Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20313430393437.roa
File: 34362e3138332e32392e302f32342d3234203d3e20313430393437.roa (raw, json)
Hash identifier: 9jXniHxzWc11cX5sKwDWa2eLW6JQUn7eBZsgAO3m4q8=
Subject key identifier: 69:3B:BB:DD:54:2A:64:65:15:47:C7:BD:D0:8B:66:2D:44:5D:0A:FF
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 74F4A66A6F08FAA2F9EF872C93A52A212405F848
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20313430393437.roa
Signing time: Fri 14 Jul 2023 14:44:32 +0000
ROA not before: Fri 14 Jul 2023 14:39:32 +0000
ROA not after: Fri 12 Jul 2024 14:44:32 +0000
asID: 140947
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 16:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f4:a6:6a:6f:08:fa:a2:f9:ef:87:2c:93:a5:2a:21:24:05:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jul 14 14:39:32 2023 GMT
Not After : Jul 12 14:44:32 2024 GMT
Subject: CN=693BBBDD542A64651547C7BDD08B662D445D0AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:82:e4:84:15:cc:95:f6:d9:15:73:67:9c:
3d:2e:bf:ba:0f:46:4d:e9:7a:65:d9:a8:aa:e3:39:
ef:2d:4f:74:45:67:68:d0:ba:b0:b9:2f:28:a2:27:
a2:da:19:33:40:f7:f7:05:4f:70:9c:c5:ae:32:68:
18:03:cd:6e:fc:8d:a3:25:62:86:94:69:94:df:a9:
3c:3f:1a:39:e0:18:68:de:d3:41:97:c9:8f:cf:14:
76:0d:dd:b4:df:7d:ce:64:67:9e:31:08:f4:0b:a1:
37:ce:31:3c:96:e1:8c:93:1b:f7:29:1b:1c:75:fd:
42:52:c3:8f:0f:f3:d4:f0:2f:f6:65:ef:80:7e:fe:
be:45:9f:72:f4:a6:28:ec:78:a0:99:0e:05:ad:9c:
4d:c1:0c:9a:60:90:94:a3:7d:22:a7:ef:ea:7d:40:
80:fb:9c:ad:92:86:a3:ef:11:15:61:36:2a:9d:e7:
e4:0d:6c:83:97:45:4b:c9:8e:57:9f:dc:77:05:74:
1b:6e:c2:f8:f1:e1:bf:1b:81:98:77:42:c6:ac:75:
a4:07:85:66:5a:81:13:66:d1:42:97:be:74:f2:61:
a5:99:4b:a8:ca:de:5f:6e:bc:b4:1f:63:20:db:c0:
af:e2:f4:8b:da:df:eb:c2:03:e1:83:a7:b1:f0:08:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:BB:DD:54:2A:64:65:15:47:C7:BD:D0:8B:66:2D:44:5D:0A:FF
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20313430393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
11:86:69:8e:43:90:f0:7a:ae:20:43:cc:d2:5f:80:22:bd:21:
35:fb:23:21:2f:f2:5f:98:42:4f:41:45:e9:fc:f5:83:02:4c:
77:cf:d8:d6:a7:40:ab:49:1e:6c:2c:b0:4d:cc:ee:86:6f:b1:
9e:99:86:8b:42:0f:6f:cf:74:0d:7f:16:6d:ad:34:04:67:c9:
84:26:b6:6c:72:85:cb:0e:26:cb:f3:8b:5c:de:56:ac:c6:bf:
a7:50:9f:88:2b:a2:4f:b6:24:0f:61:e8:c4:14:99:35:b3:b6:
20:58:d2:3e:88:98:63:a5:df:e8:70:5d:e5:86:e5:3e:53:fc:
03:a6:bb:47:d0:45:51:37:70:20:ef:8b:56:35:2b:bd:17:86:
29:e7:3f:5e:63:da:8b:24:9c:8d:1c:46:28:2c:f0:1d:4a:11:
fe:0f:de:f0:f8:54:05:c5:9a:07:57:49:c7:d1:25:d9:8f:fc:
45:d4:9d:79:2c:4b:42:3f:03:b1:f0:a6:c1:44:81:c7:e2:d6:
90:18:6a:62:ce:d9:47:c2:4f:fd:60:1d:1d:db:b6:62:4f:ae:
bb:58:f9:99:c6:87:1c:4a:8a:8f:26:4e:e6:91:d4:4b:e4:90:
f1:32:c3:b4:f6:17:20:7d:88:df:bc:cb:d1:55:ff:42:57:fc:
76:95:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org