Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e20383334.roa
File: 34362e3138332e32382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lfOz/GdCtIGAFwLuKhTRaDRScV+/j89sO40C3bHNuPs=
Subject key identifier: 7A:DA:37:23:3C:DA:7C:7D:53:07:4A:3E:68:C0:10:CE:CF:15:6E:99
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 10D00BF7166B7E1F09EC0CB3E6CAC87A8554F17C
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Jul 2023 10:00:05 +0000
ROA not before: Sun 02 Jul 2023 09:55:05 +0000
ROA not after: Sun 30 Jun 2024 10:00:05 +0000
asID: 834
IP address blocks: 46.183.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d0:0b:f7:16:6b:7e:1f:09:ec:0c:b3:e6:ca:c8:7a:85:54:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jul 2 09:55:05 2023 GMT
Not After : Jun 30 10:00:05 2024 GMT
Subject: CN=7ADA37233CDA7C7D53074A3E68C010CECF156E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:e7:23:b9:6b:03:8e:e2:12:b6:53:3c:61:
d0:bb:be:56:1f:d6:a8:a2:76:39:f5:87:a0:ce:23:
20:fb:26:c3:18:e6:14:98:d4:47:18:65:76:b6:de:
de:3f:6d:00:0c:db:92:8b:5a:42:f6:8f:d6:7a:8a:
9b:3b:13:68:9a:f2:80:31:89:60:57:c6:8e:dd:3f:
18:7b:36:75:a5:7c:74:5b:b9:96:ac:6a:ae:b6:7c:
5c:4d:f8:92:dc:48:41:e8:83:ea:57:2b:71:c0:60:
8c:82:e6:77:ae:7b:16:3f:3c:29:b6:1e:63:f2:96:
5f:ea:26:44:a0:c0:fc:ad:e4:32:b5:6e:67:60:2c:
dd:5e:bf:77:cf:5a:51:16:57:3a:2f:62:c5:9b:47:
a5:e5:f2:16:44:1f:36:6d:2e:42:f2:8c:0c:f1:7b:
1d:b7:52:4b:73:a7:bc:95:9b:fd:57:e9:78:4f:09:
e2:cf:85:54:c8:9a:ae:d1:41:1d:52:50:8a:8f:a3:
da:82:c4:9c:33:08:bf:90:22:16:18:2b:d7:12:f0:
ba:7e:b9:26:eb:19:e7:dd:2d:01:4f:03:41:f2:e2:
17:3c:9a:11:43:0e:3c:f5:3b:2c:b2:c1:eb:74:b7:
3d:bd:6f:f2:d4:c9:c2:38:52:29:7a:67:31:ed:1c:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:37:23:3C:DA:7C:7D:53:07:4A:3E:68:C0:10:CE:CF:15:6E:99
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2d:b6:03:0e:0e:5d:5d:9c:c5:0e:22:ad:1e:ed:e8:50:91:
a1:e2:ac:42:a2:93:5e:c5:d1:84:81:73:3a:f5:6c:9c:8d:3c:
88:c9:46:19:50:40:12:86:f3:bb:58:90:19:51:22:5b:55:7f:
e2:b4:48:c6:27:ce:fb:a5:9d:b1:30:78:f3:80:43:34:17:b1:
86:98:91:5c:72:26:87:a4:16:77:1a:33:42:9e:ae:bc:50:3f:
79:7d:49:31:f5:e7:93:58:1d:cb:b1:aa:59:cf:a0:d3:2a:03:
b1:14:3b:00:b8:ce:41:fe:45:30:b2:ea:62:91:a6:58:d7:26:
a8:b8:58:f8:95:d6:84:3d:cf:ff:b2:d9:d7:a4:f9:07:31:b5:
8f:d1:ea:e8:95:20:9f:d4:c9:cc:c1:72:07:3b:55:84:d0:ce:
56:c6:07:31:9d:5b:d5:5b:ed:93:21:7a:bf:11:09:a0:d3:b0:
7d:d7:9b:f1:aa:ef:99:3c:43:22:e3:32:35:02:2e:36:b0:78:
5d:28:a1:39:40:4b:01:1e:cd:87:9d:5d:5c:c0:80:f9:4c:a7:
40:aa:9e:71:8b:54:c3:5b:4d:f9:a7:0c:e8:de:4c:3b:2e:9c:
df:ad:6f:33:41:dd:8b:1e:98:1d:cf:de:35:cd:4f:d8:61:db:
f7:fd:01:63
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUENAL9xZrfh8J7Ayz5srIeoVU8XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yMzA3MDIwOTU1MDVaFw0yNDA2MzAxMDAwMDVaMDMxMTAvBgNV
BAMTKDdBREEzNzIzM0NEQTdDN0Q1MzA3NEEzRTY4QzAxMENFQ0YxNTZFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4P+cjuWsDjuIStlM8YdC7vlYf
1qiidjn1h6DOIyD7JsMY5hSY1EcYZXa23t4/bQAM25KLWkL2j9Z6ips7E2ia8oAx
iWBXxo7dPxh7NnWlfHRbuZasaq62fFxN+JLcSEHog+pXK3HAYIyC5neuexY/PCm2
HmPyll/qJkSgwPyt5DK1bmdgLN1ev3fPWlEWVzovYsWbR6Xl8hZEHzZtLkLyjAzx
ex23Uktzp7yVm/1X6XhPCeLPhVTImq7RQR1SUIqPo9qCxJwzCL+QIhYYK9cS8Lp+
uSbrGefdLQFPA0Hy4hc8mhFDDjz1Oyyywet0tz29b/LUycI4Uil6ZzHtHHa1AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUeto3IzzafH1TB0o+aMAQzs8VbpkwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALrccMA0G
CSqGSIb3DQEBCwUAA4IBAQAsLbYDDg5dXZzFDiKtHu3oUJGh4qxCopNexdGEgXM6
9WycjTyIyUYZUEAShvO7WJAZUSJbVX/itEjGJ877pZ2xMHjzgEM0F7GGmJFcciaH
pBZ3GjNCnq68UD95fUkx9eeTWB3LsapZz6DTKgOxFDsAuM5B/kUwsupikaZY1yao
uFj4ldaEPc//stnXpPkHMbWP0erolSCf1MnMwXIHO1WE0M5WxgcxnVvVW+2TIXq/
EQmg07B915vxqu+ZPEMi4zI1Ai42sHhdKKE5QEsBHs2HnV1cwID5TKdAqp5xi1TD
W035pwzo3kw7LpzfrW8zQd2LHpgdz941zU/YYdv3/QFj
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org