Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203437353835.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e203437353835.roa (raw, json)
Hash identifier: zB66aAlZO9rk3RYTgbzI3/MtUH4hNl9C5zILDyhxzhs=
Subject key identifier: BE:A4:66:9C:BF:21:7E:31:75:44:FE:56:FC:85:10:3E:65:FB:CA:DE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1EA1D5C0DAEB0980B06386C38C52EA0C19C4D0A7
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203437353835.roa
Signing time: Mon 29 Jul 2024 11:53:43 +0000
ROA not before: Mon 29 Jul 2024 11:48:43 +0000
ROA not after: Mon 28 Jul 2025 11:53:43 +0000
asID: 47585
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a1:d5:c0:da:eb:09:80:b0:63:86:c3:8c:52:ea:0c:19:c4:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 29 11:48:43 2024 GMT
Not After : Jul 28 11:53:43 2025 GMT
Subject: CN=BEA4669CBF217E317544FE56FC85103E65FBCADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:2c:a2:d2:99:70:05:87:91:b3:bc:db:c0:
7e:7f:8e:b0:09:6d:b6:11:dd:b1:3f:7d:12:f9:ad:
27:ab:f6:82:21:4b:81:8f:c3:76:97:5d:c6:c3:b8:
6c:ff:20:5b:15:88:95:c2:99:e5:1d:68:c7:df:d2:
ff:2b:ff:eb:8d:20:78:a4:c0:87:67:28:5c:3d:cc:
45:e3:dc:84:b7:ce:d6:b7:a1:a1:b2:47:8f:c7:cb:
bc:75:92:dd:3b:2d:91:44:05:15:a3:0a:7a:ff:7e:
94:10:3c:78:4c:f6:57:2e:a5:48:4e:4e:4e:ed:f6:
b9:80:fe:a9:3b:0d:8e:27:53:f1:3a:e4:fb:8a:56:
4e:00:65:95:9f:2d:a8:3a:6c:2e:c6:1e:21:5a:da:
cd:ab:ea:5c:31:2b:10:d4:31:96:38:08:a1:d2:84:
2b:97:da:42:0b:1f:8d:02:2c:8f:12:8c:af:3c:8e:
a0:b6:df:c4:43:2c:64:9a:93:b7:35:93:56:9d:1c:
54:21:db:ec:16:19:77:96:a1:20:b2:3b:3c:4e:6e:
d1:2d:4e:ce:35:90:57:59:89:99:8f:6e:9b:5c:8f:
77:29:de:7a:48:74:73:2f:1f:68:98:91:0d:59:ee:
86:2b:c6:c1:c1:7b:78:36:b0:b0:7b:91:5a:bb:98:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:66:9C:BF:21:7E:31:75:44:FE:56:FC:85:10:3E:65:FB:CA:DE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203437353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:68:0b:75:2f:81:5a:6c:f6:bc:fb:a7:64:26:98:f8:db:8f:
92:8d:ff:cd:fb:3e:29:51:68:45:32:be:92:74:3a:f3:4a:fa:
0f:76:5c:2f:3f:85:25:80:2e:f6:24:bc:3d:03:3d:b0:9f:05:
76:87:05:c9:7c:73:5d:c6:c8:2f:80:ad:0c:2a:79:6f:46:3d:
73:57:af:87:fe:18:f1:56:b2:4b:1c:2d:df:c5:f8:4b:16:3f:
13:23:6e:cf:4b:a1:6e:33:be:c5:fd:38:da:74:21:c5:ae:e9:
ad:13:c0:60:84:66:7d:d9:9b:fa:4e:01:8b:9e:d0:92:df:c4:
32:8e:b1:16:ad:70:01:01:13:b3:97:ad:bc:04:48:6d:d7:71:
63:47:18:35:67:e2:d2:cb:55:d7:cb:42:dd:46:0f:06:19:89:
6d:09:3c:b8:0a:f4:00:2d:23:7f:ce:cf:7d:67:e5:41:87:8b:
d0:15:02:44:fe:cd:af:b7:74:81:1d:9d:85:ca:f1:e6:d0:59:
ac:73:c5:83:fe:f2:29:35:e3:d8:4e:72:e7:7b:38:b1:be:4a:
b7:33:50:8e:04:8f:94:82:9f:fe:a0:cd:91:94:18:ce:ec:b1:
32:e4:82:90:ff:cf:68:34:9d:07:1a:dd:83:b9:f0:68:fe:8f:
ef:2c:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 02:16:03 2024 by rpki-client on console-fra.rpki-client.org