Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e203432333636.roa
File: 34352e3132392e33352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 1PwHQsPuytvyGpPMW9hjTxq8I/T3x8xrf3JViECesOA=
Subject key identifier: 1D:7E:89:0C:AA:62:FD:58:AA:26:33:C7:00:E3:64:F1:3D:0C:49:EF
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 7939F90A8F14849CA9E81ACCCE272C07C8381E
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:24:38 +0000
ROA not before: Mon 17 Apr 2023 11:19:38 +0000
ROA not after: Mon 15 Apr 2024 11:24:38 +0000
asID: 42366
IP address blocks: 45.129.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:39:f9:0a:8f:14:84:9c:a9:e8:1a:cc:ce:27:2c:07:c8:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:19:38 2023 GMT
Not After : Apr 15 11:24:38 2024 GMT
Subject: CN=1D7E890CAA62FD58AA2633C700E364F13D0C49EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:81:ff:c0:74:5e:8f:92:c3:06:43:8c:fc:
90:d7:33:bb:2a:b2:ad:de:45:0e:a0:59:a4:8f:88:
0d:c9:82:e4:f5:7d:67:7e:b0:42:9d:6e:a1:61:a0:
b3:62:fd:41:e6:ca:5e:6c:ca:d0:68:21:b3:0b:0f:
13:f0:d5:28:1e:b0:a6:c1:bd:ec:96:10:d9:5f:a8:
9b:fd:bc:51:60:82:3b:80:56:6b:95:d5:4d:6c:2b:
36:07:a4:c8:d3:01:cf:72:22:28:09:85:e2:40:98:
d9:ed:ad:4c:aa:f2:0c:1b:44:ca:66:ce:26:27:ac:
5f:9a:0e:79:91:3f:53:a5:72:0b:e2:7a:5f:43:72:
24:84:fa:6b:2c:02:de:90:b3:8a:03:ad:ac:2d:b1:
58:f7:d2:72:34:ea:03:b5:ef:6e:d2:1a:5e:e0:21:
09:62:83:47:e7:0f:2a:bb:e3:c1:e0:ac:3d:85:14:
b8:89:d8:96:1b:95:4f:20:e7:8c:ad:90:38:17:c8:
ee:1a:e6:63:bf:32:08:57:5a:7f:9f:84:bb:b2:4f:
5d:c5:21:43:eb:2b:6a:43:e4:c2:15:ac:3c:e3:ac:
98:47:f6:b3:d5:fc:1a:30:06:30:0d:b5:4f:ef:ff:
25:bf:07:05:1e:85:98:44:7c:b7:05:4b:9c:c5:0a:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:89:0C:AA:62:FD:58:AA:26:33:C7:00:E3:64:F1:3D:0C:49:EF
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:85:ba:15:a7:9d:b1:bb:e1:f3:18:f2:98:c7:50:fa:46:02:
cb:d8:f9:af:69:3d:1d:55:2b:e3:09:27:a8:06:a7:f1:8a:4c:
6b:5b:22:1a:d4:8d:db:ad:45:83:ff:4e:79:ed:e9:69:6f:8a:
8c:48:09:c1:3a:d0:39:33:30:aa:d6:75:31:5b:44:d1:87:bc:
9b:5f:bd:0a:54:b9:17:c6:01:5f:43:31:08:ca:29:2f:6a:57:
37:d4:26:8e:8f:98:2a:d7:f5:5b:df:f3:ce:c3:26:f2:0a:99:
dd:36:bb:41:c6:1a:eb:6b:50:bf:97:5c:cb:76:d6:ff:80:c8:
85:e3:a8:05:24:5c:d8:37:87:4c:9a:ad:4d:e9:3a:ec:fe:0e:
29:1e:17:7f:b9:0b:a4:bb:e9:b5:b5:c5:46:3c:2c:9d:0a:e3:
88:e7:02:b8:49:bf:70:4e:5d:9a:dd:e7:ec:d3:6a:5f:4a:18:
23:f4:00:51:e1:e8:f8:60:e6:ca:43:5e:fd:3d:c1:22:c8:8d:
15:5f:df:14:3a:5f:6b:bd:91:bb:d9:07:d2:f7:4c:30:d3:8e:
9e:b0:c3:ff:a5:80:05:88:7f:ad:7e:3a:d3:70:e4:09:a5:78:
bb:0c:46:aa:b4:dc:dc:f9:b4:46:31:07:f3:a2:0c:92:7e:fa:
43:1c:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org