Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa
File: 34362e3130322e3233332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wwBEuLtTqYhYG/AcG4icuLyVWKLOInJfpyOI7u4b0zw=
Subject key identifier: 64:9D:EC:F3:37:E6:A5:BA:33:2E:F2:AE:6B:EB:24:5C:78:5A:F8:87
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 5301E7D2140047063243CE977B4728A2D58007F3
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Aug 2024 00:00:28 +0000
ROA not before: Tue 06 Aug 2024 23:55:28 +0000
ROA not after: Wed 06 Aug 2025 00:00:28 +0000
asID: 834
IP address blocks: 46.102.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 11:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:01:e7:d2:14:00:47:06:32:43:ce:97:7b:47:28:a2:d5:80:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 6 23:55:28 2024 GMT
Not After : Aug 6 00:00:28 2025 GMT
Subject: CN=649DECF337E6A5BA332EF2AE6BEB245C785AF887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0a:c8:cf:79:06:da:d9:f5:a2:e8:13:ad:ac:
28:2d:62:5d:4f:1e:e9:2a:e3:71:14:65:5b:c8:28:
c2:7f:01:94:ec:af:64:4a:24:6c:8a:c0:0b:9f:c4:
ae:4c:b8:e3:29:77:cf:b3:8a:42:cd:3d:66:9a:48:
57:f7:10:5c:d2:b5:80:05:ba:96:ff:0b:d2:4b:0d:
09:50:be:da:f2:ce:f3:84:35:3a:eb:9e:8e:b1:39:
1c:ef:1d:03:d3:af:89:ca:e6:e6:f7:f6:57:c4:cd:
b1:f3:9b:4c:51:11:a1:88:71:63:42:ad:3f:d4:72:
9d:1a:d5:38:6e:b0:9f:53:2c:07:d7:fe:50:a7:cd:
4d:34:68:28:d5:c3:1c:eb:b9:03:2a:7e:8f:3c:95:
99:16:41:4a:1d:57:cf:2a:32:65:ac:f0:7f:d3:6d:
26:6b:f9:22:15:3f:d7:5a:f8:27:a7:85:06:ca:3f:
13:3f:ba:e4:6a:f2:63:64:86:5d:6c:05:09:1c:69:
79:52:86:48:1e:16:fd:9d:a0:ef:42:f4:c3:53:3f:
8c:a6:29:1e:2d:12:61:70:0a:d7:1b:64:5e:be:09:
21:a8:99:3f:66:ce:54:e7:6c:0b:1a:22:75:49:99:
0b:90:9a:38:fa:88:1a:6c:7d:b2:8d:25:a3:4c:3a:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:EC:F3:37:E6:A5:BA:33:2E:F2:AE:6B:EB:24:5C:78:5A:F8:87
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9a:76:d3:e1:b1:2d:01:e4:01:56:5d:e9:8a:ab:87:16:a4:
1c:23:4e:67:5f:c1:98:c3:29:8e:c0:9f:66:6a:3f:b8:7c:ea:
9d:4d:17:e3:22:77:f5:a9:e5:d6:c2:05:db:b7:3b:61:75:72:
e4:79:ac:8b:2c:66:92:0d:59:24:18:ee:1f:8c:8a:39:e8:d0:
b4:67:d8:23:5a:bf:b0:fe:5b:29:3d:b0:15:03:84:49:1e:54:
9c:20:44:02:61:55:d7:35:60:32:18:01:26:1d:ff:b5:4a:2a:
27:d7:2d:95:6d:58:54:97:0b:71:7c:ec:8a:7c:db:1d:eb:58:
20:df:18:2f:7a:5e:b6:4a:74:b0:a0:ac:d7:a6:ad:19:30:61:
04:5d:cf:d4:d8:35:1c:c1:90:0e:b3:8a:f8:e6:8a:11:c0:3c:
5d:14:5d:84:31:a3:4e:b2:eb:a4:87:15:9c:47:18:c5:f9:29:
cc:ce:f6:cb:c3:94:bb:88:45:34:13:bb:32:50:9c:5a:87:f5:
77:cb:f3:ba:52:b8:4c:c2:fd:40:5b:32:d9:97:7b:01:be:5c:
b4:7e:65:f4:3f:ed:22:07:46:f9:59:20:e9:16:5f:69:ee:49:
23:81:fd:e1:23:6b:93:d3:e1:7c:64:77:cc:4b:3d:48:15:c2:
fc:c8:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:28 2025 by rpki-client