Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20323037333236.roa
File: 34362e3138332e32352e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier: ASbXx22zIADf4nGsZk687BJqVASZJe+gxoMI31ktJT8=
Subject key identifier: 62:48:94:C2:24:96:AD:D7:E0:EE:EB:79:9F:4A:72:6B:D6:8A:F1:E1
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 126CAA4B1A3B4724EF30D5CA61C07D9D2D7690FD
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20323037333236.roa
Signing time: Mon 11 Dec 2023 07:51:10 +0000
ROA not before: Mon 11 Dec 2023 07:46:10 +0000
ROA not after: Mon 09 Dec 2024 07:51:10 +0000
asID: 207326
IP address blocks: 46.183.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6c:aa:4b:1a:3b:47:24:ef:30:d5:ca:61:c0:7d:9d:2d:76:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Dec 11 07:46:10 2023 GMT
Not After : Dec 9 07:51:10 2024 GMT
Subject: CN=624894C22496ADD7E0EEEB799F4A726BD68AF1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:b1:76:65:28:50:18:95:c5:11:2f:3d:5a:
67:7d:5b:58:29:38:9f:e6:14:10:f5:ce:40:64:88:
29:7b:da:40:1f:50:73:d0:0e:65:06:11:2c:e2:d1:
d9:9a:a2:c5:f9:05:fa:21:a8:59:1a:b5:18:74:5f:
a9:df:d3:f0:5d:ac:b5:24:f0:40:05:98:7f:05:5d:
17:41:22:5b:06:2d:ab:6a:d9:f8:4b:3f:fb:94:b5:
00:dc:0a:fd:32:c8:3c:33:ff:f9:59:9d:c8:38:99:
d3:fa:65:2f:fe:fa:8a:fd:13:1b:dc:4f:6b:1e:8f:
e0:70:60:0c:a9:74:e5:a4:d5:ab:f8:9e:6a:92:de:
02:29:ff:88:34:03:79:18:bc:46:6c:b0:12:2e:d5:
5a:e8:40:68:ee:67:87:a2:a6:01:81:fd:e3:a8:05:
c0:25:70:79:0e:18:bb:1d:1f:a2:0a:e6:ec:33:5c:
c2:e3:f7:e5:7b:63:0f:10:ad:74:7e:b1:e8:e7:f5:
93:e2:7d:00:4a:f1:23:48:d5:49:74:9d:f8:29:6d:
84:fb:ec:b9:6f:47:26:1b:77:91:77:2f:29:a7:e9:
c9:89:26:97:19:40:07:73:dc:c3:02:4b:3a:89:55:
bd:c1:f5:0f:2b:05:61:53:80:78:66:5d:c0:0c:0e:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:94:C2:24:96:AD:D7:E0:EE:EB:79:9F:4A:72:6B:D6:8A:F1:E1
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20323037333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.25.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fc:f2:c6:29:48:99:c0:44:a2:b2:25:1c:6b:59:3a:6f:52:
35:69:29:54:9f:11:fa:8c:4b:74:4b:0f:d8:c5:ce:16:ea:c5:
ce:92:7d:5a:15:65:9a:00:e5:ce:18:0c:77:a2:19:a8:72:5c:
aa:99:e7:8f:c0:40:07:71:6b:17:9d:8b:d4:d4:4d:3e:e6:69:
0e:69:0a:1b:f9:b1:ce:cf:9d:59:a1:f3:ee:c6:4c:ac:13:e7:
22:e5:6a:2b:55:13:8e:f1:c1:f2:3a:e6:88:01:72:12:da:b5:
84:41:05:d6:be:c7:20:59:b8:a3:1d:cc:49:52:b8:0d:4b:bc:
7a:e6:1d:d9:1b:db:ef:18:dd:6b:23:13:bd:5a:0c:c7:de:56:
b2:61:35:9e:b5:6d:c4:f0:ed:fc:de:9b:81:87:d5:c1:d5:48:
03:f9:b3:d0:37:c0:d0:37:62:fe:aa:84:7a:21:3b:0f:60:9b:
52:44:64:42:a1:33:46:2e:46:f0:13:bf:9d:4a:d2:19:37:95:
1e:75:be:70:09:b4:8e:31:9f:90:d8:e3:bd:76:9b:4b:18:2a:
a0:52:dc:04:93:d0:27:10:25:e2:e7:f2:5d:fd:c2:4d:95:09:
79:bf:5f:6f:cd:37:a9:b7:ba:5c:e6:e3:76:62:b3:0c:31:54:
23:0a:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org