Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20323133323537.roa
File: 34362e3138332e32342e302f32322d3234203d3e20323133323537.roa (raw, json)
Hash identifier: 9TvE2xxqFAG9yORXQ6MqvTJwy1OkYB7JHCeyuXuiQ1Q=
Subject key identifier: 1C:F2:13:78:B3:D0:3F:E8:B1:1D:E6:EB:DD:5E:6A:2B:D3:8B:1B:0E
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 5758398B5FCA35702C7AD8105A47F1DE984A5862
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20323133323537.roa
Signing time: Fri 21 Jul 2023 07:07:05 +0000
ROA not before: Fri 21 Jul 2023 07:02:05 +0000
ROA not after: Fri 19 Jul 2024 07:07:05 +0000
asID: 213257
IP address blocks: 46.183.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 11:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:58:39:8b:5f:ca:35:70:2c:7a:d8:10:5a:47:f1:de:98:4a:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jul 21 07:02:05 2023 GMT
Not After : Jul 19 07:07:05 2024 GMT
Subject: CN=1CF21378B3D03FE8B11DE6EBDD5E6A2BD38B1B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:96:79:d8:c8:37:5e:88:e1:8e:65:96:b4:
ba:02:df:fd:28:21:e0:d4:e3:da:ce:47:57:66:7b:
86:c3:f1:62:d1:c9:e5:41:5b:18:9e:a0:bf:9f:c9:
6e:aa:93:e4:af:1b:3f:63:7a:96:d6:0a:2a:44:14:
6c:cf:40:58:63:b3:aa:d0:42:32:94:bb:56:ad:42:
1b:05:23:0d:87:2a:ce:9b:cc:ca:4f:e0:dd:9f:81:
f6:8a:28:37:5f:3a:06:51:b2:19:f7:40:15:93:64:
d8:29:97:ad:47:f8:7b:ec:d6:08:06:e2:6c:6e:a5:
1b:c6:13:b9:78:d0:a5:b6:61:3c:a4:09:91:4f:a1:
3f:59:36:29:aa:a1:be:ee:32:ff:8c:88:93:86:6b:
a0:f0:81:26:7c:90:38:9b:d3:9e:3d:d2:0d:2f:9b:
2a:a5:7b:f5:d3:5d:d8:b2:0d:94:d5:1b:fb:90:c5:
6c:76:80:81:d7:ba:87:34:72:06:74:44:c5:39:99:
d0:cc:b0:bd:b1:19:11:29:fc:a5:b1:ca:da:4b:cb:
38:11:cd:e3:1a:24:9b:92:9e:d2:c8:f0:a8:3c:06:
8c:6f:7d:18:58:d4:d1:ea:22:9b:32:50:dd:99:f4:
8a:56:4b:e2:ad:26:7d:c8:dc:75:72:ac:b5:eb:63:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:13:78:B3:D0:3F:E8:B1:1D:E6:EB:DD:5E:6A:2B:D3:8B:1B:0E
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20323133323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.24.0/22
Signature Algorithm: sha256WithRSAEncryption
04:cf:a2:bb:71:ae:b0:6e:a4:68:ad:c8:78:c7:93:da:d0:af:
ed:d0:62:c9:87:89:85:e7:e0:a8:2b:70:a2:66:d3:de:ed:63:
26:76:2a:d6:55:74:c9:e2:ee:a0:ea:a8:98:e6:e6:03:c1:cc:
eb:5e:93:46:b5:e7:a1:7c:68:70:0a:2d:77:a0:e1:84:e9:3c:
59:c4:d3:74:d6:37:06:db:cb:86:14:78:18:59:4b:7e:90:6e:
bb:97:38:64:2c:ad:14:01:fb:9c:d2:8a:8d:5e:f4:69:e2:79:
fb:8b:ff:b6:47:0b:44:7d:cb:0e:a4:13:c0:7e:e9:64:f2:4c:
06:06:bb:9d:bf:a0:81:1f:64:31:b7:26:e6:4e:85:46:2b:e0:
6e:dc:b2:9e:15:44:63:cf:eb:8d:0b:75:2b:0a:cd:10:5d:8b:
07:f4:d4:0a:94:04:dd:74:85:70:ae:1b:17:f5:37:1d:39:b5:
ed:27:d0:7f:d4:ee:f9:13:3d:c9:ff:9b:53:de:87:1b:98:9f:
8c:b3:4f:e4:f6:67:24:4b:a1:c4:5c:3f:4c:9d:78:3c:08:0f:
ff:b1:4c:d0:00:dc:31:a7:36:c4:f0:63:aa:10:25:15:15:22:
76:5f:e5:ce:fb:fa:02:99:07:90:95:49:2e:f6:e4:92:95:50:
ba:c8:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org