Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323033333633.roa
File: 34362e3138332e32342e302f32342d3234203d3e20323033333633.roa (raw, json)
Hash identifier: HOPtbGn94XyplLO1iXuGnszwtUuwiBleabCAJg4M4gw=
Subject key identifier: AD:DC:A4:DA:82:E8:40:EE:B5:6B:93:E5:63:04:99:BE:F6:3A:D5:51
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 70AE0730679CC9DCF6328BC449107FEF51980A97
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323033333633.roa
Signing time: Sat 28 Oct 2023 09:55:16 +0000
ROA not before: Sat 28 Oct 2023 09:50:16 +0000
ROA not after: Sat 26 Oct 2024 09:55:16 +0000
asID: 203363
IP address blocks: 46.183.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 13:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ae:07:30:67:9c:c9:dc:f6:32:8b:c4:49:10:7f:ef:51:98:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Oct 28 09:50:16 2023 GMT
Not After : Oct 26 09:55:16 2024 GMT
Subject: CN=ADDCA4DA82E840EEB56B93E5630499BEF63AD551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:a5:b7:a3:18:94:0a:a8:87:88:2a:b6:84:
f9:27:e3:f3:1f:6b:f1:ce:6e:f9:c8:0e:7d:73:cb:
a6:a5:72:3a:e9:ca:ee:12:e7:b7:7f:0c:e9:31:81:
26:ea:4c:04:84:86:14:7d:67:49:65:2e:0b:72:1e:
9d:36:1f:a3:1f:63:52:19:96:43:cd:1b:79:2e:65:
14:26:80:31:45:ae:67:f3:4e:87:da:7d:76:b4:67:
eb:72:56:66:cb:53:70:aa:b5:9d:bf:77:e9:4e:d3:
fd:8f:0a:ce:3c:cd:1a:77:30:be:be:73:2d:46:e3:
07:d8:e6:04:57:69:dd:cc:ef:aa:c3:1c:c2:26:c2:
e8:31:cf:c7:53:cf:21:6b:80:b5:02:86:9b:12:08:
ca:30:15:d4:01:ed:c7:6b:4f:21:6e:c7:6e:8b:9f:
05:4b:df:35:6e:8b:0c:28:5a:75:71:3c:c8:8e:78:
ac:cc:56:07:a5:e1:e5:7a:ea:1f:86:de:d9:1b:41:
08:72:b6:51:55:ec:09:14:e5:38:b5:22:0d:c7:11:
99:cc:1a:58:55:b8:39:c8:eb:74:93:73:14:6d:58:
85:e1:ed:ee:7f:56:e6:71:36:39:62:2a:5c:1b:b8:
e1:76:93:fe:eb:8e:1b:46:f7:54:0a:30:2e:36:f4:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:A4:DA:82:E8:40:EE:B5:6B:93:E5:63:04:99:BE:F6:3A:D5:51
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323033333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.24.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:70:29:20:4f:4e:ec:3a:02:19:74:07:f7:7b:6e:e5:d5:
c8:1f:52:c0:12:9e:f1:8f:09:40:4f:9b:dc:00:f6:65:82:04:
52:62:b9:a2:76:c8:ae:30:13:88:a4:94:e2:ce:64:8a:b4:b5:
49:a5:56:0f:1c:af:6c:ea:6b:c9:48:30:b8:27:52:a5:39:7e:
fd:96:e7:58:ef:7c:5c:7f:4e:ed:f9:e9:d9:7b:d6:a5:ed:2b:
2b:4b:b1:99:25:42:83:ef:40:2c:44:e8:0b:ee:71:e0:48:a4:
0e:40:d8:93:9c:f1:06:3d:47:3f:f3:0b:c3:ec:68:25:af:aa:
3c:73:a0:26:6a:ef:f1:93:7b:99:fc:1d:91:55:40:01:31:77:
05:8f:c2:6d:8e:7f:1d:ce:09:44:5c:ba:d8:95:d1:e7:25:62:
b0:9d:48:da:68:ca:69:4c:d1:49:70:4a:de:c5:ce:71:2c:1f:
fc:49:77:1e:af:98:bf:ec:16:e9:18:a6:a8:de:c8:25:a4:d9:
90:8c:32:9f:99:c8:66:cb:2e:f3:10:57:5f:e2:b2:69:a8:1d:
54:41:64:9c:fc:70:98:47:c6:f5:73:93:12:e2:ce:0b:f2:54:
8b:b0:ea:e5:c1:62:6f:d4:73:0f:96:6f:e0:23:44:e1:b7:7a:
71:cd:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org