Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135322e302f32332d3234203d3e203432333636.roa
File: 34352e31302e3135322e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: JMxYbZB46Lya26a9skHiPCU4ytKsya1Mz/zAItWoZ2A=
Subject key identifier: 9E:8B:9A:A0:2F:AB:6A:CA:DA:39:0A:4C:6D:95:B2:52:A4:7E:31:91
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6F4E8C1766E0AB9B10354774DD445A4F15CC4FC2
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135322e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:20:22 +0000
ROA not before: Mon 10 Apr 2023 08:15:22 +0000
ROA not after: Mon 08 Apr 2024 08:20:22 +0000
asID: 42366
IP address blocks: 45.10.152.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4e:8c:17:66:e0:ab:9b:10:35:47:74:dd:44:5a:4f:15:cc:4f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:15:22 2023 GMT
Not After : Apr 8 08:20:22 2024 GMT
Subject: CN=9E8B9AA02FAB6ACADA390A4C6D95B252A47E3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:77:39:bb:e8:6d:62:e6:b1:6e:2f:75:30:
6d:19:23:d4:ac:d2:fa:a0:56:e2:72:01:ec:f2:e9:
c8:b6:77:84:74:ad:2d:3e:89:d1:c2:97:32:a7:1f:
ca:5e:54:85:e8:4d:a9:27:41:8f:2c:78:46:7d:f6:
7e:2f:80:f4:47:64:b6:20:52:1a:64:e0:bc:56:0d:
82:ee:28:79:be:83:84:ff:8d:bb:e8:11:46:cc:fd:
95:0c:a2:8b:fd:10:f1:b1:9d:9d:ca:d5:33:23:39:
06:39:cd:38:32:5f:96:17:1e:54:55:ff:28:ae:1e:
91:73:06:1e:c8:11:6a:b3:89:b5:aa:40:fe:4d:19:
36:b9:5a:fa:29:9f:4b:1f:a2:dc:f7:58:39:bc:be:
9e:fe:78:84:9c:95:46:2c:93:4d:36:23:3b:3a:31:
49:00:22:c3:cc:a0:07:c9:fe:8f:12:54:3f:92:18:
6e:1f:c0:10:23:ae:ee:29:7a:6f:19:80:74:87:a4:
7c:e4:11:9c:f6:5e:42:2b:3a:15:36:ae:94:16:a1:
ac:82:e6:46:e9:cd:82:2c:98:75:83:0c:8e:0b:3b:
75:0e:24:8a:34:b4:81:b3:72:b5:9a:2f:1a:3d:5e:
58:44:48:3b:e9:60:83:ca:47:12:b7:78:81:97:6e:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:9A:A0:2F:AB:6A:CA:DA:39:0A:4C:6D:95:B2:52:A4:7E:31:91
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135322e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.152.0/23
Signature Algorithm: sha256WithRSAEncryption
27:3b:52:97:38:d1:56:ed:9f:91:9d:e4:3f:2e:7f:4b:a2:87:
f7:fe:56:a6:9d:ad:e6:57:b7:c6:b9:e4:be:c7:c6:41:0d:8a:
cd:39:d8:5c:8c:d0:c6:c1:dc:53:12:2b:45:09:b3:b2:47:26:
9c:a8:a9:9e:bb:a9:fe:5e:b0:d1:55:97:fc:c5:36:3a:80:f1:
d2:68:e4:3f:f8:7d:41:fb:99:3e:8d:a8:86:09:39:70:21:98:
6d:dc:7b:f8:eb:63:9b:5e:7b:30:4b:a6:9b:c9:18:7f:fe:fc:
cf:ed:7f:1b:19:34:2a:51:ce:44:84:b6:95:b4:d3:ab:d9:31:
21:60:1b:91:8e:f2:e6:c0:55:04:ce:21:f0:71:10:e6:96:8b:
94:5d:98:ce:3c:c1:f1:69:6f:0e:a6:3e:fe:81:54:19:9c:e8:
8c:89:f8:a8:b1:0f:e8:b3:e7:93:fb:8e:16:3f:47:a0:71:dd:
8c:ad:27:8d:20:49:d8:9b:22:7c:89:e4:43:15:3e:58:f5:15:
fb:9e:d9:27:49:65:10:74:88:d4:9c:6d:b7:8f:04:72:d3:e8:
38:b0:52:a2:6f:c7:5f:ff:69:e1:fb:80:de:a8:38:83:43:1c:
24:5c:02:db:35:77:a6:85:c3:07:e7:37:71:dd:40:a0:e2:bc:
90:54:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org