Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323135323837.roa
File: 34362e3138332e32342e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: OQK7DXjrvsbYLsDYsSe2SPA4Kiw9a5NkEMU6ng8Zpao=
Subject key identifier: D6:CC:CA:04:32:BB:C5:9B:A4:69:2D:03:A7:26:36:A5:A5:03:DC:15
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 54C4B5AE574B192BDAB47788561BDAC0E3674C6C
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 22 May 2024 13:56:41 +0000
ROA not before: Wed 22 May 2024 13:51:41 +0000
ROA not after: Wed 21 May 2025 13:56:41 +0000
asID: 215287
IP address blocks: 46.183.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 17:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c4:b5:ae:57:4b:19:2b:da:b4:77:88:56:1b:da:c0:e3:67:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: May 22 13:51:41 2024 GMT
Not After : May 21 13:56:41 2025 GMT
Subject: CN=D6CCCA0432BBC59BA4692D03A72636A5A503DC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:a3:27:e3:5c:e1:56:08:5b:03:22:09:e7:
c9:51:c2:a7:a8:25:3a:15:0e:c9:4f:63:6f:01:31:
aa:30:03:f2:93:69:32:15:90:99:02:2b:e3:bb:25:
86:86:f9:35:f6:cd:f6:ac:24:a6:bc:70:c3:52:b3:
dd:fb:2d:fb:79:57:64:64:94:22:48:30:de:b6:7a:
ea:f6:08:7b:4a:4c:59:ed:b5:c5:cb:b8:27:80:c3:
94:ff:8f:76:30:81:6c:0e:2c:d2:2c:4e:f6:21:ba:
ee:7d:75:ab:30:cc:75:4d:e8:e8:31:7a:1b:e8:8e:
d1:b3:10:a9:b2:36:f6:c4:88:30:3c:89:e8:94:11:
75:19:5a:00:8c:2f:9e:e5:cf:b5:f6:ba:a4:81:71:
05:0a:f7:ce:f9:33:01:9d:b4:21:c4:d9:ca:3e:83:
f8:8d:b0:97:27:03:11:b1:35:16:5f:20:ee:1b:0a:
8a:45:f8:83:5c:04:5d:cd:03:b5:4f:c8:ac:b5:5a:
ba:49:e9:e5:a1:dd:f5:3c:90:81:fe:92:f6:b9:57:
5a:bc:76:5d:03:dc:aa:88:ce:96:bd:22:ad:e8:38:
24:9e:17:f7:d8:0c:06:cb:25:c8:08:37:91:70:91:
82:96:49:85:3a:2f:3d:0f:d1:6a:fc:8b:5b:45:bd:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:CA:04:32:BB:C5:9B:A4:69:2D:03:A7:26:36:A5:A5:03:DC:15
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a3:9e:75:d1:b4:d2:e9:47:59:6f:b5:31:7f:fe:d4:df:68:
35:64:91:82:a8:91:d5:0a:a6:7b:8c:de:30:73:fa:14:85:a2:
ac:58:79:b3:b5:d5:1e:94:cf:ca:23:51:0d:88:4f:a3:a8:29:
af:10:ef:f6:66:69:0a:2a:59:b1:cc:32:6d:ae:24:b2:3e:ff:
88:13:41:e3:cc:f0:d1:f5:f9:ea:5a:db:03:25:a5:40:98:00:
b0:96:92:d3:9c:b4:08:4e:74:3a:48:a9:ba:e5:ec:fd:65:c0:
49:c1:22:26:bd:b2:0c:eb:49:e5:65:cc:94:f3:33:2b:a2:62:
eb:6c:30:d7:7a:61:15:cb:f0:0a:f4:ab:d3:86:c0:95:ec:f5:
d8:5d:2f:e2:58:d9:2b:da:d8:4d:29:92:38:a3:cf:b3:68:e6:
18:9f:74:1a:47:e1:a7:6c:00:4d:b1:e1:a1:22:33:1f:7d:94:
6e:e0:0f:5a:b4:63:6f:30:2b:45:b9:5b:d8:96:3f:7f:0e:87:
e8:6f:d1:03:49:38:63:2f:16:df:6f:0e:89:1f:87:53:62:b3:
c5:49:fa:dc:7e:c8:db:15:fa:5c:9d:11:6b:fa:9b:40:b0:28:
64:3a:7c:d0:4a:3e:7e:51:22:f7:05:d5:f1:c8:b4:e4:7c:50:
59:79:87:3e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVMS1rldLGSvatHeIVhvawONnTGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNDA1MjIxMzUxNDFaFw0yNTA1MjExMzU2NDFaMDMxMTAvBgNV
BAMTKEQ2Q0NDQTA0MzJCQkM1OUJBNDY5MkQwM0E3MjYzNkE1QTUwM0RDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IaMn41zhVghbAyIJ58lRwqeo
JToVDslPY28BMaowA/KTaTIVkJkCK+O7JYaG+TX2zfasJKa8cMNSs937Lft5V2Rk
lCJIMN62eur2CHtKTFnttcXLuCeAw5T/j3YwgWwOLNIsTvYhuu59daswzHVN6Ogx
ehvojtGzEKmyNvbEiDA8ieiUEXUZWgCML57lz7X2uqSBcQUK9875MwGdtCHE2co+
g/iNsJcnAxGxNRZfIO4bCopF+INcBF3NA7VPyKy1WrpJ6eWh3fU8kIH+kva5V1q8
dl0D3KqIzpa9Iq3oOCSeF/fYDAbLJcgIN5FwkYKWSYU6Lz0P0Wr8i1tFvfFFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1szKBDK7xZukaS0DpyY2paUD3BUwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzIzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LrcYMA0GCSqGSIb3DQEBCwUAA4IBAQB9o5510bTS6UdZb7Uxf/7U32g1ZJGCqJHV
CqZ7jN4wc/oUhaKsWHmztdUelM/KI1ENiE+jqCmvEO/2ZmkKKlmxzDJtriSyPv+I
E0HjzPDR9fnqWtsDJaVAmACwlpLTnLQITnQ6SKm65ez9ZcBJwSImvbIM60nlZcyU
8zMromLrbDDXemEVy/AK9KvThsCV7PXYXS/iWNkr2thNKZI4o8+zaOYYn3QaR+Gn
bABNseGhIjMffZRu4A9atGNvMCtFuVvYlj9/Dofob9EDSThjLxbfbw6JH4dTYrPF
SfrcfsjbFfpcnRFr+ptAsChkOnzQSj5+USL3BdXxyLTkfFBZeYc+
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:23 2025 by rpki-client