Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135352e302f32342d3234203d3e203432333636.roa
File: 34352e31302e3135352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: /Dgt6DU3r8YxGrsz7G3jMrV6j72EIY8yH/uoTEcinO0=
Subject key identifier: 7D:A4:92:09:7B:23:E4:F3:B3:F3:2A:96:B4:59:4E:24:9C:F3:30:BF
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 47C3468352D75760290BC465FFFCA86B06916AFC
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135352e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:20:28 +0000
ROA not before: Mon 10 Apr 2023 08:15:28 +0000
ROA not after: Mon 08 Apr 2024 08:20:28 +0000
asID: 42366
IP address blocks: 45.10.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c3:46:83:52:d7:57:60:29:0b:c4:65:ff:fc:a8:6b:06:91:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:15:28 2023 GMT
Not After : Apr 8 08:20:28 2024 GMT
Subject: CN=7DA492097B23E4F3B3F32A96B4594E249CF330BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:eb:5d:a5:56:51:60:9f:bf:d8:c8:2f:89:
e7:d9:e1:05:f4:c8:0b:0a:e2:80:88:b0:b5:d7:4c:
92:34:d1:2c:c1:e7:bf:d3:de:41:1d:d4:0d:f5:6c:
66:7a:f0:34:ea:16:18:15:76:4c:e6:96:58:f9:e6:
ea:62:0a:29:7f:b9:e2:8d:01:e2:72:cb:64:fb:a7:
c7:f0:8b:eb:55:71:ec:d4:c8:9c:8e:e8:43:c1:9d:
37:3a:6f:1e:42:9f:0b:af:e8:60:f6:69:2d:73:1b:
55:27:50:17:f8:15:79:6b:3d:00:71:66:3b:77:77:
9b:c5:3a:a7:56:0a:84:7b:39:4d:34:6e:a3:dd:a1:
6c:0c:97:3f:03:cd:c4:3d:e1:99:b7:71:4b:ac:2a:
07:66:97:2d:4e:45:44:30:c0:71:00:e9:58:aa:54:
58:a6:7a:82:bc:1e:27:1b:3d:38:95:52:92:1f:28:
5a:c4:52:61:ff:65:df:f4:54:f4:a4:3b:7e:5c:5b:
82:7d:d4:35:06:7b:a8:e4:a7:c6:a4:39:e3:71:2c:
89:30:26:5e:9a:10:ca:56:12:f4:79:e8:75:0e:d8:
e5:41:1e:05:df:f9:e4:f7:13:d3:f5:a4:77:24:66:
b7:c3:7a:a7:43:61:8d:8e:37:ee:2b:09:bd:9f:bf:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:92:09:7B:23:E4:F3:B3:F3:2A:96:B4:59:4E:24:9C:F3:30:BF
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31302e3135352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8c:0a:40:60:f6:7e:4a:74:1d:51:38:92:1f:ec:4b:52:62:
83:22:1d:ef:86:59:88:94:97:82:53:72:56:5d:51:de:bc:1f:
0b:65:07:2f:c4:45:a7:90:5a:6f:fa:b3:f5:91:73:44:7c:8b:
32:92:df:3c:e3:57:b0:6f:af:1f:f2:2b:2f:d2:ad:e2:22:66:
61:47:e1:08:8b:80:4b:44:94:a7:22:25:4a:42:c0:9a:7c:cc:
76:96:82:40:ca:1d:2c:53:a6:a6:4f:6c:80:b8:ab:98:71:8d:
7f:01:f2:39:6f:e8:f2:fe:5e:41:d8:f3:04:af:75:4e:1c:47:
7b:ab:5b:25:ca:c8:3e:7f:1b:6b:e9:72:d5:ad:84:56:4d:dd:
1e:2e:82:ac:10:8e:06:92:20:02:d4:d2:d0:23:b7:41:c7:50:
9f:45:7c:1d:26:a7:62:3d:2f:52:ff:f7:2e:fc:d6:84:f5:e5:
b0:2b:0c:7e:23:62:19:81:c2:20:ac:85:bc:01:36:77:8b:85:
06:e6:a3:64:c6:bd:2b:bf:82:9a:c6:f3:fa:6a:ee:d5:27:03:
dd:f4:d6:34:88:87:5e:33:d7:4c:1b:5f:2e:98:7a:4f:a5:6d:
6c:2f:1a:ad:a1:01:c9:1e:26:4e:46:8c:8b:6e:f9:24:68:2d:
e1:ba:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org