Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e203531373635.roa
File: 34352e3134312e32312e302f32342d3234203d3e203531373635.roa (raw, json)
Hash identifier: 6/CCCInHmh67Af3khM4EacX7eteMQLVlZMtXVUEMHSc=
Subject key identifier: 61:7E:FB:FA:EB:D2:4E:8F:B8:21:D1:3E:01:09:67:30:AB:ED:EE:66
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 4ED09ACE386399CF7299E0FFF2277BD1BB967EF3
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e203531373635.roa
Signing time: Thu 25 May 2023 13:13:21 +0000
ROA not before: Thu 25 May 2023 13:08:21 +0000
ROA not after: Thu 23 May 2024 13:13:21 +0000
asID: 51765
IP address blocks: 45.141.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d0:9a:ce:38:63:99:cf:72:99:e0:ff:f2:27:7b:d1:bb:96:7e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: May 25 13:08:21 2023 GMT
Not After : May 23 13:13:21 2024 GMT
Subject: CN=617EFBFAEBD24E8FB821D13E01096730ABEDEE66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:fb:98:19:b3:2a:d6:83:5b:b4:bd:4f:30:
0d:7a:d5:3f:f5:af:00:1d:7b:d7:0f:d0:af:4b:05:
0e:9d:cf:cf:d5:c0:6e:f2:68:5b:0c:74:3f:e2:5b:
35:40:77:2c:79:43:21:64:5e:ab:18:8d:2b:ac:7a:
06:83:17:ba:58:ee:8d:9e:13:e2:22:28:5c:de:fe:
e1:a8:7d:43:a1:b2:d5:eb:64:95:57:2e:e5:7f:ad:
95:a1:4e:e6:1b:77:50:1a:77:e6:cf:7a:08:1a:af:
82:f4:73:df:f3:72:d6:b1:ad:52:9d:ce:1e:cd:f3:
37:ad:5f:f7:ab:3a:4a:90:91:5c:da:d1:5c:3e:38:
b8:4a:8f:65:65:45:4c:ba:15:15:9d:79:04:e9:c3:
2b:53:bc:57:ba:e1:56:8d:67:49:08:36:ad:f4:4b:
ac:c5:b8:61:bf:46:af:70:7f:83:a8:c3:34:54:bc:
df:0e:0c:6f:1c:89:e1:85:f6:8e:31:4b:0e:4c:f4:
65:ad:eb:80:c4:62:92:e3:0a:18:02:b7:76:b0:29:
6f:83:a8:dd:b8:c9:b6:a9:cd:fb:3f:83:2b:60:c6:
dd:c2:07:c0:32:06:f5:e0:04:f7:bb:ba:30:c8:c5:
17:c1:92:46:8b:19:3f:3c:cb:77:ee:c4:8d:c2:b9:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:FB:FA:EB:D2:4E:8F:B8:21:D1:3E:01:09:67:30:AB:ED:EE:66
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32312e302f32342d3234203d3e203531373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f9:63:43:aa:dd:2a:5e:b4:9b:c0:0e:76:48:d3:18:ca:8b:
02:98:1e:8e:f1:49:ef:9a:c6:61:53:05:a0:9b:61:73:cb:1d:
bc:a7:48:3c:3c:9c:4d:8d:d3:82:f3:92:ef:23:4b:d1:c6:6a:
27:e0:04:c0:c8:ad:71:fb:12:d3:03:42:98:27:d5:76:0f:63:
08:c9:e5:d4:c5:fc:72:30:6a:46:96:0b:88:5a:e1:3e:61:06:
de:bf:db:19:ee:e3:78:59:6f:34:ff:dd:97:1c:59:dd:b1:e6:
a2:a6:ec:ae:35:2c:bf:f0:f5:a0:64:3e:80:98:88:fb:b4:b1:
38:04:0b:fa:92:cf:5a:e9:19:81:8c:a1:45:49:ae:4d:ac:3f:
b6:2e:79:72:bb:d5:79:85:54:f4:9b:36:3a:2c:bf:a3:00:5f:
09:95:c8:9f:8d:67:5b:d4:90:1b:c1:38:c8:d6:33:50:f7:1a:
bc:ec:6c:1a:22:59:c3:41:60:78:ab:40:23:67:1b:61:c8:e7:
f1:5f:7e:ad:b6:3a:06:2c:7f:fc:ef:93:f3:93:e5:56:d4:25:
9e:ca:77:f8:95:ec:84:90:d8:1a:d6:2d:82:aa:9c:5c:8b:f4:
2b:11:12:49:42:ac:07:f5:b9:7d:46:61:11:6a:01:ff:63:30:
fd:c3:8b:42
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 19 05:46:57 2023 by rpki-client on console-fra.rpki-client.org