Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e203432333636.roa
File: 34352e38302e3138342e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: VFlNmVf2Cz9c7JaoEX9kAk4sP1YRNbWX885wRD7ghQM=
Subject key identifier: BC:88:A0:8D:A5:2C:89:8D:44:51:BC:AF:4B:BF:BD:A0:74:D0:2C:F0
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 402F7EDA033257D0BB82372BF04C49333709D4EE
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:20:41 +0000
ROA not before: Mon 10 Apr 2023 08:15:41 +0000
ROA not after: Mon 08 Apr 2024 08:20:41 +0000
asID: 42366
IP address blocks: 45.80.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 21:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2f:7e:da:03:32:57:d0:bb:82:37:2b:f0:4c:49:33:37:09:d4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:15:41 2023 GMT
Not After : Apr 8 08:20:41 2024 GMT
Subject: CN=BC88A08DA52C898D4451BCAF4BBFBDA074D02CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:03:10:75:da:37:66:9b:05:db:f4:eb:66:
8f:0d:0e:5c:17:e8:ca:57:80:15:39:d8:04:7b:b7:
cb:23:00:5d:8f:a3:21:b9:76:33:b5:aa:b6:7b:16:
49:eb:a9:9e:9b:5c:a2:1d:a2:24:21:e0:55:fe:d4:
ba:ce:e3:70:d5:b0:e8:0e:fc:c4:44:19:ef:90:3f:
97:46:5a:ac:19:61:2a:12:57:9f:ae:d4:5d:20:9c:
4a:52:8a:89:33:b3:1d:62:a7:de:6d:10:6b:dd:e9:
b8:68:47:29:3b:3c:c2:b7:51:1a:6b:7b:39:13:82:
0a:19:19:ec:fb:1f:8e:c5:d4:7b:a8:f1:ab:8d:b3:
4d:0a:e2:34:15:68:95:cf:ab:36:e3:f5:87:ec:cd:
06:4d:80:4d:2f:38:75:ea:a0:1c:3e:87:c9:bc:dd:
ff:33:83:95:0b:30:c9:79:11:5b:04:db:26:a1:d2:
90:23:2b:6c:a8:21:da:40:c0:04:ff:83:f8:01:ae:
57:cf:f4:68:16:00:02:ee:90:11:d2:f9:26:f6:dd:
a8:56:be:59:97:3e:15:13:49:4c:a9:7d:7b:3f:e8:
0e:7d:ac:3d:fd:85:65:c8:09:08:d8:2f:97:ff:2b:
b6:cf:0c:1a:b2:17:a5:a2:d4:a3:98:39:68:b1:82:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:A0:8D:A5:2C:89:8D:44:51:BC:AF:4B:BF:BD:A0:74:D0:2C:F0
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:c0:7d:ea:8e:d5:6c:24:01:28:00:46:ee:33:00:21:f0:eb:
b3:92:a3:ab:57:eb:71:e4:f1:96:a9:63:44:e0:7e:ac:7c:ab:
43:3d:89:27:a1:3e:cf:f0:40:ec:f0:28:18:60:4a:ff:40:91:
e0:f3:81:29:19:c7:e9:28:b0:d4:52:fb:a2:12:0b:43:bc:d1:
06:10:e1:27:d5:f9:87:a3:2e:a2:72:c2:0a:cc:72:b5:08:f2:
e2:dc:5a:78:42:6f:95:ce:4a:d9:4a:01:a3:52:f3:d0:2b:2a:
50:b4:2e:71:96:2e:84:5c:43:17:e4:bc:cc:ba:4d:e8:56:8b:
a0:3f:2a:85:83:cd:c6:ae:5f:2c:26:14:61:23:9c:75:a6:f5:
12:bc:fd:74:b2:8c:42:31:44:de:6b:19:f4:64:49:d0:c5:7e:
36:95:97:ec:9a:dd:5f:58:4d:70:30:5a:53:5a:09:fd:3f:ef:
13:03:df:05:5a:3b:41:64:77:25:95:fc:73:d9:83:f2:62:6e:
92:09:cb:a9:63:52:a1:6e:d1:bb:9f:04:f4:df:91:50:14:78:
2d:f8:85:9c:d6:b5:69:17:8a:07:cb:37:4f:32:dc:26:87:cd:
ed:58:42:9f:de:70:21:8e:1c:c5:24:3b:66:e1:c5:c3:9d:f7:
cf:1c:1d:a0
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 2 22:24:00 2024 by rpki-client on console-fra.rpki-client.org