Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323031363730.roa
File: 3130392e3131302e3136322e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier: mh67NVbEYTDzMQajdwLD4/8t0Sn0frnXdRLbp6jPl5U=
Subject key identifier: F4:3E:12:CF:46:EA:34:EA:F6:F2:87:6D:75:0B:73:CB:06:AB:3B:EE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2393281655E7DBDD1D298B63F140A104F5E54330
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323031363730.roa
Signing time: Tue 02 Apr 2024 13:32:22 +0000
ROA not before: Tue 02 Apr 2024 13:27:22 +0000
ROA not after: Tue 01 Apr 2025 13:32:22 +0000
asID: 201670
IP address blocks: 109.110.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 13:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:93:28:16:55:e7:db:dd:1d:29:8b:63:f1:40:a1:04:f5:e5:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 2 13:27:22 2024 GMT
Not After : Apr 1 13:32:22 2025 GMT
Subject: CN=F43E12CF46EA34EAF6F2876D750B73CB06AB3BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:41:05:f3:aa:2e:17:17:5e:ad:d1:22:9a:
1d:7a:84:d8:cf:b8:70:f0:bf:0d:be:cc:30:27:6e:
9a:13:b1:33:c6:8f:41:34:3a:ac:28:53:a7:fc:f5:
28:2e:6e:46:56:4c:f6:ee:09:c8:0b:4d:89:23:88:
14:52:9f:12:03:72:1a:af:22:1b:b8:72:e7:6a:55:
50:c2:46:be:13:0a:ac:93:e4:e4:db:1d:35:95:f7:
e6:40:20:b6:f2:6a:f5:5d:71:19:79:bb:ad:78:e1:
42:22:b3:e0:70:56:78:37:c7:ad:33:e2:ed:24:3e:
82:14:c8:eb:a3:d6:05:ca:b3:a1:e2:3d:13:dd:ab:
81:61:1a:de:21:93:67:ec:c7:f7:64:48:01:68:59:
92:4c:58:51:9d:d5:3a:b9:72:f0:9e:06:a0:12:e7:
ed:8b:46:7b:3b:60:d8:95:88:31:3f:69:c1:ec:60:
d7:20:8a:b6:d7:61:db:84:03:44:22:16:c5:73:2d:
c8:c6:71:23:fd:15:87:38:f2:96:4e:67:1d:dd:c9:
24:71:8e:7c:e2:d9:23:3d:5d:8e:7c:d7:c4:44:ce:
5e:94:68:da:e7:20:9d:ad:67:1d:10:4e:eb:5e:bb:
e3:3a:b6:d1:30:00:c1:99:6b:50:24:75:04:52:b2:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:12:CF:46:EA:34:EA:F6:F2:87:6D:75:0B:73:CB:06:AB:3B:EE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20323031363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ec:20:2a:74:4a:ad:8b:ca:99:e6:70:85:6f:a2:7e:72:8b:
96:1b:ae:ef:7d:00:b0:e0:56:21:08:77:c3:47:9d:48:57:e3:
f4:3d:76:00:0a:5c:30:e7:cc:01:48:fd:45:72:34:0c:bb:8f:
14:3f:a4:76:cb:cf:88:11:ea:97:71:a0:e5:67:05:90:a9:fe:
9f:03:c0:dc:10:d0:41:e6:2c:b6:13:0c:7f:6f:0d:ab:96:ad:
b3:72:99:08:35:ef:e7:68:74:c9:f2:eb:cb:45:29:7b:31:f6:
4f:88:48:21:6e:6d:1e:ce:79:cc:18:c2:6c:44:94:3b:62:c5:
e9:e5:58:38:88:14:72:e7:e3:99:5b:35:05:e5:7d:9d:ed:5a:
70:71:9b:6a:24:ed:e5:d0:05:1d:7c:46:70:99:f5:5d:52:7e:
59:36:28:da:a8:5e:6e:0b:46:f7:cf:0c:f7:57:5f:6b:91:c6:
09:c2:71:c2:95:d6:a6:eb:62:10:f2:e6:35:e6:9f:dc:77:06:
ab:10:d7:ba:94:b5:f3:dd:3e:99:ff:d5:71:e7:5a:6c:ee:cb:
a4:8a:0c:03:d7:f0:4e:95:dc:81:9f:32:d4:75:4a:c2:f1:80:
0d:ac:39:b2:10:a4:99:48:ee:81:52:b7:43:de:8a:02:4d:f9:
27:63:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:54:44 2024 by rpki-client on console-fra.rpki-client.org