Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e203432333636.roa
File: 34352e3133302e3130352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: xbDdWzbJsfNGML2301pATkhMBPHaCi7XkV4iWVesn8Q=
Subject key identifier: BC:3D:22:25:D5:F7:E6:3A:05:17:3B:33:B7:FD:9F:A4:6C:2D:13:F6
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 69E2652ED645BC825A590D83FF75F4EF3701F6E0
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:21:18 +0000
ROA not before: Mon 10 Apr 2023 08:16:18 +0000
ROA not after: Mon 08 Apr 2024 08:21:18 +0000
asID: 42366
IP address blocks: 45.130.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e2:65:2e:d6:45:bc:82:5a:59:0d:83:ff:75:f4:ef:37:01:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:16:18 2023 GMT
Not After : Apr 8 08:21:18 2024 GMT
Subject: CN=BC3D2225D5F7E63A05173B33B7FD9FA46C2D13F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:68:e0:c8:7b:be:08:05:b1:e0:c5:7b:ee:
de:49:77:e2:79:98:14:d4:08:ce:35:e5:4c:87:31:
65:f1:25:98:8c:60:87:dc:74:b5:01:23:64:f6:24:
24:16:e3:60:03:83:82:bb:6a:d0:fd:d1:b2:b4:64:
f3:00:dc:da:66:0d:35:88:bc:90:33:c1:88:5d:81:
64:32:fb:63:44:3e:f0:2c:44:01:c4:56:f8:27:20:
97:5a:3b:7f:9c:d2:88:49:b4:2f:e9:e6:14:4d:4b:
88:ef:d3:5b:05:92:19:f4:9d:f0:6d:11:57:1d:b6:
cd:e1:b6:95:30:fc:a1:50:fb:97:6a:38:4b:20:62:
01:22:64:dd:05:43:fa:c2:ce:0c:e8:24:1b:8a:e4:
59:09:38:08:d4:04:6b:a4:6a:e4:58:8e:14:0b:ec:
5c:96:99:36:95:02:ad:a3:13:b0:71:a4:d2:56:a7:
13:fb:49:f7:20:57:3b:d2:c5:8b:25:5c:d5:94:0b:
60:95:70:d6:69:9f:a8:b5:66:35:c7:ed:c6:16:25:
dc:99:a9:31:aa:29:96:c3:09:c7:b7:65:d3:68:73:
87:6f:a8:5c:d7:0e:2d:47:cf:5d:62:0d:a1:61:9b:
ce:00:db:61:7c:fa:0d:03:a4:3d:7b:76:06:8c:04:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:22:25:D5:F7:E6:3A:05:17:3B:33:B7:FD:9F:A4:6C:2D:13:F6
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.105.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8b:c4:92:68:74:b1:15:60:13:09:6c:7f:33:f0:99:a2:ab:
94:f7:e0:69:d4:55:16:4b:c1:eb:87:ff:3c:21:5f:30:6c:a1:
3c:66:d5:13:10:42:99:e0:c5:9f:b5:3c:0f:85:00:af:60:47:
b4:30:8a:29:38:2c:53:37:be:6a:af:59:cb:ff:01:cc:80:73:
11:cb:c4:88:65:e6:e2:2b:c1:68:82:a7:1d:69:de:43:1f:ce:
30:83:92:6f:41:74:8f:15:47:4a:88:4f:25:bd:24:0e:ee:8c:
16:d8:26:60:d3:dc:9a:8e:c9:ba:96:51:b0:a4:32:0c:f2:a2:
16:b6:b4:04:c2:78:3e:d1:ab:dd:da:59:c5:f6:bd:c3:32:5a:
e4:d6:6a:ca:81:89:fb:86:91:48:6d:3e:54:e9:c6:a3:cf:a7:
44:c2:82:d1:3e:b9:0f:40:cf:54:fc:2b:fc:0a:21:12:42:ee:
72:9b:7a:35:f2:07:43:cb:21:f3:d8:c3:69:fc:b6:21:39:aa:
90:33:1b:bd:60:37:a9:a0:bb:f7:b0:57:fe:45:d4:a6:f9:eb:
37:c3:39:c4:0d:db:10:44:22:97:5f:8b:f1:b1:17:5f:ed:d9:
ea:d5:0a:c4:f7:d2:15:23:c4:37:6e:91:12:65:cd:2c:56:e4:
cf:0b:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org