Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa
File: 34352e382e3133352e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: kuLzBWAUNnBWa1XiXm76E5Q44C7BmGawcPy1EsX9/h0=
Subject key identifier: 38:18:AB:2C:68:48:01:05:25:BD:DA:BA:AB:A1:32:91:44:30:56:95
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 971DAA1DFCD8618C668B7C1064DCF734E66002
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 57043
IP address blocks: 45.8.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
97:1d:aa:1d:fc:d8:61:8c:66:8b:7c:10:64:dc:f7:34:e6:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=3818AB2C6848010525BDDABAABA1329144305695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:1e:ad:e6:b2:0a:bc:c7:59:e8:aa:27:17:
f3:64:db:c0:1e:b9:f4:64:19:a0:ca:20:3d:10:c2:
21:c8:5a:23:49:4c:25:4d:b2:4c:af:18:4f:93:74:
2c:b4:b7:d2:0a:82:6b:9f:36:d6:b7:c2:e0:8a:5a:
f6:8e:36:37:6c:29:fa:68:1a:00:ee:5c:e2:06:90:
7b:fb:ea:4b:25:e9:98:0f:ed:5f:0d:58:e7:4c:52:
1e:39:16:04:c1:1a:1e:b6:22:32:66:35:f9:79:77:
a4:48:2e:25:1f:7d:9d:27:ca:e6:6e:47:bd:8c:d9:
0f:c4:86:8a:9e:33:04:d5:43:43:2e:b1:6e:31:9a:
db:78:35:e3:1d:26:5a:49:6b:8c:95:79:1b:d1:76:
92:bf:b8:40:b6:00:c8:42:15:24:eb:59:97:ef:f1:
54:cd:e3:53:e6:ef:09:fc:12:ec:cd:d9:2a:bd:db:
1a:6c:f6:82:6c:81:4d:82:35:b3:8a:39:80:f9:c2:
bc:fd:9f:45:44:7a:c0:eb:ab:a4:65:ec:66:99:5e:
df:d1:af:25:05:f7:18:1c:24:76:fd:c1:14:f1:31:
5a:d3:f9:16:0b:77:45:37:22:04:4c:fa:09:45:ab:
22:0a:1e:37:92:02:b8:27:22:44:17:39:e2:c5:66:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:AB:2C:68:48:01:05:25:BD:DA:BA:AB:A1:32:91:44:30:56:95
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133352e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:f3:05:d1:43:db:79:8f:3d:db:c7:fe:45:ea:da:64:8d:
d4:64:f9:b4:a6:b9:91:af:7f:c3:0f:f3:0a:24:77:f3:f3:a5:
17:da:c3:78:eb:a4:5a:f8:cb:78:ca:af:9e:e2:2d:17:d5:45:
4b:ae:2e:30:92:67:a5:53:05:7a:95:6f:b9:96:bf:6d:4a:a5:
af:d0:0c:cc:63:26:fe:ee:cf:39:cf:64:f1:3d:bd:84:99:c0:
ee:28:39:ac:29:bf:e2:69:a8:ae:69:f4:d0:fc:5a:8f:da:5b:
39:40:d1:33:75:ac:c1:6b:84:60:9f:55:64:33:74:70:f2:62:
99:80:f2:74:f8:d0:cb:5f:da:67:11:cd:ec:7f:d9:06:ec:b6:
2b:cc:53:db:7b:a5:b6:30:d7:57:7e:98:ba:0a:6b:1a:22:f6:
a9:c5:b7:d6:31:0c:2e:1f:43:a9:aa:2d:a8:a7:93:16:12:d0:
d7:29:a7:b4:4b:52:18:27:3f:0e:26:85:de:c8:6f:97:08:48:
09:70:33:9d:74:65:c3:8d:3a:6b:96:b4:a3:27:a4:38:ab:9e:
19:e7:08:4e:08:4b:82:17:47:2c:98:4a:b8:4f:29:fb:43:ef:
90:2d:f2:8a:39:63:68:2d:4b:d1:39:76:62:81:a0:26:b1:15:
2d:5a:84:38
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 07:47:16 2023 by rpki-client on console-ams.rpki-client.org