Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
File: 34352e38342e33382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hPr+WuXOWPlUjlGO1wVD2GLYlw7l9rWF3ceQGDXiW/U=
Subject key identifier: 97:FB:2E:BB:F5:FF:FB:2F:FC:9D:52:B4:9E:61:72:D7:53:ED:5F:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EDCA1D26A68FB94D86CD9F47B0D227F48D70811
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:28:58 +0000
ROA not before: Mon 27 Mar 2023 08:23:58 +0000
ROA not after: Mon 25 Mar 2024 08:28:58 +0000
asID: 136787
IP address blocks: 45.84.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:dc:a1:d2:6a:68:fb:94:d8:6c:d9:f4:7b:0d:22:7f:48:d7:08:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:58 2023 GMT
Not After : Mar 25 08:28:58 2024 GMT
Subject: CN=97FB2EBBF5FFFB2FFC9D52B49E6172D753ED5FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:74:5f:ff:91:e2:72:36:d4:cd:8b:c5:47:
bc:93:0d:6e:7a:f7:25:3a:f0:f2:a0:03:84:93:1b:
99:81:5b:d3:74:81:b4:fc:a9:fb:da:5c:56:55:ca:
a6:d6:80:f6:bb:5f:aa:d7:90:84:4a:50:86:70:7a:
59:04:4a:9d:5f:2f:1c:c7:e6:7a:35:9d:93:c2:af:
4f:f8:d3:8f:73:ff:8c:14:46:ee:62:f5:c2:f4:65:
51:c7:58:6b:37:07:b7:4b:5e:46:dc:87:0a:bb:f0:
67:bf:0e:5d:74:39:d6:f4:5c:c4:73:7a:77:b2:3b:
8a:2a:47:2e:06:a6:80:be:1f:4c:d5:d2:19:1f:dc:
67:09:05:bb:0f:cf:8a:d8:24:a7:f5:27:2a:c3:ee:
dd:5d:49:8f:1e:57:b7:70:6b:10:9c:37:6a:1c:fa:
cb:31:ab:2c:58:08:37:66:be:d1:b3:dd:6b:77:7c:
c8:54:a2:48:9b:c6:90:0b:98:07:72:0d:8c:66:07:
4b:14:01:3b:88:dc:c3:8f:86:7e:e9:54:5d:c3:64:
32:b4:85:74:b7:2b:c2:7c:50:7b:dc:dc:4d:5f:76:
a6:4a:8a:6e:c8:cb:97:71:4d:ff:de:87:1f:d9:e3:
a1:4e:dd:b9:1e:b7:ab:0d:96:f0:ff:83:de:a6:4a:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:2E:BB:F5:FF:FB:2F:FC:9D:52:B4:9E:61:72:D7:53:ED:5F:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.38.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ad:f3:f3:04:99:dc:c0:fc:73:49:5f:f4:c3:54:89:44:39:
58:34:04:44:6c:c2:57:e0:f9:8c:d4:f8:51:a4:eb:b5:57:56:
68:3c:1f:fd:e8:9a:9c:8d:a2:62:fd:d8:8d:e4:aa:d8:81:12:
96:64:c0:db:17:9f:c8:35:27:e8:96:47:5f:a2:a9:5c:7b:ff:
0b:a1:8e:4f:55:3c:21:82:62:1b:54:f8:34:41:fe:6b:47:11:
cd:df:cd:88:e1:f0:91:08:a4:f6:a0:39:8c:da:4a:2f:b5:bb:
da:3a:31:cf:47:fb:8e:c3:e8:32:ee:02:11:11:41:ba:35:f8:
9c:0a:e7:9e:3c:28:87:b0:87:1f:62:82:d8:56:25:aa:f1:f7:
0d:9a:97:ab:70:43:68:02:8c:51:8d:8a:41:f9:6d:ad:1d:32:
2e:33:cc:38:98:85:f6:73:90:79:71:2c:c7:ce:80:88:e9:41:
b5:4f:b3:55:ee:b1:fc:71:60:3d:7e:2a:d1:2a:b3:b8:8f:5a:
6f:ac:99:a6:74:52:f7:65:77:20:ac:a4:bf:37:bc:36:ba:f6:
4b:10:b4:86:91:4b:17:9e:e5:6e:14:93:41:7b:f5:5b:91:f3:
f8:b7:bf:04:e7:57:cc:4b:68:06:a3:76:15:92:d7:4a:87:e5:
53:5d:41:64
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 30 14:29:18 2023 by rpki-client on console-fra.rpki-client.org