Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20383334.roa
File: 34362e3138332e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: eR5ZS/CBcBelZniTaG+PDrzOEqVbhG6JZvane7wbvxk=
Subject key identifier: EE:DD:A3:FD:AF:BF:A9:30:0F:7F:E1:85:75:AC:40:1C:F8:45:25:1F
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 3FED9D117689510EFFA10699863092820C197C77
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20383334.roa
Signing time: Mon 14 Aug 2023 11:30:04 +0000
ROA not before: Mon 14 Aug 2023 11:25:04 +0000
ROA not after: Mon 12 Aug 2024 11:30:04 +0000
asID: 834
IP address blocks: 46.183.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 12:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ed:9d:11:76:89:51:0e:ff:a1:06:99:86:30:92:82:0c:19:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Aug 14 11:25:04 2023 GMT
Not After : Aug 12 11:30:04 2024 GMT
Subject: CN=EEDDA3FDAFBFA9300F7FE18575AC401CF845251F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:ed:e2:e8:e2:82:47:b1:79:97:30:8e:8e:
13:ae:d3:00:a4:63:cf:19:9b:b1:24:4d:fc:cc:68:
f2:8d:e3:f4:32:75:40:04:af:ac:b5:35:cb:99:3e:
76:f0:bc:37:0a:f2:d3:44:60:a1:70:94:e0:6f:17:
27:bf:ed:5b:a0:1c:dc:19:84:6e:25:cd:06:c3:80:
fd:53:1d:07:ac:c0:76:f2:db:42:50:02:16:b2:02:
60:05:d6:e0:49:e4:42:ef:f8:eb:4c:82:2e:c2:3e:
3e:81:54:fa:ed:1e:59:1d:ee:6f:98:33:2b:4a:64:
a1:10:da:db:b6:fd:d5:7c:7a:da:67:ed:2f:b5:d3:
67:b0:fb:15:55:cb:c3:cc:87:4d:f6:a3:0f:a5:c7:
7f:4d:7d:06:f4:48:bb:21:70:12:32:2d:e5:e1:52:
04:bf:ee:3f:a1:3d:bb:8f:ae:ce:a5:36:8b:08:0e:
1f:af:6b:7c:51:31:fb:95:2a:55:84:33:c3:02:cb:
3e:63:26:87:3a:76:eb:46:d8:d2:e5:c8:d2:bf:ff:
20:16:3e:43:6c:3c:81:0d:a8:68:d3:b6:89:09:7a:
8d:21:82:f9:c4:2d:26:aa:c3:41:19:47:7c:d7:69:
8a:29:16:d2:1f:2f:3d:3a:a3:87:68:df:28:f6:82:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:A3:FD:AF:BF:A9:30:0F:7F:E1:85:75:AC:40:1C:F8:45:25:1F
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:32:7c:e0:fd:f8:cf:5b:ef:4a:4f:d8:2c:22:75:14:62:e4:
f2:49:b4:6d:46:5a:bf:1f:8b:da:18:24:1f:47:08:fb:ef:ce:
35:03:97:f8:e0:74:e0:b0:70:7a:8c:be:df:20:b6:66:6a:7e:
0b:a6:60:42:5a:83:a0:02:d4:da:e3:ba:47:27:ad:fb:8e:ad:
d4:e4:cc:e6:8b:09:ac:a0:18:20:e0:45:65:67:c1:8e:a6:f4:
1d:06:62:4f:9d:82:3c:25:d6:5d:9a:38:09:32:39:42:6b:2d:
4d:58:75:bf:2b:73:db:78:e1:df:f5:23:fe:1f:c0:d3:6d:1e:
7b:c4:dd:3f:39:08:d7:04:9c:1e:4b:ad:b0:b3:2e:67:f8:b2:
ca:35:16:e6:a7:b4:a7:b6:dd:12:2b:45:09:0b:29:84:1b:28:
c5:51:ab:2a:ab:91:80:f1:a6:63:61:86:54:ca:f4:72:57:98:
92:7e:c6:85:69:eb:6a:c9:d5:00:4c:5d:51:c5:17:cd:7c:77:
cf:26:40:1d:88:1a:9d:55:8b:7d:65:38:a1:c1:87:89:ee:bb:
97:11:2d:11:9f:a8:37:b0:55:fd:c9:8b:31:0d:06:22:9a:1b:
25:3e:7d:5f:88:fa:b6:40:a1:b2:c9:57:2c:79:a3:92:32:08:
93:b2:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org