Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa
File: 34352e382e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /NEb2KfHmr684a9fU1vMDYZVjKXs9Jc2NQSE3KTJPaQ=
Subject key identifier: 07:8C:6C:50:F4:06:00:A0:3F:4B:CB:CC:72:27:EA:66:32:A1:FE:6D
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 058ED852E793C6BA2DBE4CBA8F35617F980868FF
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa
Signing time: Sat 13 May 2023 00:00:07 +0000
ROA not before: Fri 12 May 2023 23:55:07 +0000
ROA not after: Sat 11 May 2024 00:00:07 +0000
asID: 834
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8e:d8:52:e7:93:c6:ba:2d:be:4c:ba:8f:35:61:7f:98:08:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 12 23:55:07 2023 GMT
Not After : May 11 00:00:07 2024 GMT
Subject: CN=078C6C50F40600A03F4BCBCC7227EA6632A1FE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:fc:8c:67:6e:d0:c6:66:8d:26:b5:1d:10:
8d:89:0c:e6:5c:cd:18:0e:0b:08:b1:aa:94:f1:76:
63:d4:f5:4c:55:e5:f1:b2:b3:7a:f4:2b:d6:95:6f:
6b:0b:53:b3:82:84:5b:8d:2c:32:a9:7a:cd:95:3b:
82:74:18:b3:ef:f8:67:3f:fd:e5:ec:7c:5f:f6:32:
8d:f9:e6:6b:33:c8:5b:16:bc:5c:35:4e:0b:0c:f2:
2f:d4:87:72:1e:6a:70:2d:74:a3:cc:fa:79:d2:1a:
3b:5d:6f:6b:e3:74:44:1a:6d:12:16:25:62:15:d0:
b9:97:53:41:a0:6b:8d:20:00:79:fa:2c:4f:04:3f:
30:a7:48:4e:34:6f:a4:ee:ce:27:8e:ab:0c:c7:28:
3d:69:ec:45:fa:9e:43:87:eb:b2:70:11:d7:96:8a:
93:af:dd:59:ef:57:ca:b7:77:21:ab:b4:3b:95:f4:
87:b0:42:49:3b:2b:8d:5e:d5:9f:11:9c:3e:33:0d:
ff:0b:d0:eb:08:b9:20:82:b5:d6:f5:d2:15:77:57:
d1:f7:cb:6d:66:7a:b3:e2:a7:48:c7:a3:61:34:70:
66:57:e3:3f:ed:32:4d:b5:54:38:54:07:ba:ce:ce:
61:a5:f0:87:d1:c9:50:dc:e6:8c:d1:5e:68:fe:d1:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:6C:50:F4:06:00:A0:3F:4B:CB:CC:72:27:EA:66:32:A1:FE:6D
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:12:ae:01:3b:b6:7e:c8:71:a4:c0:d7:ff:c1:7b:c2:b2:94:
f5:08:b0:c6:be:51:9d:b4:90:eb:2e:00:1e:1d:6a:f9:58:55:
39:1c:12:94:10:e4:c8:31:63:b8:f4:c0:9e:2f:a9:3a:b6:9c:
c2:01:ca:f3:df:19:e5:d4:dc:98:e7:6f:65:b8:7b:12:9b:ce:
c2:0b:79:3c:5e:a6:c8:41:49:83:c8:9d:29:93:e5:26:ea:7f:
c6:11:d8:18:37:67:42:ea:34:84:51:61:d6:a6:79:a3:24:9a:
ed:86:e8:f4:27:ef:84:04:88:35:74:9a:14:a4:48:7f:e2:f4:
7e:ae:82:ce:f0:bf:e8:2d:5d:3d:26:91:b5:30:2b:c3:d9:e0:
d8:a1:54:c8:f7:2e:fa:d0:84:f2:76:6d:ff:17:3b:60:ef:72:
8c:18:d7:b4:8a:55:9e:4a:28:60:f2:26:02:21:b8:2c:2a:d9:
db:68:5b:c5:f2:6f:ed:5a:dc:d6:b5:99:b3:59:9b:be:d4:c4:
37:6a:9e:b8:5a:ba:8a:95:25:ff:9f:36:3e:bb:ec:5d:c9:93:
85:83:1e:e3:5a:bb:a3:6b:fe:71:2d:b8:3c:7e:23:e2:58:14:
59:ae:92:40:c8:99:eb:85:fa:d1:fc:26:be:06:e9:3f:0c:44:
1b:42:58:fc
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUBY7YUueTxrotvky6jzVhf5gIaP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yMzA1MTIyMzU1MDdaFw0yNDA1MTEwMDAwMDdaMDMxMTAvBgNV
BAMTKDA3OEM2QzUwRjQwNjAwQTAzRjRCQ0JDQzcyMjdFQTY2MzJBMUZFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsPyMZ27QxmaNJrUdEI2JDOZc
zRgOCwixqpTxdmPU9UxV5fGys3r0K9aVb2sLU7OChFuNLDKpes2VO4J0GLPv+Gc/
/eXsfF/2Mo355mszyFsWvFw1TgsM8i/Uh3IeanAtdKPM+nnSGjtdb2vjdEQabRIW
JWIV0LmXU0Gga40gAHn6LE8EPzCnSE40b6TuzieOqwzHKD1p7EX6nkOH67JwEdeW
ipOv3VnvV8q3dyGrtDuV9IewQkk7K41e1Z8RnD4zDf8L0OsIuSCCtdb10hV3V9H3
y21merPip0jHo2E0cGZX4z/tMk21VDhUB7rOzmGl8IfRyVDc5ozRXmj+0azHAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUB4xsUPQGAKA/S8vMcifqZjKh/m0wHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzgyZTMyMzEzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0I2TANBgkq
hkiG9w0BAQsFAAOCAQEAjxKuATu2fshxpMDX/8F7wrKU9Qiwxr5RnbSQ6y4AHh1q
+VhVORwSlBDkyDFjuPTAni+pOracwgHK898Z5dTcmOdvZbh7EpvOwgt5PF6myEFJ
g8idKZPlJup/xhHYGDdnQuo0hFFh1qZ5oySa7Ybo9CfvhASINXSaFKRIf+L0fq6C
zvC/6C1dPSaRtTArw9ng2KFUyPcu+tCE8nZt/xc7YO9yjBjXtIpVnkooYPImAiG4
LCrZ22hbxfJv7Vrc1rWZs1mbvtTEN2qeuFq6ipUl/582PrvsXcmThYMe41q7o2v+
cS24PH4j4lgUWa6SQMiZ64X60fwmvgbpPwxEG0JY/A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:11 2023 by rpki-client on console.sobornost.net