Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
File: 34352e38392e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: JSmtuaDNCSqq4imwGpJTuKSlxm1SgiUSvzrzSfXjeFo=
Subject key identifier: D5:08:D6:52:C0:4A:B4:64:80:51:C4:63:68:7C:F6:6C:DC:86:E5:B4
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1183C7DA5BDE7812880C7DBCA0538D7C773615B6
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
Signing time: Thu 12 Oct 2023 00:00:10 +0000
ROA not before: Wed 11 Oct 2023 23:55:10 +0000
ROA not after: Thu 10 Oct 2024 00:00:10 +0000
asID: 834
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:83:c7:da:5b:de:78:12:88:0c:7d:bc:a0:53:8d:7c:77:36:15:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 11 23:55:10 2023 GMT
Not After : Oct 10 00:00:10 2024 GMT
Subject: CN=D508D652C04AB4648051C463687CF66CDC86E5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:c1:fd:b9:39:1a:c5:e9:8f:ea:84:e6:1e:
46:65:03:f7:d4:0d:c5:55:ff:b6:8d:a3:f0:8a:d8:
bc:b7:38:33:fe:cc:02:3b:e9:de:b6:19:84:44:26:
00:09:fc:27:ad:bd:dd:6a:18:a4:d1:b9:84:5b:ac:
f0:ee:8f:92:af:f2:90:59:cd:83:ca:43:55:3c:8b:
1a:23:fd:5f:c5:5b:1c:8a:e0:e9:89:21:95:7c:32:
1c:3b:d7:20:a3:67:3c:20:a0:48:7c:1e:c2:88:a9:
f8:36:4d:16:9f:18:14:8f:eb:4b:b5:22:82:9c:14:
b7:a3:67:0c:a7:8e:d3:b0:fb:5f:d6:32:2c:7b:7f:
ea:f2:45:bc:4c:0c:cc:a2:f5:68:f4:cd:3b:f5:1f:
61:1c:2e:31:8e:f1:ad:c7:a6:58:5f:71:58:91:c8:
33:79:6f:1a:6c:2e:c9:ef:7a:99:ad:fb:58:86:8c:
50:29:66:73:52:fe:9b:ee:10:93:2e:ac:63:3f:62:
94:d0:58:9f:d3:d6:25:cc:cd:dd:cd:de:d3:32:1a:
b8:8b:4d:b6:32:00:eb:f3:62:f5:9b:6c:0e:39:ee:
6a:47:e1:8f:9e:66:14:a0:1e:05:27:ab:fa:63:df:
43:c6:21:93:39:30:8c:31:ad:1f:00:b1:d4:42:c5:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:D6:52:C0:4A:B4:64:80:51:C4:63:68:7C:F6:6C:DC:86:E5:B4
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
21:f6:69:79:78:20:66:17:eb:3d:e7:2c:97:78:0c:dc:1d:25:
f3:41:8c:72:81:c2:62:46:54:e7:8f:3c:81:89:ba:f1:be:cc:
27:d6:1d:39:01:e6:41:7d:35:04:69:dc:0f:16:e9:a3:5c:ef:
14:e1:a3:5a:b4:67:8f:92:08:18:92:cf:54:e6:27:95:cc:ab:
c7:c6:5f:8c:f3:16:8e:ee:b0:b3:e5:3c:89:19:93:17:42:48:
f0:ed:cd:01:a4:28:1f:06:a0:f3:37:3b:25:f9:79:d3:45:80:
f5:c8:8b:b9:d3:03:b5:d3:78:9d:48:43:1c:5a:5c:ef:66:a9:
06:d6:89:ce:93:62:76:dc:6f:83:1d:c4:50:61:cf:65:f7:45:
ef:57:c2:26:1a:e4:67:a3:53:e2:b9:87:45:aa:44:9d:43:16:
fc:e4:e5:75:48:a9:19:c5:87:43:ce:1e:02:8b:84:3c:a6:7e:
d0:c9:e7:62:ec:df:1d:17:68:ff:62:01:88:00:83:24:6e:a5:
70:2c:c0:22:18:3c:5b:ad:6e:b5:c4:71:01:a0:b8:89:6b:19:
f1:36:95:c1:27:b0:59:f0:44:27:ec:4f:ff:8c:2a:ee:85:6f:
23:d3:b9:3b:68:24:e7:2d:29:8e:aa:58:9f:1b:8e:da:cc:be:
35:e8:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net