Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3136322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ADxwg9jmbFF3x53pJVvm/zxMJ0CY+yPUODGhVbfZ07M=
Subject key identifier: 78:2A:C7:2F:0C:E7:A3:41:D8:30:A7:01:8A:6D:82:EF:95:44:92:B9
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 56F3A622931B741C9C0452D5B158265B6C27374C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20383334.roa
Signing time: Sun 31 Mar 2024 00:03:22 +0000
ROA not before: Sat 30 Mar 2024 23:58:22 +0000
ROA not after: Sun 30 Mar 2025 00:03:22 +0000
asID: 834
IP address blocks: 109.110.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 13:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f3:a6:22:93:1b:74:1c:9c:04:52:d5:b1:58:26:5b:6c:27:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 30 23:58:22 2024 GMT
Not After : Mar 30 00:03:22 2025 GMT
Subject: CN=782AC72F0CE7A341D830A7018A6D82EF954492B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:ba:29:59:ed:83:2e:8b:e0:94:b4:9f:29:
7f:22:38:cc:89:78:75:ec:3a:72:91:31:38:46:14:
ed:07:47:d0:f9:0a:05:c2:33:b5:8e:95:11:7b:d8:
74:24:93:88:1e:ec:ff:1a:16:15:ea:71:91:5c:3c:
b2:a8:14:2d:d4:b2:18:0a:5a:85:89:33:c8:b7:5e:
3f:bd:3d:17:b6:07:2c:01:06:04:1b:61:7b:18:75:
69:ef:86:1d:74:92:6e:6e:8e:d8:2e:fd:4c:8a:e0:
6d:6b:61:bc:92:ab:0b:cd:15:ef:82:49:cc:f0:c7:
13:b8:23:a6:f4:df:a8:c8:22:90:d5:85:43:8f:88:
17:dc:7c:1e:56:aa:a1:2d:70:2c:8d:87:81:50:7c:
63:b6:1a:b4:11:8a:ed:68:2e:7e:5e:f2:63:81:80:
88:41:65:85:7f:c7:47:86:a2:5a:30:0c:34:37:e1:
12:fb:e6:b7:d1:59:ef:ca:9f:33:22:68:c0:8a:f8:
f3:bc:96:27:49:cf:e9:34:ea:00:a0:69:4e:04:82:
10:f1:d7:fd:75:ab:48:12:38:bb:a1:86:41:a6:f7:
2b:b1:0e:0b:aa:33:87:6f:7c:70:55:97:54:25:23:
fd:31:cd:3e:fa:a9:99:67:62:6f:12:a5:60:f3:88:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:C7:2F:0C:E7:A3:41:D8:30:A7:01:8A:6D:82:EF:95:44:92:B9
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/23
Signature Algorithm: sha256WithRSAEncryption
58:e9:63:30:18:6a:a8:69:7b:c4:31:98:87:e0:a2:09:ce:f3:
a6:8b:06:9e:37:3a:c5:18:3a:94:87:f0:c5:31:79:e6:64:73:
d9:4c:8d:3b:9c:9c:28:32:a4:88:ec:47:5d:b3:cd:d1:d3:4b:
a6:49:e0:75:bb:5b:4a:a7:60:fa:1a:b8:f3:ec:0a:f6:74:c7:
88:bc:3d:df:21:97:84:66:31:f8:4d:c7:d0:5e:59:a8:a1:95:
14:dd:29:e9:98:7e:68:62:07:72:09:84:3b:b5:19:df:30:d4:
d9:9a:4d:03:69:ac:c9:78:8d:ef:da:a8:3c:4d:24:87:51:c6:
ad:16:fe:1d:45:ba:ec:fc:11:9b:6e:2e:b6:40:b8:9b:b8:60:
fb:f8:5b:c6:74:2d:99:5f:92:8e:52:4d:95:ad:5d:8c:ff:98:
fa:9e:e3:8d:b0:6f:50:84:75:11:b5:a2:05:33:e6:a5:90:da:
55:19:52:8e:df:48:d4:9d:75:65:7b:f5:6c:11:4e:0d:b6:1d:
23:8e:6e:4d:0d:7a:3b:87:c9:1c:91:a4:48:cc:f8:b2:97:2f:
d2:e0:f7:55:a3:51:61:76:77:52:95:a5:88:c2:9f:24:77:9f:
ce:f0:d1:db:95:23:1d:2a:96:a5:5d:ed:fe:a7:94:94:d2:cd:
df:12:2b:f8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVvOmIpMbdBycBFLVsVgmW2wnN0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAzMzAyMzU4MjJaFw0yNTAzMzAwMDAzMjJaMDMxMTAvBgNV
BAMTKDc4MkFDNzJGMENFN0EzNDFEODMwQTcwMThBNkQ4MkVGOTU0NDkyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn7opWe2DLovglLSfKX8iOMyJ
eHXsOnKRMThGFO0HR9D5CgXCM7WOlRF72HQkk4ge7P8aFhXqcZFcPLKoFC3UshgK
WoWJM8i3Xj+9PRe2BywBBgQbYXsYdWnvhh10km5ujtgu/UyK4G1rYbySqwvNFe+C
SczwxxO4I6b036jIIpDVhUOPiBfcfB5WqqEtcCyNh4FQfGO2GrQRiu1oLn5e8mOB
gIhBZYV/x0eGolowDDQ34RL75rfRWe/KnzMiaMCK+PO8lidJz+k06gCgaU4EghDx
1/11q0gSOLuhhkGm9yuxDguqM4dvfHBVl1QlI/0xzT76qZlnYm8SpWDziIMpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUeCrHLwzno0HYMKcBim2C75VEkrkwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW1u
ojANBgkqhkiG9w0BAQsFAAOCAQEAWOljMBhqqGl7xDGYh+CiCc7zposGnjc6xRg6
lIfwxTF55mRz2UyNO5ycKDKkiOxHXbPN0dNLpkngdbtbSqdg+hq48+wK9nTHiLw9
3yGXhGYx+E3H0F5ZqKGVFN0p6Zh+aGIHcgmEO7UZ3zDU2ZpNA2msyXiN79qoPE0k
h1HGrRb+HUW67PwRm24utkC4m7hg+/hbxnQtmV+SjlJNla1djP+Y+p7jjbBvUIR1
EbWiBTPmpZDaVRlSjt9I1J11ZXv1bBFODbYdI45uTQ16O4fJHJGkSMz4spcv0uD3
VaNRYXZ3UpWliMKfJHefzvDR25UjHSqWpV3t/qeUlNLN3xIr+A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:34 2025 by rpki-client