Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203231383539.roa
File: 34362e3138332e32372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: lSFtHMg4Reu+BKxBfWThsSFPfgo71OIzUotviaQsA/Y=
Subject key identifier: 35:AC:0D:9F:D4:E4:31:C8:A2:DC:23:15:DC:9C:F0:74:2F:72:82:18
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 4AC7B1888987F477BEACB08827F335684E174A7E
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:28:16 +0000
ROA not before: Wed 31 Jan 2024 10:23:16 +0000
ROA not after: Wed 29 Jan 2025 10:28:16 +0000
asID: 21859
IP address blocks: 46.183.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c7:b1:88:89:87:f4:77:be:ac:b0:88:27:f3:35:68:4e:17:4a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jan 31 10:23:16 2024 GMT
Not After : Jan 29 10:28:16 2025 GMT
Subject: CN=35AC0D9FD4E431C8A2DC2315DC9CF0742F728218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:31:8e:e5:34:79:26:dc:79:39:ec:07:67:
bd:63:41:8c:82:a9:18:d1:c8:3a:a0:87:6e:8a:5c:
33:c8:b0:0c:71:3b:2d:3a:94:59:1a:41:d9:2a:61:
6b:e4:b9:b6:f4:1f:bd:bd:fe:4f:3c:4d:52:31:06:
18:e1:ca:a7:f8:98:41:9b:c4:f3:8e:05:5a:54:50:
c1:a8:3b:42:4c:be:68:13:44:b7:0d:d7:ba:81:85:
72:a8:b9:d9:41:35:78:ed:0e:70:69:20:d5:ff:95:
ef:f9:e1:d7:76:46:b6:ee:36:a6:26:d7:c7:69:30:
02:2f:cc:b5:63:2b:99:f6:b8:7c:8e:92:35:7d:c2:
e7:30:b0:ad:02:a7:19:70:91:5f:7c:ae:88:d5:c6:
0e:e7:dc:01:b4:20:a8:51:50:e1:1f:9f:8a:dc:61:
a9:6e:70:7f:35:f6:c7:2d:97:7d:16:49:66:52:b0:
03:96:5c:54:74:a4:ae:87:0f:dc:c1:a6:85:3b:76:
e9:18:f4:85:67:ed:f2:f2:c9:f1:04:3b:45:cb:0c:
1d:31:ca:48:8d:2f:cd:fd:4a:c1:9f:2c:16:dd:6a:
dc:ef:8f:18:8b:5b:31:9f:ba:f3:91:43:f4:3a:47:
8c:69:60:97:3e:88:c9:4b:ac:26:8c:9a:71:4b:23:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:0D:9F:D4:E4:31:C8:A2:DC:23:15:DC:9C:F0:74:2F:72:82:18
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:fa:37:1d:88:97:c1:11:26:af:23:cc:38:75:82:36:1e:
35:60:1e:77:2d:7a:b3:d9:22:0d:c0:cd:7b:b9:f7:ae:16:6c:
ca:57:7f:00:03:0d:2a:bf:4d:98:37:38:ae:c3:d3:25:48:4b:
76:d5:b9:22:c7:c1:d6:29:36:a2:ec:b8:d1:54:05:32:81:08:
bc:4b:67:02:dd:b2:14:88:f5:b4:9c:dc:eb:94:47:7a:d4:74:
78:ba:01:cd:6b:89:6e:de:c1:c6:2f:55:2a:19:7b:0d:ca:72:
54:05:74:a5:f9:6a:dd:c9:5a:0a:96:e4:1c:c1:48:30:b5:84:
8b:45:39:8c:7f:50:05:6c:e7:7b:19:82:91:91:02:4d:d2:ad:
17:32:df:d6:66:ae:41:08:6a:8f:27:46:4e:af:6e:8b:32:3a:
29:17:f4:6b:0a:09:fc:74:b2:b3:b0:51:62:16:2e:f3:22:c0:
c2:a2:69:89:84:78:be:91:f1:11:c9:1c:1d:55:d0:82:86:e9:
2f:e9:3e:55:93:bd:ba:57:a4:01:32:17:ef:56:17:78:4b:76:
58:af:38:f3:82:2c:2b:45:78:05:a0:99:61:eb:f6:b0:93:d4:
c6:d4:e6:3d:6d:15:ee:6c:fa:2e:ff:d1:ab:4e:e5:d3:cf:af:
eb:c0:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org