Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QZ7EJcqrmw86kg3llzbnQEtVw/598m8mnZ41v+oK/4E=
Subject key identifier: 5A:F6:D5:D5:5F:3F:1E:3B:38:55:C7:32:7F:86:AB:61:9A:E3:32:8F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2F80777ADC08F9ECA6AB0866FC28AD0743D794D9
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
Signing time: Sun 02 Feb 2025 00:04:30 +0000
ROA not before: Sat 01 Feb 2025 23:59:30 +0000
ROA not after: Sun 01 Feb 2026 00:04:30 +0000
asID: 834
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 14:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:80:77:7a:dc:08:f9:ec:a6:ab:08:66:fc:28:ad:07:43:d7:94:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 1 23:59:30 2025 GMT
Not After : Feb 1 00:04:30 2026 GMT
Subject: CN=5AF6D5D55F3F1E3B3855C7327F86AB619AE3328F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:d4:37:fe:df:2b:ea:cc:cb:08:8d:9f:84:
4b:38:30:39:da:f6:f4:d4:72:81:c2:51:14:3f:08:
a8:a3:5e:e1:e7:1f:4b:a1:83:dd:e7:a0:52:78:ca:
88:e4:75:20:1c:99:e9:90:25:0e:34:a0:ce:43:ed:
5e:e9:13:19:40:bf:3d:56:88:30:c8:93:c8:3d:1d:
c2:c5:76:13:c8:a5:cb:3f:b6:cf:10:3a:29:45:43:
6f:b1:ea:99:dc:f8:0a:d5:d1:8f:25:a4:03:44:95:
92:73:55:ca:d3:0c:62:35:c2:70:18:d6:09:72:65:
5c:8b:3f:a7:bf:f4:1a:f1:cd:ed:71:ad:79:5a:1b:
12:68:02:62:78:c8:a4:33:0e:b1:39:26:92:bd:fa:
ba:d6:fd:78:b4:36:8b:b1:b5:c5:95:ce:4b:54:5c:
73:43:74:8a:85:d5:b3:7c:25:2b:1c:c8:05:e1:52:
94:e1:c7:76:47:1a:c0:f6:80:b5:de:dd:b6:33:b2:
fb:58:b6:be:29:4c:88:d8:c2:7e:68:2b:78:c6:36:
31:c3:70:e9:fb:35:dd:38:fc:9f:9d:0e:0f:9f:93:
23:97:00:b5:6b:44:e1:5a:92:20:56:77:c8:55:7a:
81:79:d2:40:45:88:c2:92:97:ba:57:82:8f:0d:f3:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:D5:D5:5F:3F:1E:3B:38:55:C7:32:7F:86:AB:61:9A:E3:32:8F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2f:8e:2b:85:f4:29:f0:78:87:ca:a0:82:62:00:bc:ae:ff:
ce:43:4e:49:ad:6e:bd:60:8a:95:02:b4:6c:01:25:96:1f:f8:
b2:11:c8:4f:bf:66:cd:6b:3d:c0:53:8d:eb:c4:22:ae:ab:d0:
a3:cd:61:14:db:1c:92:9a:ac:1a:0b:f4:65:23:d7:8a:5a:1b:
f7:2f:74:a8:8b:c8:46:c6:d6:2c:d6:09:bb:58:81:04:3b:24:
d6:b3:8a:fd:f3:7b:12:f7:be:b5:f8:1c:48:8b:97:34:2b:b9:
99:7f:a3:54:25:9b:bf:e8:d5:2a:52:4b:ed:4a:01:09:c9:8c:
04:c3:0e:7a:0e:ed:62:a1:83:56:6a:ec:11:80:a2:ad:94:cb:
1c:73:a9:c6:cd:15:4b:06:f5:46:1e:0e:12:4c:ec:9b:de:62:
86:38:47:ae:e9:ef:1c:c7:be:d6:91:63:00:34:59:a0:9e:fb:
c8:52:18:3b:f3:96:9a:8b:80:a4:b7:17:4b:cb:4b:64:f4:6f:
12:f1:d6:4c:5d:46:3f:30:70:da:9a:60:ab:36:27:e1:aa:2b:
b7:ab:aa:96:9d:58:61:bf:6d:d8:8f:b7:ac:69:1e:55:73:d4:
ea:e8:94:85:2f:8a:36:ff:18:53:48:bd:f6:74:4b:1a:a9:ca:
75:57:b9:a0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUL4B3etwI+eymqwhm/CitB0PXlNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTAyMDEyMzU5MzBaFw0yNjAyMDEwMDA0MzBaMDMxMTAvBgNV
BAMTKDVBRjZENUQ1NUYzRjFFM0IzODU1QzczMjdGODZBQjYxOUFFMzMyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCostQ3/t8r6szLCI2fhEs4MDna
9vTUcoHCURQ/CKijXuHnH0uhg93noFJ4yojkdSAcmemQJQ40oM5D7V7pExlAvz1W
iDDIk8g9HcLFdhPIpcs/ts8QOilFQ2+x6pnc+ArV0Y8lpANElZJzVcrTDGI1wnAY
1glyZVyLP6e/9Brxze1xrXlaGxJoAmJ4yKQzDrE5JpK9+rrW/Xi0NouxtcWVzktU
XHNDdIqF1bN8JSscyAXhUpThx3ZHGsD2gLXe3bYzsvtYtr4pTIjYwn5oK3jGNjHD
cOn7Nd04/J+dDg+fkyOXALVrROFakiBWd8hVeoF50kBFiMKSl7pXgo8N86hfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWvbV1V8/Hjs4Vccyf4arYZrjMo8wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
oDANBgkqhkiG9w0BAQsFAAOCAQEABS+OK4X0KfB4h8qggmIAvK7/zkNOSa1uvWCK
lQK0bAEllh/4shHIT79mzWs9wFON68QirqvQo81hFNsckpqsGgv0ZSPXilob9y90
qIvIRsbWLNYJu1iBBDsk1rOK/fN7Eve+tfgcSIuXNCu5mX+jVCWbv+jVKlJL7UoB
CcmMBMMOeg7tYqGDVmrsEYCirZTLHHOpxs0VSwb1Rh4OEkzsm95ihjhHrunvHMe+
1pFjADRZoJ77yFIYO/OWmouApLcXS8tLZPRvEvHWTF1GPzBw2ppgqzYn4aort6uq
lp1YYb9t2I+3rGkeVXPU6uiUhS+KNv8YU0i99nRLGqnKdVe5oA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:06 2025 by rpki-client