Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20383334.roa
File: 34362e3138332e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: k1mvdlajOFnJAhnGx9yP43LVWXTE7Wc5KL7vYPpfoyg=
Subject key identifier: 25:3A:E3:A7:CE:34:8B:C3:63:6E:3C:9C:FD:6E:6B:F7:CC:F7:55:0D
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 2D1E2A99C96F7C066D3A3EF2C131058211C47484
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:37:01 +0000
ROA not before: Thu 14 Mar 2024 07:32:01 +0000
ROA not after: Thu 13 Mar 2025 07:37:01 +0000
asID: 834
IP address blocks: 46.183.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1e:2a:99:c9:6f:7c:06:6d:3a:3e:f2:c1:31:05:82:11:c4:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Mar 14 07:32:01 2024 GMT
Not After : Mar 13 07:37:01 2025 GMT
Subject: CN=253AE3A7CE348BC3636E3C9CFD6E6BF7CCF7550D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:e4:b1:8e:7c:14:ab:e1:d7:1e:7f:92:3e:
21:91:4e:e1:c8:7f:8d:20:51:b5:64:b3:df:dd:bb:
bf:e7:fb:7a:08:25:3f:ec:2b:3d:02:5f:e2:c5:8b:
8f:22:69:fd:97:62:d8:21:bf:fa:8f:9b:05:42:2f:
13:36:2b:74:6a:a6:93:fe:f0:a0:1d:d8:21:47:84:
07:7c:d9:40:34:be:94:56:f9:4c:fe:cf:b2:77:ab:
eb:ae:14:12:5d:8a:18:12:c4:0a:5c:ed:4e:a8:34:
e3:5a:ba:11:e2:04:5d:de:28:b8:e7:cf:5e:60:48:
a3:8d:46:fe:d4:80:b1:4c:8f:9c:ce:ee:b6:65:63:
d1:85:0b:a8:b0:cb:be:c0:7f:3d:64:41:e4:b7:a1:
74:54:92:79:af:04:5a:47:49:c6:bc:d6:88:82:10:
3f:cc:3b:ee:a8:34:72:1e:e8:27:d9:1f:75:fc:ed:
4c:2e:74:3c:89:43:ab:a5:f6:86:f3:70:9a:d0:92:
4d:f0:7e:33:cc:9c:72:3b:de:34:22:99:b4:66:9c:
ce:53:be:0c:e6:09:23:79:70:c5:7b:1b:ca:19:de:
e1:a7:ac:24:ea:a2:9e:6c:b8:f9:e8:51:85:89:b5:
dc:42:66:e7:11:ea:00:d1:85:d9:dc:b5:6d:72:ec:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:E3:A7:CE:34:8B:C3:63:6E:3C:9C:FD:6E:6B:F7:CC:F7:55:0D
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.25.0/24
Signature Algorithm: sha256WithRSAEncryption
06:34:06:8f:5e:8e:b5:1f:43:2f:cc:04:78:6f:72:8d:c7:f6:
ed:67:b4:70:77:90:82:f5:d1:d4:80:48:65:18:1e:f1:7f:db:
a3:34:25:57:7d:4f:ad:a4:51:89:6c:1a:53:1a:70:68:9c:69:
d5:95:eb:bb:ea:22:f6:02:34:ad:5d:d3:4c:2c:15:2b:f8:f5:
89:85:94:14:ea:05:5c:b1:18:b9:ff:f5:61:35:16:ff:3d:40:
bd:ad:ae:18:30:fc:ba:33:7f:0f:b5:8b:2a:b4:8a:e2:d2:b0:
7d:9f:ea:fa:bd:85:75:a2:3a:67:e2:cf:7d:a7:79:12:9e:d9:
79:37:cd:6a:bb:79:91:3c:94:b8:ab:35:c1:3d:7f:38:4c:1f:
c4:22:e7:b0:94:ea:dc:c3:ab:fe:4f:78:2f:7c:41:46:28:1b:
9b:de:b0:9a:0b:f8:ce:88:4b:69:39:e1:df:20:25:4a:41:5b:
03:ce:f0:70:7d:c9:f8:95:87:14:50:88:da:e9:e9:ae:10:2a:
9e:ed:5d:7d:98:e6:a5:d9:b5:fb:c3:c1:6d:34:84:8a:fa:ba:
48:57:74:28:7d:72:47:96:37:ea:07:80:a2:76:a7:13:59:e9:
18:d7:ef:d6:53:a7:37:45:d7:cc:d7:fd:26:ae:d4:5d:cd:eb:
cd:e2:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org