Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203633393439.roa
File: 34362e3138332e32392e302f32342d3234203d3e203633393439.roa (raw, json)
Hash identifier: 2Mxqt7AkOj/IXRLg7sabOEs39wNTDoSQ0u8Vck9bs0Y=
Subject key identifier: E9:C1:9C:81:DA:71:B3:69:CF:82:49:08:81:68:7A:AF:0E:FC:24:81
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 40B5E2988CF77FA106C310A55FB66EE601394F34
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203633393439.roa
Signing time: Fri 14 Jul 2023 16:45:15 +0000
ROA not before: Fri 14 Jul 2023 16:40:15 +0000
ROA not after: Fri 12 Jul 2024 16:45:15 +0000
asID: 63949
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b5:e2:98:8c:f7:7f:a1:06:c3:10:a5:5f:b6:6e:e6:01:39:4f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jul 14 16:40:15 2023 GMT
Not After : Jul 12 16:45:15 2024 GMT
Subject: CN=E9C19C81DA71B369CF82490881687AAF0EFC2481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:86:87:8e:c4:9a:d6:2a:e4:a8:c1:a5:8a:
70:4c:b4:ea:af:72:9a:53:14:fe:ea:f7:8c:e3:d0:
fd:73:73:9a:84:5a:fa:d8:56:be:73:a4:65:b5:8a:
1d:7d:06:25:28:f7:6c:6a:20:a8:11:2b:f6:a0:18:
23:ef:aa:db:56:41:1e:57:e2:b8:84:1b:99:ec:81:
a4:6d:c9:a4:c8:08:b1:0c:f1:43:44:53:00:1b:ea:
c3:85:31:26:87:8d:f1:b9:8a:c8:1c:5a:71:b4:82:
24:92:fb:25:f1:6a:8f:60:8f:fd:6f:be:73:fb:ee:
30:ed:35:24:5e:d4:67:25:af:a3:d8:58:00:6b:82:
7b:ab:37:15:29:7e:7b:b1:5e:00:3f:72:df:99:f3:
de:4d:70:11:cc:a9:cc:70:57:1e:42:c1:63:18:f6:
d1:f4:54:f1:ce:17:51:95:c6:26:26:00:c1:90:6e:
28:c4:dc:5f:28:35:b6:ba:01:27:97:a2:64:2b:dc:
14:92:b8:8f:fb:bc:2b:81:ad:c2:60:b1:1d:66:b2:
a2:05:63:9a:19:30:8d:0b:15:14:1f:85:2d:33:f6:
7c:34:bc:8e:11:4a:a3:9f:01:8d:78:77:e7:14:bd:
d7:d1:ca:b2:ca:5c:10:54:70:f8:dc:9b:c5:8a:14:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:9C:81:DA:71:B3:69:CF:82:49:08:81:68:7A:AF:0E:FC:24:81
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203633393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
59:16:4c:78:46:4c:0f:66:d0:9b:a4:85:2c:de:0f:60:7d:df:
d9:14:91:50:95:f0:07:c1:79:aa:c6:5b:2b:3e:71:9d:3b:83:
8c:e9:99:cb:30:9f:16:57:f3:ec:0a:1e:2b:46:e3:b5:85:f2:
f1:03:da:d5:f3:5c:7b:8a:57:be:be:35:61:80:58:0a:10:24:
70:27:b5:7a:52:4f:8f:18:9e:1b:c1:c5:f7:58:0b:c4:81:28:
63:10:7b:4c:41:44:7d:77:8d:e6:05:47:02:f7:b5:ed:07:0e:
c8:1b:82:db:2c:f2:3f:c1:f7:84:ca:eb:6d:90:30:46:8f:64:
54:49:75:84:03:9a:12:c0:12:aa:f5:73:44:e0:a6:25:17:c8:
a9:48:8e:cc:d0:4a:2b:bb:41:c4:73:10:95:82:58:df:12:d1:
91:4a:cc:75:7d:b5:b4:4c:4c:13:35:5a:93:5d:a2:5d:77:74:
06:48:30:2e:c7:17:ff:36:c4:2c:b0:24:e1:9a:9c:78:9e:9e:
93:83:4f:8a:d9:75:47:44:b4:01:02:85:85:e3:75:c3:ff:ec:
03:63:69:34:11:36:f7:9e:46:b0:c0:e0:68:fb:7e:0e:4b:91:
26:e8:94:f6:c5:2d:c9:b8:da:6e:09:c0:92:2f:84:14:1a:4d:
d3:88:90:69
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQLXimIz3f6EGwxClX7Zu5gE5TzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yMzA3MTQxNjQwMTVaFw0yNDA3MTIxNjQ1MTVaMDMxMTAvBgNV
BAMTKEU5QzE5QzgxREE3MUIzNjlDRjgyNDkwODgxNjg3QUFGMEVGQzI0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0YaHjsSa1irkqMGlinBMtOqv
cppTFP7q94zj0P1zc5qEWvrYVr5zpGW1ih19BiUo92xqIKgRK/agGCPvqttWQR5X
4riEG5nsgaRtyaTICLEM8UNEUwAb6sOFMSaHjfG5isgcWnG0giSS+yXxao9gj/1v
vnP77jDtNSRe1Gclr6PYWABrgnurNxUpfnuxXgA/ct+Z895NcBHMqcxwVx5CwWMY
9tH0VPHOF1GVxiYmAMGQbijE3F8oNba6ASeXomQr3BSSuI/7vCuBrcJgsR1msqIF
Y5oZMI0LFRQfhS0z9nw0vI4RSqOfAY14d+cUvdfRyrLKXBBUcPjcm8WKFHrxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6cGcgdpxs2nPgkkIgWh6rw78JIEwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM5MzQzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC63
HTANBgkqhkiG9w0BAQsFAAOCAQEAWRZMeEZMD2bQm6SFLN4PYH3f2RSRUJXwB8F5
qsZbKz5xnTuDjOmZyzCfFlfz7AoeK0bjtYXy8QPa1fNce4pXvr41YYBYChAkcCe1
elJPjxieG8HF91gLxIEoYxB7TEFEfXeN5gVHAve17QcOyBuC2yzyP8H3hMrrbZAw
Ro9kVEl1hAOaEsASqvVzROCmJRfIqUiOzNBKK7tBxHMQlYJY3xLRkUrMdX21tExM
EzVak12iXXd0BkgwLscX/zbELLAk4ZqceJ6ek4NPitl1R0S0AQKFheN1w//sA2Np
NBE2955GsMDgaPt+DkuRJuiU9sUtybjabgnAki+EFBpN04iQaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org