Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Gog1JiQNkAe4N7bh/l2RpK4ezBR5iX3A7cWjyFWZheg=
Subject key identifier: 40:AE:D2:7D:5C:95:30:59:09:84:F1:93:2A:69:5E:3F:34:9E:9D:ED
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6A55F4FE894F16389FE2B964BC7F1E1990721D76
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20383334.roa
Signing time: Wed 24 Apr 2024 13:57:20 +0000
ROA not before: Wed 24 Apr 2024 13:52:20 +0000
ROA not after: Wed 23 Apr 2025 13:57:20 +0000
asID: 834
IP address blocks: 109.110.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 19:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:55:f4:fe:89:4f:16:38:9f:e2:b9:64:bc:7f:1e:19:90:72:1d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 24 13:52:20 2024 GMT
Not After : Apr 23 13:57:20 2025 GMT
Subject: CN=40AED27D5C9530590984F1932A695E3F349E9DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:65:94:4c:30:d7:58:8c:ba:ed:52:3f:9f:
0d:20:90:5f:89:df:93:d6:c0:f4:f6:af:4f:5b:a7:
55:56:e1:f8:45:ec:e3:91:fd:a7:c8:30:89:5a:7d:
81:69:f0:05:76:1d:6d:33:1c:c1:26:7f:86:26:69:
98:b3:e3:53:cd:ed:75:63:ce:83:01:88:13:dd:d2:
67:aa:e6:d0:5e:24:86:44:9b:41:4b:63:09:e6:93:
84:71:7d:9f:dd:fb:88:c5:af:08:c2:86:00:1b:7d:
42:d8:2e:dc:10:ab:8f:61:37:24:e9:81:bc:06:77:
4e:ad:22:eb:4a:d2:0d:ca:0d:df:c5:02:90:b5:92:
24:04:71:49:b3:a3:79:57:46:37:7c:d6:3d:4a:5c:
db:7a:b4:3d:92:2c:19:e9:63:42:78:42:f5:9e:35:
1f:75:dd:9d:96:66:55:c9:cb:1a:10:18:26:83:aa:
73:1a:32:86:ef:e1:01:cf:8e:c7:90:7b:56:2c:fd:
dd:8b:7a:de:78:4b:c7:ed:09:71:b7:af:55:6b:ef:
ca:bb:ce:03:99:3c:83:a5:04:fa:49:ca:44:c9:db:
29:30:41:c2:b7:4e:6d:c0:63:ac:7b:23:4e:1f:16:
1c:b9:01:e0:e5:4e:aa:54:64:03:0e:b9:8f:e8:a7:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:D2:7D:5C:95:30:59:09:84:F1:93:2A:69:5E:3F:34:9E:9D:ED
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.162.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1f:1e:27:d8:45:08:a6:46:a9:b7:3a:7d:4f:c7:d4:ca:b0:
22:a2:c1:ab:78:4d:3f:70:37:9a:b4:46:f1:9a:1f:5a:46:69:
95:c6:09:ad:a3:65:d2:f8:3b:aa:f1:5b:a0:51:72:1e:53:a6:
f1:a3:b8:5e:8f:67:68:ad:76:e3:9d:4a:ea:72:96:c5:98:61:
78:1c:6d:ef:ef:34:23:16:9b:70:6f:0e:5e:de:34:b7:0a:9f:
0f:43:e8:ad:6f:a1:53:85:c1:f1:13:b7:dc:40:83:38:49:e0:
b3:63:f8:63:10:d1:05:65:3e:7d:fa:d5:fd:cb:a6:29:99:09:
08:c5:6f:3c:43:14:be:60:01:c0:cb:21:79:46:9c:46:b7:d4:
f3:44:36:e8:44:5b:8c:d4:90:3e:06:1a:43:17:69:b2:e4:e0:
82:38:03:f3:d4:f0:63:46:04:bc:84:f8:7e:41:69:bf:b6:cc:
7f:fd:0c:d7:a3:76:7d:e7:b0:d3:b0:39:93:e5:25:07:48:82:
d3:c5:68:5f:36:8e:21:29:37:a4:6d:2d:63:e9:77:36:a1:8e:
cd:ed:c1:4c:42:e7:05:06:4e:b4:8e:5d:06:03:64:f6:3d:fc:
e0:f8:43:c3:66:0c:83:11:01:47:4e:74:f8:07:21:08:d8:a3:
a6:17:63:be
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUalX0/olPFjif4rlkvH8eGZByHXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDA0MjQxMzUyMjBaFw0yNTA0MjMxMzU3MjBaMDMxMTAvBgNV
BAMTKDQwQUVEMjdENUM5NTMwNTkwOTg0RjE5MzJBNjk1RTNGMzQ5RTlERUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtmWUTDDXWIy67VI/nw0gkF+J
35PWwPT2r09bp1VW4fhF7OOR/afIMIlafYFp8AV2HW0zHMEmf4YmaZiz41PN7XVj
zoMBiBPd0meq5tBeJIZEm0FLYwnmk4RxfZ/d+4jFrwjChgAbfULYLtwQq49hNyTp
gbwGd06tIutK0g3KDd/FApC1kiQEcUmzo3lXRjd81j1KXNt6tD2SLBnpY0J4QvWe
NR913Z2WZlXJyxoQGCaDqnMaMobv4QHPjseQe1Ys/d2Let54S8ftCXG3r1Vr78q7
zgOZPIOlBPpJykTJ2ykwQcK3Tm3AY6x7I04fFhy5AeDlTqpUZAMOuY/op/1HAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUQK7SfVyVMFkJhPGTKmlePzSene0wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
ojANBgkqhkiG9w0BAQsFAAOCAQEAFB8eJ9hFCKZGqbc6fU/H1MqwIqLBq3hNP3A3
mrRG8ZofWkZplcYJraNl0vg7qvFboFFyHlOm8aO4Xo9naK12451K6nKWxZhheBxt
7+80IxabcG8OXt40twqfD0PorW+hU4XB8RO33ECDOEngs2P4YxDRBWU+ffrV/cum
KZkJCMVvPEMUvmABwMsheUacRrfU80Q26ERbjNSQPgYaQxdpsuTggjgD89TwY0YE
vIT4fkFpv7bMf/0M16N2feew07A5k+UlB0iC08VoXzaOISk3pG0tY+l3NqGOze3B
TELnBQZOtI5dBgNk9j384PhDw2YMgxEBR050+AchCNijphdjvg==
Generated at Wed Apr 24 21:54:56 2024 by rpki-client on console-fra.rpki-client.org