:6c:
97:a2:43:27:26:a9:90:5e:d0:75:6f:94:8e:ce:aa:
c3:af:fd:c5:67:9c:f4:ed:66:be:60:ba:16:5e:9e:
c0:e9:8f:0d:a6:07:fb:0e:31:5e:ef:d5:91:a3:7a:
23:2c:9d:34:93:e8:13:90:3d:2c:68:0e:0d:8f:61:
40:71:de:4d:a0:9c:da:ff:ce:88:6b:ac:23:60:17:
94:88:52:cb:c3:41:bb:a8:a5:be:26:e7:10:3b:0f:
44:f1:7f:23:16:e3:de:50:3a:1e:6e:44:eb:17:e9:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:03:8F:56:6D:B7:D2:7F:18:01:5E:E9:FA:C6:68:86:4E:43:B8
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33322e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b9:ee:56:5e:4f:6e:ae:96:ec:69:c0:aa:db:ed:0f:78:57:
2a:33:37:04:c6:22:2c:27:94:20:00:11:7d:e7:6f:4c:df:ea:
af:37:8a:77:33:1f:c8:53:40:d0:c6:f2:9b:2c:ed:7d:2e:9b:
78:3c:9d:c9:1a:61:85:ee:32:94:7c:0c:a2:c5:19:15:16:79:
be:c5:f7:e0:33:fa:2f:93:89:3d:58:2a:ae:be:da:fb:88:88:
2a:a9:e4:99:e6:b8:28:0f:37:bb:9a:c8:cd:0c:e9:1d:36:a8:
e7:f7:4e:86:c9:dd:ea:f5:72:35:17:b6:ce:3c:ac:a0:a8:91:
8c:76:07:2b:70:a4:ee:99:6c:23:a6:e5:c1:08:34:e7:fa:74:
64:22:61:9a:26:3a:44:0e:a8:50:e4:c0:c2:52:bd:18:d7:28:
7d:68:eb:d5:95:e8:80:0b:57:aa:da:70:dc:06:d8:a1:e1:3b:
86:0d:84:60:a9:b2:81:66:7b:70:6f:a9:82:19:7e:cc:68:d6:
6f:71:54:7d:32:c3:5b:b0:27:e0:06:fd:72:ec:7a:9f:53:7e:
f8:7a:af:83:81:71:07:6f:83:d1:a9:5b:52:ad:6d:17:9a:bd:
1b:e7:cc:4a:3d:ac:9c:0c:7c:e7:d2:25:ed:1e:7c:c6:10:f3:
ec:9c:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org