Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134382e3133362e302f32322d3234203d3e2030.roa
File: 34352e3134382e3133362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: KBmyRswYZQK+8sC73Kw3vYy1KV+OhwgAAMZ/44VUlFg=
Subject key identifier: 19:8B:0C:64:55:AA:32:0A:57:AF:19:D9:B8:93:03:6E:7A:13:62:36
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 1B568825804AD9F15460141058082E441D67A1BE
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134382e3133362e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:14 +0000
ROA not before: Mon 27 Mar 2023 08:23:14 +0000
ROA not after: Mon 25 Mar 2024 08:28:14 +0000
asID: 0
IP address blocks: 45.148.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:56:88:25:80:4a:d9:f1:54:60:14:10:58:08:2e:44:1d:67:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:14 2023 GMT
Not After : Mar 25 08:28:14 2024 GMT
Subject: CN=198B0C6455AA320A57AF19D9B893036E7A136236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:54:a6:12:b1:80:8b:f3:9f:14:5f:35:21:
43:83:49:c2:f0:fb:6c:ec:6e:53:be:f2:57:65:31:
25:ee:1a:d2:2c:05:09:a8:2e:a0:05:82:14:95:d1:
9a:86:ec:ff:92:bf:26:05:ad:8e:cb:cd:7a:22:e2:
13:d5:02:8f:00:4d:56:59:99:56:04:cd:5c:51:7f:
14:3c:e0:dc:80:26:46:55:19:97:52:e0:b3:9f:5b:
99:a1:87:7d:ee:57:3a:bd:86:8e:e4:3f:21:37:c6:
ae:5c:c8:05:89:2c:a9:6b:6a:57:b7:67:2c:4e:88:
31:14:31:cf:94:81:fb:ea:78:13:56:28:f3:73:79:
d7:24:c3:5f:60:31:87:95:50:ea:7b:42:2a:fa:f4:
7c:a0:49:e3:00:89:ac:f7:19:38:51:7a:9c:08:eb:
09:aa:4c:ba:2d:8a:d2:22:f4:0b:68:ad:b4:d3:d7:
ee:42:4f:a9:d8:b4:da:2b:a4:6d:2b:56:a7:38:58:
10:46:d4:fd:47:ad:80:dc:71:ac:5a:9a:18:9e:fe:
d5:86:f5:d9:fd:cf:a9:54:d4:57:2f:84:24:3a:09:
58:af:c7:c2:a5:40:9e:2a:25:66:ab:4f:29:5c:0a:
75:cc:10:6d:a7:ea:79:cd:8a:14:06:0c:7a:86:61:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8B:0C:64:55:AA:32:0A:57:AF:19:D9:B8:93:03:6E:7A:13:62:36
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134382e3133362e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.136.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ca:7f:34:0e:9d:12:6c:ba:67:4b:c8:00:3b:4e:7d:bc:b0:
fb:9c:7c:51:68:d1:ea:80:b9:90:3e:85:56:6f:01:56:9f:4f:
0a:f1:53:a2:95:c5:60:36:70:ae:4f:f9:0c:ef:94:07:57:b7:
ab:9f:a3:3d:44:bc:62:e0:c0:02:aa:06:8a:ae:af:b8:31:50:
3b:9a:79:6e:b2:af:54:56:82:77:4b:cb:fc:87:60:1f:5e:ef:
99:8b:e9:49:87:7e:be:40:5b:e1:70:2e:8c:32:1e:cc:58:d8:
4f:eb:50:53:4f:d1:45:2c:8e:52:f9:a4:9f:03:9b:ed:46:a5:
49:6f:d0:d1:cc:e6:3a:67:7d:5f:33:5a:fb:ea:ef:ae:1f:20:
9a:6d:78:7f:e3:70:d8:d9:d0:cd:8d:be:00:38:c5:2b:14:50:
87:6b:0c:f3:93:eb:74:da:57:5a:89:27:33:43:33:4c:dd:f5:
36:3d:11:8d:19:95:77:8b:d9:96:d1:f4:a4:3d:1b:d8:fd:f7:
82:38:8e:f5:d1:01:ed:b6:c8:2a:a1:ca:e9:da:bc:10:bf:f2:
ce:20:40:7f:f8:05:44:11:21:fd:16:12:69:c1:f1:31:4e:5d:
77:c3:bd:29:18:bb:3c:e4:08:f7:8b:12:dc:32:f5:1a:ff:a1:
09:30:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org