Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e203630303638.roa
File: 34352e3134312e3132332e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: vAyZlH68LEKcMxTJzrN4A5+9UtVLsepcKVIqy+5MlWo=
Subject key identifier: 6F:80:80:9C:BF:66:E0:2E:5E:D6:E2:06:34:39:11:22:18:2D:45:CD
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4B84B6F930F153CDD7AF70C68D2F788083612EC1
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:48 +0000
ROA not before: Mon 01 May 2023 13:13:48 +0000
ROA not after: Mon 29 Apr 2024 13:18:48 +0000
asID: 60068
IP address blocks: 45.141.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:84:b6:f9:30:f1:53:cd:d7:af:70:c6:8d:2f:78:80:83:61:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:48 2023 GMT
Not After : Apr 29 13:18:48 2024 GMT
Subject: CN=6F80809CBF66E02E5ED6E20634391122182D45CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:75:0c:6e:39:bc:d1:85:cc:b5:6e:b5:ac:
65:89:60:ba:d9:d4:cc:fe:2b:66:b1:7b:57:e3:9d:
12:7f:56:82:56:98:db:a9:60:ac:54:ba:fe:96:9f:
73:d6:ef:69:dc:0d:eb:2d:e2:7e:78:3b:53:f1:9d:
31:99:d5:e7:cf:0d:01:4f:85:29:41:44:2f:e2:4f:
64:5a:c5:92:24:f8:4b:2c:48:fa:4f:93:31:5f:11:
ed:70:3e:5e:ec:b6:4c:0d:83:47:ab:14:17:0e:34:
d8:1a:09:f6:c9:e3:c1:e0:8e:4a:39:0e:aa:e5:18:
c1:0f:64:38:cc:2f:41:d2:28:3a:f9:50:d4:91:95:
21:75:75:a2:7f:f6:1b:7e:7c:fd:cf:65:ed:53:f3:
55:ef:d3:7a:9e:07:28:65:67:3f:5a:de:6e:e7:d0:
f3:c4:8e:80:8e:84:87:16:86:90:d3:e2:35:cf:bd:
d2:94:7c:92:9f:cb:a3:4a:38:26:39:c4:71:95:d2:
0b:99:a9:68:59:bb:a4:bd:6d:98:fa:bb:c3:d5:01:
b2:bd:05:d2:ab:a1:1c:a7:4f:75:99:15:4b:49:ad:
48:7d:52:3c:66:7a:ab:55:34:87:f3:b5:92:0a:1b:
45:0d:a0:0b:4c:41:b1:6a:e6:7d:69:a8:b6:a1:f0:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:80:9C:BF:66:E0:2E:5E:D6:E2:06:34:39:11:22:18:2D:45:CD
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e7:8e:f9:20:61:fe:71:f4:3c:a0:6c:00:1b:8a:28:17:c7:
c1:db:dc:b9:a1:de:83:e6:db:b0:ce:ed:b6:40:91:02:fe:02:
f7:f0:c1:19:fa:0e:78:4d:9a:83:8d:db:6c:d2:e0:b6:1b:25:
b9:4a:10:22:e2:c5:bc:10:70:93:2f:68:bd:5e:6d:f6:15:83:
0d:bb:46:5a:3f:0e:78:ef:5c:1d:3d:bb:df:b8:2a:8e:69:04:
9c:e1:9c:92:d6:06:f8:92:25:23:04:28:29:e5:83:d3:05:24:
13:e4:a1:1c:f3:be:17:c0:15:2c:81:69:58:61:7c:a4:3d:12:
26:8a:c4:c0:a9:12:25:b9:57:5e:c3:f8:ab:b6:ef:9e:ef:c8:
41:ec:d9:de:40:7e:5f:f3:d4:29:7f:58:23:04:18:35:14:e3:
d2:c1:b5:5d:e3:f5:d6:85:39:23:0f:b4:dc:95:93:7d:b2:f3:
43:fc:74:e9:3c:8a:da:bd:4a:eb:d9:80:fe:3d:37:aa:21:7b:
51:8b:b7:9f:39:18:c6:47:10:1d:3e:eb:97:54:bc:e1:da:7b:
fb:76:0e:93:e5:07:d1:a4:55:18:0e:52:f5:a6:be:37:5a:02:
d2:8b:26:fe:0c:d7:c8:49:3f:cc:73:e6:6e:43:d0:6a:41:58:
3b:db:1c:89
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUS4S2+TDxU83Xr3DGjS94gINhLsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yMzA1MDExMzEzNDhaFw0yNDA0MjkxMzE4NDhaMDMxMTAvBgNV
BAMTKDZGODA4MDlDQkY2NkUwMkU1RUQ2RTIwNjM0MzkxMTIyMTgyRDQ1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaTnUMbjm80YXMtW61rGWJYLrZ
1Mz+K2axe1fjnRJ/VoJWmNupYKxUuv6Wn3PW72ncDest4n54O1PxnTGZ1efPDQFP
hSlBRC/iT2RaxZIk+EssSPpPkzFfEe1wPl7stkwNg0erFBcONNgaCfbJ48Hgjko5
DqrlGMEPZDjML0HSKDr5UNSRlSF1daJ/9ht+fP3PZe1T81Xv03qeByhlZz9a3m7n
0PPEjoCOhIcWhpDT4jXPvdKUfJKfy6NKOCY5xHGV0guZqWhZu6S9bZj6u8PVAbK9
BdKroRynT3WZFUtJrUh9UjxmeqtVNIfztZIKG0UNoAtMQbFq5n1pqLah8I+PAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUb4CAnL9m4C5e1uIGNDkRIhgtRc0wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzNDMxMmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzAzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LY17MA0GCSqGSIb3DQEBCwUAA4IBAQAL5475IGH+cfQ8oGwAG4ooF8fB29y5od6D
5tuwzu22QJEC/gL38MEZ+g54TZqDjdts0uC2GyW5ShAi4sW8EHCTL2i9Xm32FYMN
u0ZaPw5471wdPbvfuCqOaQSc4ZyS1gb4kiUjBCgp5YPTBSQT5KEc874XwBUsgWlY
YXykPRImisTAqRIluVdew/irtu+e78hB7NneQH5f89Qpf1gjBBg1FOPSwbVd4/XW
hTkjD7TclZN9svND/HTpPIravUrr2YD+PTeqIXtRi7efORjGRxAdPuuXVLzh2nv7
dg6T5QfRpFUYDlL1pr43WgLSiyb+DNfIST/Mc+ZuQ9BqQVg72xyJ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org