Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa
File: 34352e3133342e3232372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: JbhSNTTB+gDOPGce6taSG4G234Zy7YUC7T9ebivcO6Y=
Subject key identifier: AA:23:94:CD:41:FD:1C:B2:F0:60:40:B9:9C:92:42:24:A1:09:18:A0
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 393C653015AEA8083B4AF4C8A577287DEC553C2D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa
Signing time: Mon 27 Mar 2023 08:28:09 +0000
ROA not before: Mon 27 Mar 2023 08:23:09 +0000
ROA not after: Mon 25 Mar 2024 08:28:09 +0000
asID: 54252
IP address blocks: 45.134.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3c:65:30:15:ae:a8:08:3b:4a:f4:c8:a5:77:28:7d:ec:55:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:09 2023 GMT
Not After : Mar 25 08:28:09 2024 GMT
Subject: CN=AA2394CD41FD1CB2F06040B99C924224A10918A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:a1:f6:33:6c:d5:1e:91:fd:2a:64:70:a3:
dc:87:89:bf:f2:12:20:10:ee:76:09:50:1b:e1:99:
a1:21:85:5c:d6:74:18:0e:d9:51:eb:20:54:59:19:
ba:28:23:69:e4:40:b9:7d:3e:45:5a:de:5d:32:7a:
2e:ba:cd:c4:fb:2b:1d:92:35:80:e8:7a:86:2e:84:
d6:e1:4a:91:e3:92:ec:d9:a0:81:bf:5d:b4:85:ef:
3d:03:53:30:08:dd:67:be:cd:43:b6:f8:3a:91:5f:
24:64:76:6a:06:1f:2f:1a:27:9b:79:c9:6c:f5:12:
fd:09:3b:43:07:32:5a:16:cb:8e:39:4e:15:d2:cb:
7b:ef:99:07:11:46:92:da:98:67:44:76:2c:72:75:
79:28:3f:d6:91:44:a0:e4:08:15:a7:53:56:76:72:
5c:72:5d:f0:1b:28:c0:34:03:0a:d9:28:4a:91:46:
2c:bf:a1:2e:14:29:92:b9:6e:77:f9:f2:0c:46:9e:
74:ea:6f:f1:31:c9:b3:54:e1:c7:04:97:65:be:4b:
be:84:47:bc:49:b5:c3:e0:1e:a0:c7:9c:bf:2d:94:
1d:e5:bb:f1:5e:b7:01:7a:38:b4:55:18:ae:5c:c8:
59:a2:7e:83:dd:f7:45:10:e5:9e:a6:d0:96:00:cd:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:94:CD:41:FD:1C:B2:F0:60:40:B9:9C:92:42:24:A1:09:18:A0
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.227.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8d:79:ea:e7:b0:90:3b:4b:9e:f4:fe:c4:f3:12:fc:81:e1:
6e:34:96:60:57:12:22:32:6e:77:61:7e:7d:30:6d:c0:30:65:
26:46:c4:60:99:f6:ca:c9:75:82:97:5e:69:a8:c0:50:3d:b8:
98:b8:90:f8:09:f0:25:68:07:1e:ba:ef:50:6a:48:7e:9f:08:
1f:21:49:ba:09:bc:39:f0:52:4d:ea:4e:73:50:da:05:95:df:
dd:75:49:ee:4a:1e:a9:c5:8f:40:bc:17:17:bd:5f:7c:4a:34:
79:71:a4:3e:24:50:cb:f3:70:28:de:cc:1b:84:ca:d5:97:dc:
99:93:1a:26:cb:d7:c9:ac:7d:2a:79:56:70:98:6b:2f:63:65:
85:7e:c6:00:d2:71:a4:ed:3a:d6:a9:24:0d:83:4e:ee:e1:0c:
5e:6b:2e:d9:c7:57:44:05:9d:3c:6c:a7:80:7d:22:46:1e:ae:
f9:67:3f:6c:3d:3d:db:94:bb:00:02:17:81:5c:24:67:ca:74:
f2:3d:7e:2e:b3:e8:3a:24:d6:7b:6c:e9:95:56:96:d0:ba:37:
22:0d:63:25:17:b1:ca:4f:2c:06:3c:5d:81:ad:54:75:03:8d:
1e:eb:3a:94:e8:05:18:7f:94:d6:e4:25:9f:8f:8f:79:34:03:
98:84:69:d0
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 25 17:41:12 2023 by rpki-client on console-fra.rpki-client.org