Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
File: 34352e3133302e3130362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: rORMbNr1/HyQSXBWr5OLlRKMtyVewZJ44y0It6rrMzE=
Subject key identifier: CE:CD:87:06:0D:32:9E:D3:40:D4:FD:E0:2B:D9:A1:CC:FD:71:52:FC
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 259D3BC33FE9CB8DFAE745C5538CBB1CD25C2513
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:35 +0000
ROA not before: Mon 27 Mar 2023 08:22:35 +0000
ROA not after: Mon 25 Mar 2024 08:27:35 +0000
asID: 61317
IP address blocks: 45.130.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9d:3b:c3:3f:e9:cb:8d:fa:e7:45:c5:53:8c:bb:1c:d2:5c:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:35 2023 GMT
Not After : Mar 25 08:27:35 2024 GMT
Subject: CN=CECD87060D329ED340D4FDE02BD9A1CCFD7152FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:b1:1c:58:93:9e:c6:55:d9:33:63:02:16:
49:e6:69:8e:63:f1:a9:74:b6:b7:ad:17:ff:19:6a:
11:36:26:f1:6b:54:41:ed:60:bf:c3:bc:6f:7b:33:
12:cb:0e:62:76:e2:b8:b3:bf:7d:cf:b2:94:5f:74:
b9:2a:82:1b:6d:67:c1:c4:5b:59:1d:e3:f2:6a:ce:
d7:31:f0:be:2c:26:53:ea:87:de:ab:1a:16:17:5b:
e8:ce:52:3f:b9:82:49:d4:f5:5e:e9:e8:09:5e:53:
42:e7:8e:16:e8:2a:b0:d4:2b:e3:6e:c9:f3:50:e9:
be:6e:7f:2a:91:7b:a1:cf:0b:89:19:db:c8:76:9e:
2e:6b:ee:af:3c:49:c0:ac:4d:42:0e:67:0a:8a:f4:
77:ab:e3:13:27:2d:cb:23:07:9d:29:2d:87:24:50:
01:b1:c8:75:6d:2f:54:68:48:43:36:a5:fa:b8:3d:
20:a9:5b:5d:2c:b8:d9:ac:27:f5:35:7f:ec:a6:5d:
2e:47:96:c3:84:13:0f:82:f7:99:d1:37:2e:7b:7d:
5b:ba:4d:b7:80:ca:1c:b6:4a:20:93:dc:cc:f9:85:
ff:9d:7e:e0:66:28:4a:13:c2:a0:ed:2d:94:73:8a:
3f:38:e6:aa:36:4d:0d:dc:49:17:f2:3f:0e:42:62:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:87:06:0D:32:9E:D3:40:D4:FD:E0:2B:D9:A1:CC:FD:71:52:FC
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fa:4f:57:8e:42:19:de:59:6e:87:65:6a:b9:5e:55:22:fd:
b8:83:25:a3:b8:98:82:26:62:18:99:10:26:f1:55:e0:dc:1c:
fd:33:71:a1:8c:3e:44:3a:c2:f3:bb:20:a3:4b:3f:c6:b6:93:
dc:d5:54:22:91:49:0d:98:ed:43:da:b1:90:c9:c4:f6:de:40:
c9:fb:01:16:2e:b1:8b:79:73:83:9e:0b:01:7c:ae:1a:2b:4a:
e1:0e:7a:12:9a:ba:91:8c:91:b6:43:65:a0:4e:d8:90:d5:2f:
3e:03:01:d5:3b:25:61:26:74:7a:66:3d:a8:5c:11:96:2a:e6:
06:db:3c:27:94:e8:26:0c:16:9a:6f:54:e1:a0:5f:8c:77:e2:
25:ce:4c:b6:23:00:ab:fa:39:6d:5f:73:a4:25:13:88:3d:a9:
5e:36:ca:a1:49:ae:bb:bd:b1:ee:e4:ca:03:47:dc:f7:c1:f7:
01:ca:64:08:be:d7:15:cc:cb:3c:b5:c9:fe:a7:5d:3e:43:a7:
dd:41:33:4c:41:b4:af:37:24:02:a2:87:31:db:a9:14:f7:d7:
ef:95:ab:bc:68:cc:ee:6b:82:3b:9d:45:f8:a8:40:9c:07:ee:
8b:a2:12:f1:3c:97:57:83:7a:86:73:f0:3b:8b:a1:69:40:99:
46:e6:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 05:55:16 2023 by rpki-client on console-ams.rpki-client.org