Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203537303433.roa
File: 34362e3130322e3233332e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: Uozxb2QlxTzwNzNz7LOQmqPchA9sPnwYWkYQP4ka2fI=
Subject key identifier: 0B:67:B8:73:B6:01:D0:CC:AA:A9:57:16:0D:25:16:0A:95:03:16:9B
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 59D3D433FF6FD4FBE7AB58282244B2E3940174E3
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203537303433.roa
Signing time: Mon 25 Sep 2023 17:26:05 +0000
ROA not before: Mon 25 Sep 2023 17:21:05 +0000
ROA not after: Mon 23 Sep 2024 17:26:05 +0000
asID: 57043
IP address blocks: 46.102.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d3:d4:33:ff:6f:d4:fb:e7:ab:58:28:22:44:b2:e3:94:01:74:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Sep 25 17:21:05 2023 GMT
Not After : Sep 23 17:26:05 2024 GMT
Subject: CN=0B67B873B601D0CCAAA957160D25160A9503169B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:d8:d4:97:0f:66:31:5c:31:d4:a4:57:ee:
49:db:2e:4e:46:19:58:56:8d:dc:09:df:7e:b0:cf:
aa:2e:aa:b6:d0:b9:8a:b2:8d:ae:92:1e:d0:65:13:
d8:ba:bf:63:32:4e:1c:0d:bc:ba:02:77:17:1b:e3:
fa:78:28:d5:30:d3:c7:5d:80:17:a4:4e:98:96:b0:
4e:28:ad:22:70:78:37:5a:d8:c9:33:7c:21:d0:b0:
30:f1:0c:81:73:e8:0f:92:9d:6f:19:dc:6d:58:72:
86:ab:71:7f:1d:d0:2f:16:2b:2e:e9:8c:7d:1c:cb:
ef:c0:0b:3d:7f:60:71:44:7f:dc:6e:0a:9b:53:85:
e1:05:95:17:6d:14:b0:33:dd:0c:07:ad:37:99:38:
36:65:f5:20:29:fe:27:b7:6a:07:44:de:ea:aa:73:
9e:8d:82:f8:86:c2:e3:04:a3:6f:ea:d3:58:43:be:
51:0c:72:b7:80:6c:70:ff:71:87:9d:af:36:cd:46:
56:b5:a9:4f:dd:22:d3:d7:55:c2:30:e1:4f:6e:fa:
46:87:0f:bb:51:41:41:de:e2:3c:80:10:d7:09:70:
cf:ad:cf:8e:bc:24:05:15:8e:12:6a:76:1b:f3:97:
98:a9:8a:82:c3:90:68:73:66:fd:4d:b2:f9:b4:2f:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:B8:73:B6:01:D0:CC:AA:A9:57:16:0D:25:16:0A:95:03:16:9B
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6d:8a:f9:aa:00:54:3e:10:e7:b5:37:9d:d0:9d:c2:4e:cd:
f4:c4:56:82:e6:78:d1:14:39:5a:6b:ac:99:00:9d:74:d5:08:
f8:26:b7:00:f1:c3:93:97:22:38:82:5f:3c:e8:18:f2:f9:24:
8c:d2:08:ed:9d:18:24:f0:77:0c:e0:68:53:53:8a:b8:64:c6:
13:af:e9:62:d9:aa:d1:b9:20:6c:34:c2:e2:e0:22:07:99:c9:
f7:19:13:fd:a0:3b:da:44:54:7e:ba:17:03:3f:1b:e1:e5:50:
51:4b:59:bd:c1:6f:1c:f3:7e:7a:7d:01:80:ce:91:1b:41:fe:
6b:47:74:65:8e:0a:35:69:64:6c:18:77:8a:ed:cf:2d:4e:1f:
3d:ae:8a:86:d5:0f:44:5d:66:eb:ae:28:c8:d9:a1:79:88:0a:
2f:e6:19:b0:9b:b0:ac:58:1b:6e:20:5b:db:92:c2:9a:08:74:
2b:b7:92:56:28:c9:47:9d:53:1f:85:03:10:c6:eb:2f:05:17:
d7:0e:3d:4d:82:c0:a2:fc:bc:8d:83:f4:dc:70:a1:0d:5e:a6:
95:fb:57:82:52:60:16:3a:53:fe:d7:f7:56:73:e0:f6:1b:d1:
dc:df:98:85:ae:99:c4:ca:e9:83:11:53:99:86:10:b8:b4:74:
6b:74:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 16:44:12 2023 by rpki-client on console-ams.rpki-client.org