Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: qQOlbHWcDy+/lV0H44tgO+KAhvOMPkPJ2MjKdMBrTEI=
Subject key identifier: A5:E7:53:89:37:E4:6E:DB:56:C3:49:DA:ED:B7:07:C1:65:63:19:3D
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 2A7BD91D68B5D34F35DCED5B6AB7BA3EED6D90D8
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa
Signing time: Mon 27 Mar 2023 08:28:01 +0000
ROA not before: Mon 27 Mar 2023 08:23:01 +0000
ROA not after: Mon 25 Mar 2024 08:28:01 +0000
asID: 60721
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7b:d9:1d:68:b5:d3:4f:35:dc:ed:5b:6a:b7:ba:3e:ed:6d:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:01 2023 GMT
Not After : Mar 25 08:28:01 2024 GMT
Subject: CN=A5E7538937E46EDB56C349DAEDB707C16563193D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:76:e5:94:fc:61:ec:4d:01:77:c7:5e:d7:
cf:53:00:41:b3:65:12:30:db:8e:ab:d1:31:c5:b9:
dc:6a:e1:05:12:03:27:6f:3a:43:18:92:95:ce:49:
bd:64:9a:c0:9f:73:4b:e5:25:bd:98:1e:6e:3e:f8:
55:be:11:85:39:87:16:57:be:09:0c:48:14:39:54:
b0:51:ce:65:37:ca:78:17:3d:f2:fa:3d:53:b7:19:
5d:c5:66:18:b5:9a:d8:af:a1:60:91:19:1e:19:b4:
87:76:64:00:1c:9d:9b:52:10:1d:fc:a6:61:77:19:
91:86:7e:5b:e8:a3:55:95:c7:94:fd:c5:a1:50:9c:
60:32:79:d2:7e:dd:f8:7d:00:d4:85:1d:81:e6:2b:
87:da:37:6a:3f:24:52:e7:68:d7:2f:b1:cb:69:d0:
d1:66:7a:b3:68:73:02:00:4a:21:3a:9d:fd:4c:05:
20:2b:04:ff:36:b4:f7:81:88:49:96:c4:84:d5:87:
35:fe:e2:a3:e6:a9:d6:2c:e8:d1:65:88:e8:67:c2:
2b:b8:5e:42:df:d8:e0:e1:49:4b:ad:66:ec:75:9a:
5a:d1:6f:05:45:9d:8f:2f:23:1a:77:f7:94:70:90:
18:cb:44:3e:ab:80:15:b3:e5:da:23:cb:1b:ed:62:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:53:89:37:E4:6E:DB:56:C3:49:DA:ED:B7:07:C1:65:63:19:3D
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a8:e7:bc:cb:30:ea:35:cd:ff:36:8d:03:6e:ea:f0:73:9d:
4f:4a:9d:83:f1:b6:25:7c:48:0d:9e:a8:ba:4e:29:2d:bf:11:
73:c1:02:c9:f6:af:12:db:ea:e6:49:71:c7:1d:cd:cb:3e:1a:
a7:56:07:ba:0a:92:d8:92:e4:bb:73:8e:59:1e:bd:44:bb:d6:
87:c7:b0:91:4b:ee:dc:7a:f4:74:fb:e2:75:50:4c:07:0d:a7:
fa:3e:38:12:16:f5:dd:d8:1c:6a:4b:f8:f5:4c:0d:3d:63:26:
f4:58:04:01:e8:f5:c4:8e:bc:64:35:f8:26:87:5d:dc:f5:a3:
fd:72:9f:4b:32:04:37:59:97:3a:fc:a3:11:54:a7:c9:9d:7b:
50:81:c0:39:1e:38:22:76:3a:d0:9e:67:fc:a8:9e:f5:e6:18:
01:df:23:5c:70:7a:4c:7b:3f:35:bd:d9:e3:92:bb:1d:eb:dc:
e7:2c:ae:6f:2a:98:ea:fa:19:4e:9c:78:07:e6:ac:fe:90:8e:
7b:90:8a:ce:9a:ef:3b:e0:6c:3a:68:7e:1d:a2:0a:ab:b7:56:
d8:fb:54:7c:60:f1:3e:22:d2:41:b6:be:bf:d9:19:75:ef:fa:
bf:bc:99:33:9b:af:bf:11:15:36:57:f9:84:94:ea:6d:04:e8:
8b:6a:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org