Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20323038393439.roa
File: 3130392e3131302e3136322e302f32332d3234203d3e20323038393439.roa (raw, json)
Hash identifier: b8rbZHkKq2QxMjJDsEjgVdjeouUYDt/hnKXvu/LvSQg=
Subject key identifier: BC:B8:31:C4:8D:67:05:26:96:E6:50:2E:6C:03:8E:9E:77:CA:28:76
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4AB18859B2CE0A749BFFF29D51AA84FF318E184A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20323038393439.roa
Signing time: Tue 30 Jan 2024 08:24:24 +0000
ROA not before: Tue 30 Jan 2024 08:19:24 +0000
ROA not after: Tue 28 Jan 2025 08:24:24 +0000
asID: 208949
IP address blocks: 109.110.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b1:88:59:b2:ce:0a:74:9b:ff:f2:9d:51:aa:84:ff:31:8e:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 30 08:19:24 2024 GMT
Not After : Jan 28 08:24:24 2025 GMT
Subject: CN=BCB831C48D67052696E6502E6C038E9E77CA2876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:0d:82:0b:7a:4c:97:b1:ec:64:5f:ea:ca:
1b:20:ea:fa:66:70:13:d5:a0:b5:0b:f0:25:b9:43:
93:1b:e8:52:d6:c9:d2:9b:44:b3:56:1e:f6:20:9a:
07:d4:89:e4:89:c6:f3:4c:9f:8a:a8:ad:e0:e4:ea:
85:4b:62:75:70:25:01:1a:c6:4e:44:ad:d8:fd:c0:
be:62:5f:a8:6c:7c:fe:51:f3:e1:9c:63:8b:6b:c2:
1c:45:85:14:68:f3:0e:4b:84:cb:5a:2f:ff:4b:7d:
66:4e:8e:f6:4e:d3:bf:08:13:a7:10:73:1e:58:60:
56:9e:be:5a:17:2f:65:0b:4f:d2:d4:fd:91:c9:15:
ef:41:71:18:ef:40:e2:0a:6b:f9:4f:b2:be:68:08:
e1:b1:6f:47:46:42:e7:47:d7:cf:a8:90:d5:53:20:
32:7f:bd:ef:57:4b:d9:a7:dc:62:cb:00:a2:84:ef:
50:d5:3f:3e:b8:eb:4c:bb:ae:33:f6:87:fa:4a:dd:
1a:ef:06:e5:1d:e2:6c:7c:29:5a:49:be:4e:98:f1:
df:68:bb:8b:d8:37:05:51:10:93:1a:12:2b:8e:33:
f0:60:c3:1d:b8:f1:15:1f:2d:ca:43:5c:ff:fd:70:
62:8a:3a:3b:2e:27:4a:73:b9:86:36:5c:a2:f1:d7:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:31:C4:8D:67:05:26:96:E6:50:2E:6C:03:8E:9E:77:CA:28:76
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20323038393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/23
Signature Algorithm: sha256WithRSAEncryption
78:66:02:17:18:e4:a6:35:a2:79:12:d7:8b:c4:b2:f7:05:1f:
e7:57:80:fe:07:38:31:00:45:96:d4:4a:92:97:21:1c:36:60:
bf:43:a8:08:63:9f:32:75:f2:50:cf:68:0e:7a:c0:52:d9:95:
05:8e:f0:2e:db:e9:a4:90:50:aa:51:f1:cf:55:ff:cc:33:2a:
6d:0e:63:39:9c:a1:47:b0:91:94:7d:18:e6:bc:d0:0b:89:b1:
33:42:53:43:34:a2:50:74:85:9a:b9:89:02:04:ff:55:05:64:
ad:34:5d:2d:c3:fd:af:4f:2c:83:39:b6:c8:85:6e:df:2b:61:
e3:bb:0f:4b:c7:3b:64:26:bc:83:5a:f8:67:bc:2e:5d:90:5c:
6e:10:7b:28:ad:79:be:93:02:ad:60:3e:3c:9e:e3:f0:f4:da:
5a:63:6f:58:4a:5c:fd:29:e8:17:01:e4:c6:82:c4:e5:b0:d9:
49:70:45:ac:81:77:57:fb:69:06:21:40:e6:20:9d:fe:bc:45:
a2:cb:5e:fc:40:a5:87:cc:7c:e5:f1:c4:53:47:0e:eb:dd:26:
86:45:15:40:33:6a:e1:92:8b:93:bd:ca:dd:2d:1e:14:7f:59:
0a:3f:66:29:8f:c1:c8:ec:7f:48:17:3e:b7:9f:b7:a2:06:72:
15:27:4d:7d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSrGIWbLOCnSb//KdUaqE/zGOGEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAxMzAwODE5MjRaFw0yNTAxMjgwODI0MjRaMDMxMTAvBgNV
BAMTKEJDQjgzMUM0OEQ2NzA1MjY5NkU2NTAyRTZDMDM4RTlFNzdDQTI4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4g2CC3pMl7HsZF/qyhsg6vpm
cBPVoLUL8CW5Q5Mb6FLWydKbRLNWHvYgmgfUieSJxvNMn4qoreDk6oVLYnVwJQEa
xk5Erdj9wL5iX6hsfP5R8+GcY4trwhxFhRRo8w5LhMtaL/9LfWZOjvZO078IE6cQ
cx5YYFaevloXL2ULT9LU/ZHJFe9BcRjvQOIKa/lPsr5oCOGxb0dGQudH18+okNVT
IDJ/ve9XS9mn3GLLAKKE71DVPz6460y7rjP2h/pK3RrvBuUd4mx8KVpJvk6Y8d9o
u4vYNwVREJMaEiuOM/Bgwx248RUfLcpDXP/9cGKKOjsuJ0pzuYY2XKLx12OtAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUvLgxxI1nBSaW5lAubAOOnnfKKHYwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzODM5MzQzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAW1uojANBgkqhkiG9w0BAQsFAAOCAQEAeGYCFxjkpjWieRLXi8Sy9wUf51eA
/gc4MQBFltRKkpchHDZgv0OoCGOfMnXyUM9oDnrAUtmVBY7wLtvppJBQqlHxz1X/
zDMqbQ5jOZyhR7CRlH0Y5rzQC4mxM0JTQzSiUHSFmrmJAgT/VQVkrTRdLcP9r08s
gzm2yIVu3yth47sPS8c7ZCa8g1r4Z7wuXZBcbhB7KK15vpMCrWA+PJ7j8PTaWmNv
WEpc/SnoFwHkxoLE5bDZSXBFrIF3V/tpBiFA5iCd/rxFoste/EClh8x85fHEU0cO
690mhkUVQDNq4ZKLk73K3S0eFH9ZCj9mKY/ByOx/SBc+t5+3ogZyFSdNfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 31 00:47:49 2024 by rpki-client on console-ams.rpki-client.org