Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203432303535.roa
File: 34362e3138332e32372e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: ikDWj9NsBPxtNk1a+Yp93+NKdXPc0NUiDBjB5Mi54EQ=
Subject key identifier: 9F:3D:0C:2C:78:1F:E7:EE:73:12:10:7B:65:13:DE:2D:76:15:80:2D
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 53A4C685F742DCB773D48C94791BFF3408B4B5F3
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203432303535.roa
Signing time: Tue 03 Oct 2023 17:49:04 +0000
ROA not before: Tue 03 Oct 2023 17:44:04 +0000
ROA not after: Tue 01 Oct 2024 17:49:04 +0000
asID: 42055
IP address blocks: 46.183.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 08:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a4:c6:85:f7:42:dc:b7:73:d4:8c:94:79:1b:ff:34:08:b4:b5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Oct 3 17:44:04 2023 GMT
Not After : Oct 1 17:49:04 2024 GMT
Subject: CN=9F3D0C2C781FE7EE7312107B6513DE2D7615802D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:b2:70:92:bd:27:b0:e5:26:d1:70:cd:63:
be:cc:e4:c2:f1:d0:b9:37:04:d3:68:51:91:e3:26:
1d:fc:3f:17:4d:ff:35:22:80:6e:e1:f9:42:00:89:
17:1b:da:37:17:32:60:f5:41:a8:97:a5:88:50:13:
e6:2b:dc:ac:9e:9c:2a:13:14:74:66:92:f3:ee:2d:
3c:d6:39:0b:38:2d:77:22:73:36:de:0d:44:52:14:
da:be:c7:a2:e8:a7:59:4f:a4:01:8a:29:37:c8:ea:
c8:38:cc:b7:f6:98:a3:f3:27:b5:f4:92:b1:67:2a:
99:1e:f1:9c:16:75:a3:22:c1:c7:56:f1:13:bc:68:
8a:43:c7:3d:4d:a2:c6:77:ab:6f:d4:63:ab:bf:d3:
15:e0:b7:53:6f:6c:77:0a:dd:9d:92:7d:63:df:27:
ea:d8:99:12:4d:df:07:e7:6d:82:53:c2:0d:43:95:
ee:2b:f6:db:77:83:af:7c:15:a1:1d:1f:2a:93:d5:
83:72:b7:fe:7e:d2:da:e2:3c:d9:28:36:55:39:b0:
d0:30:70:ff:b0:e5:1a:93:b5:3c:06:34:16:e7:78:
f4:89:33:3f:a5:c9:b4:dd:17:72:b0:35:3b:90:fd:
95:77:92:c6:69:a2:9e:0d:6b:a8:f4:40:cc:0f:9d:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:0C:2C:78:1F:E7:EE:73:12:10:7B:65:13:DE:2D:76:15:80:2D
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:59:aa:97:1f:8d:73:3b:94:a7:6b:91:9a:fc:7b:b0:5c:fa:
aa:bb:93:49:66:14:e8:d8:cc:f8:09:57:3c:fc:3a:86:10:7e:
8f:f7:d3:8f:31:3a:82:37:03:3c:df:2c:cc:84:70:af:34:27:
9e:52:e0:9b:0a:c6:11:fc:dc:d4:72:63:e4:6f:62:37:e9:2e:
ff:f8:7a:83:f9:ea:18:39:a6:b4:80:97:c9:7c:6f:6e:26:29:
e1:0c:00:65:e0:73:53:cc:2e:ac:a7:af:7f:5a:ca:ef:46:f1:
c1:9e:e1:14:25:c7:83:c2:4a:89:b7:91:64:05:59:91:0a:19:
ec:4f:f6:1f:98:83:58:be:09:fb:bc:0a:dc:ff:84:20:0f:10:
91:25:72:28:b9:ad:c8:8b:3e:91:52:f1:17:ae:c3:3e:90:b3:
df:a9:74:b8:55:b0:33:bc:64:05:3d:f3:28:62:f5:ce:02:ca:
5f:1a:18:d7:1a:dc:3d:0f:a8:30:62:7c:1e:a1:c6:13:03:ac:
86:84:bb:54:81:39:8b:8c:3d:4c:ee:eb:ce:42:08:28:48:08:
64:91:9b:42:7c:45:e9:13:73:7f:d9:e8:22:38:86:32:80:8a:
ab:94:09:94:b7:1f:2f:f5:a8:bd:fc:33:ab:e8:b0:35:af:a8:
07:4d:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org