Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
File: 34352e3134312e32302e302f32332d3234203d3e20323132333832.roa (raw, json)
Hash identifier: dEC7DeM8pFLbinibj6/4ThHr0M1jt9Qm1JibsMZZnCI=
Subject key identifier: C1:0A:03:1D:3B:FC:BA:26:0D:2A:AD:09:4C:B0:FE:B8:95:E1:87:BF
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6B9C2E6D302B9A4E6EA7A404D8EB08D82CE5648B
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
Signing time: Mon 27 Mar 2023 08:27:28 +0000
ROA not before: Mon 27 Mar 2023 08:22:28 +0000
ROA not after: Mon 25 Mar 2024 08:27:28 +0000
asID: 212382
IP address blocks: 45.141.20.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9c:2e:6d:30:2b:9a:4e:6e:a7:a4:04:d8:eb:08:d8:2c:e5:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:28 2023 GMT
Not After : Mar 25 08:27:28 2024 GMT
Subject: CN=C10A031D3BFCBA260D2AAD094CB0FEB895E187BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:eb:33:da:9b:8d:22:6d:3f:25:6d:84:a5:
33:9b:b4:35:45:a8:b3:ae:99:75:7b:c1:0f:17:8f:
48:74:b6:45:de:35:a2:91:61:ef:7e:a6:1e:c1:86:
62:45:51:f4:d4:28:23:bc:2f:e0:ab:7f:7f:88:50:
d5:57:d6:7d:d9:df:d4:bc:d4:68:9b:d8:5d:5c:96:
a6:84:f3:02:5b:41:2a:19:5e:95:6e:91:2a:cc:43:
41:80:68:7c:9e:02:2d:35:5d:d1:87:e1:11:7a:d1:
85:01:51:45:10:2f:9a:b1:63:f4:db:7b:18:75:f4:
32:6f:a0:0d:0a:21:ab:b7:2e:47:7e:24:f6:0d:dc:
0b:c2:5c:c4:e1:ba:c9:64:ea:02:29:d8:96:e1:e9:
22:e0:8d:fb:a6:2f:60:73:7d:a7:d4:8e:d2:e6:e4:
43:bd:85:df:08:75:1e:a0:23:62:e1:5f:cd:a5:28:
83:34:d8:e8:a7:1d:09:74:9c:a2:c6:24:91:13:5e:
d0:94:d0:98:d8:fd:92:68:52:37:29:bb:bd:7f:7d:
00:ee:f3:e6:9d:a9:6d:ba:22:1b:a3:af:59:84:b6:
41:09:03:50:52:ec:54:28:31:04:a0:7e:51:47:38:
a5:f8:92:c2:c0:3a:e0:81:86:16:ba:04:d0:de:0c:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:03:1D:3B:FC:BA:26:0D:2A:AD:09:4C:B0:FE:B8:95:E1:87:BF
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/23
Signature Algorithm: sha256WithRSAEncryption
05:60:ba:e8:04:f4:67:0c:23:b3:81:b5:d6:2a:46:f9:f4:1e:
89:29:d2:40:47:18:38:7a:16:10:12:be:42:10:36:09:d1:e1:
40:2c:38:33:8b:75:cb:75:8e:eb:11:08:27:05:69:1f:56:b0:
b2:a5:85:2a:d2:03:48:55:bc:83:26:b9:d6:67:ce:bc:f2:45:
13:db:a5:a0:bb:fd:ab:cc:26:dd:8a:22:3d:dd:54:13:39:8f:
fe:b6:ae:70:65:4f:d9:5f:64:4a:e2:a5:c5:fa:33:8b:88:7b:
d4:8a:d3:99:c8:5d:07:94:01:ff:6e:93:32:b7:96:8e:93:1e:
eb:e8:e1:a4:0a:c1:e7:9f:fa:d5:80:fc:53:22:ba:a2:83:70:
19:3c:d2:52:cf:a0:ee:ea:06:a0:cf:ca:15:85:da:63:cb:b8:
8c:c7:c6:29:4a:75:a9:dd:3d:f8:90:6d:dc:0d:4f:22:9a:f2:
06:76:d8:3c:c3:2d:11:ae:dd:e3:71:2b:de:79:d6:22:28:5e:
6f:1e:86:42:8c:16:c7:21:83:cc:bf:2a:e2:d9:83:dd:6e:96:
6a:f4:9f:2d:6f:0f:bc:70:d2:1d:9c:1c:a0:8c:5f:cd:1f:dd:
86:3f:49:e3:7f:3f:ad:7f:93:d0:d2:9d:1c:45:e9:3c:36:e1:
e9:8a:a4:a4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUa5wubTArmk5up6QE2OsI2CzlZIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzAzMjcwODIyMjhaFw0yNDAzMjUwODI3MjhaMDMxMTAvBgNV
BAMTKEMxMEEwMzFEM0JGQ0JBMjYwRDJBQUQwOTRDQjBGRUI4OTVFMTg3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvs+sz2puNIm0/JW2EpTObtDVF
qLOumXV7wQ8Xj0h0tkXeNaKRYe9+ph7BhmJFUfTUKCO8L+Crf3+IUNVX1n3Z39S8
1Gib2F1clqaE8wJbQSoZXpVukSrMQ0GAaHyeAi01XdGH4RF60YUBUUUQL5qxY/Tb
exh19DJvoA0KIau3Lkd+JPYN3AvCXMThuslk6gIp2Jbh6SLgjfumL2BzfafUjtLm
5EO9hd8IdR6gI2LhX82lKIM02OinHQl0nKLGJJETXtCU0JjY/ZJoUjcpu71/fQDu
8+adqW26Ihujr1mEtkEJA1BS7FQoMQSgflFHOKX4ksLAOuCBhha6BNDeDL+xAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUwQoDHTv8uiYNKq0JTLD+uJXhh78wHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzEzNDMxMmUzMjMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTMyMzMzODMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LY0UMA0GCSqGSIb3DQEBCwUAA4IBAQAFYLroBPRnDCOzgbXWKkb59B6JKdJARxg4
ehYQEr5CEDYJ0eFALDgzi3XLdY7rEQgnBWkfVrCypYUq0gNIVbyDJrnWZ8688kUT
26Wgu/2rzCbdiiI93VQTOY/+tq5wZU/ZX2RK4qXF+jOLiHvUitOZyF0HlAH/bpMy
t5aOkx7r6OGkCsHnn/rVgPxTIrqig3AZPNJSz6Du6gagz8oVhdpjy7iMx8YpSnWp
3T34kG3cDU8imvIGdtg8wy0Rrt3jcSveedYiKF5vHoZCjBbHIYPMvyri2YPdbpZq
9J8tbw+8cNIdnBygjF/NH92GP0njfz+tf5PQ0p0cRek8NuHpiqSk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org