Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
File: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qnH99GYQtO784Pkght6zZWsbsM9oohJ9QCaog7aPCZk=
Subject key identifier: E6:CF:E9:12:D2:D1:B5:23:FF:F2:BF:A0:DC:B7:A8:3B:D9:D4:43:40
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 7C43D008943C85B772CA13A8172F0CC24006EAC9
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Aug 2024 00:00:27 +0000
ROA not before: Tue 06 Aug 2024 23:55:27 +0000
ROA not after: Wed 06 Aug 2025 00:00:27 +0000
asID: 834
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 12:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:43:d0:08:94:3c:85:b7:72:ca:13:a8:17:2f:0c:c2:40:06:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Aug 6 23:55:27 2024 GMT
Not After : Aug 6 00:00:27 2025 GMT
Subject: CN=E6CFE912D2D1B523FFF2BFA0DCB7A83BD9D44340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:06:15:a4:a6:47:72:ad:c2:3d:47:37:ba:
3e:54:96:88:38:3f:7f:6f:c8:42:c9:04:d2:27:79:
ae:b9:cd:ad:f6:37:d9:c2:a9:8b:7a:38:bb:a1:1a:
15:3a:4f:22:b7:1c:64:e4:39:46:fe:fa:91:dc:e1:
72:af:f0:4e:e2:be:00:98:5c:5e:0e:0c:05:50:d6:
0c:df:3f:8a:e7:27:26:d2:80:d1:51:3b:40:c7:63:
9e:94:7b:eb:12:94:76:8f:5e:32:5e:cc:bc:e1:89:
e0:46:86:67:20:2b:7a:bf:80:75:c4:cd:0f:e0:6d:
9d:28:63:37:ea:33:ab:84:33:70:8f:c8:7a:c0:8d:
8f:03:2f:c8:52:c9:53:0f:a3:10:bd:53:01:f9:ef:
dc:8c:a7:54:aa:b4:42:54:f1:b7:ab:34:a2:56:7c:
d8:7d:03:fc:8b:3a:69:c6:b7:3e:c8:0f:1c:83:d4:
df:9a:5f:da:e6:8e:58:dd:0e:4e:7e:87:64:22:04:
f7:12:a4:b1:78:ff:2e:33:88:11:c5:d3:0b:94:a5:
4e:03:3d:24:3e:34:28:2a:d3:db:44:61:63:16:aa:
8c:76:dc:ad:5b:6a:75:60:f7:82:4c:e3:06:3e:fd:
5b:73:01:74:2f:29:78:ab:88:ce:84:fa:1a:14:11:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:E9:12:D2:D1:B5:23:FF:F2:BF:A0:DC:B7:A8:3B:D9:D4:43:40
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f7:27:4d:b1:d8:e5:5a:67:99:7f:c4:da:fd:32:03:6c:19:
e1:19:12:68:d6:cd:77:81:75:96:b0:72:73:d6:66:89:ad:ad:
cc:74:e3:90:b7:81:b9:39:40:5e:61:01:9d:6a:94:25:5a:f5:
08:b6:32:6f:dd:38:79:65:11:66:2b:b6:47:7c:19:3c:35:5a:
b8:05:e3:3c:85:2b:fb:92:14:9f:92:7e:38:e5:0b:cb:91:88:
d9:18:94:80:e0:94:cf:39:be:39:bd:de:84:9d:ef:83:7d:88:
98:4b:32:30:a5:95:8b:6b:ff:0b:a0:9b:89:77:84:65:24:19:
27:c3:5f:ee:c0:2d:b8:af:44:10:3e:da:da:b5:19:64:4b:64:
be:18:66:32:d5:f2:b9:8b:70:9b:6b:ca:9f:b8:f4:9e:66:16:
0f:d5:25:05:37:77:15:8c:91:9d:75:c3:02:2d:73:f7:4a:dd:
f6:1f:4a:7e:0f:74:a7:79:50:ee:b4:e7:38:7a:0d:dd:60:21:
92:02:41:a3:20:7f:0d:1d:6a:80:0e:9a:ce:95:fb:50:fd:79:
52:8b:6a:8a:c0:fd:ee:0d:fe:f6:2b:3f:ae:d3:db:e2:ec:14:
00:5d:c7:62:0c:39:32:84:6a:ca:0d:3f:e3:b4:d4:b3:46:b6:
d8:28:d0:af
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfEPQCJQ8hbdyyhOoFy8MwkAG6skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNDA4MDYyMzU1MjdaFw0yNTA4MDYwMDAwMjdaMDMxMTAvBgNV
BAMTKEU2Q0ZFOTEyRDJEMUI1MjNGRkYyQkZBMERDQjdBODNCRDlENDQzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAwYVpKZHcq3CPUc3uj5Ulog4
P39vyELJBNInea65za32N9nCqYt6OLuhGhU6TyK3HGTkOUb++pHc4XKv8E7ivgCY
XF4ODAVQ1gzfP4rnJybSgNFRO0DHY56Ue+sSlHaPXjJezLzhieBGhmcgK3q/gHXE
zQ/gbZ0oYzfqM6uEM3CPyHrAjY8DL8hSyVMPoxC9UwH579yMp1SqtEJU8berNKJW
fNh9A/yLOmnGtz7IDxyD1N+aX9rmjljdDk5+h2QiBPcSpLF4/y4ziBHF0wuUpU4D
PSQ+NCgq09tEYWMWqox23K1banVg94JM4wY+/VtzAXQvKXiriM6E+hoUETYvAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU5s/pEtLRtSP/8r+g3LeoO9nUQ0AwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALrcdMA0G
CSqGSIb3DQEBCwUAA4IBAQAg9ydNsdjlWmeZf8Ta/TIDbBnhGRJo1s13gXWWsHJz
1maJra3MdOOQt4G5OUBeYQGdapQlWvUItjJv3Th5ZRFmK7ZHfBk8NVq4BeM8hSv7
khSfkn445QvLkYjZGJSA4JTPOb45vd6Ene+DfYiYSzIwpZWLa/8LoJuJd4RlJBkn
w1/uwC24r0QQPtratRlkS2S+GGYy1fK5i3Cba8qfuPSeZhYP1SUFN3cVjJGddcMC
LXP3St32H0p+D3SneVDutOc4eg3dYCGSAkGjIH8NHWqADprOlftQ/XlSi2qKwP3u
Df72Kz+u09vi7BQAXcdiDDkyhGrKDT/jtNSzRrbYKNCv
-----END CERTIFICATE-----
Generated at Thu Aug 8 14:53:12 2024 by rpki-client on console-fra.rpki-client.org