Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AtGqJdn2aA7mvkxfqYxS9en92x5DE1MHNXjxcy/gnaM=
Subject key identifier: 83:1A:81:C4:0B:91:0F:AA:9F:97:A7:E5:C9:51:EB:93:9B:BF:15:62
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 63B9C2A3E4D62C8E2C2BE193EC17AC493396C8A9
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20383334.roa
Signing time: Tue 02 Apr 2024 13:34:26 +0000
ROA not before: Tue 02 Apr 2024 13:29:26 +0000
ROA not after: Tue 01 Apr 2025 13:34:26 +0000
asID: 834
IP address blocks: 109.110.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b9:c2:a3:e4:d6:2c:8e:2c:2b:e1:93:ec:17:ac:49:33:96:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 2 13:29:26 2024 GMT
Not After : Apr 1 13:34:26 2025 GMT
Subject: CN=831A81C40B910FAA9F97A7E5C951EB939BBF1562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:31:ff:05:70:fc:d8:44:45:a9:ab:86:4f:
d5:4a:91:ad:42:eb:68:fb:fb:d7:ba:d5:14:d0:8f:
40:73:0e:e4:82:f0:d7:93:6a:32:e9:3e:e3:b0:2c:
97:03:55:82:db:ac:85:e8:60:5d:38:d6:0d:ec:cb:
9c:f3:11:da:cf:c7:ae:15:cb:e1:21:3d:6a:c0:d4:
86:37:3b:0f:76:eb:ab:3b:48:bf:ba:ee:db:b2:2a:
84:9a:60:50:9c:97:82:f8:b2:43:59:14:6c:ed:2c:
01:7c:c8:67:f0:50:ef:95:c1:72:d4:a4:fc:b7:c7:
9e:ed:61:29:2a:20:99:5a:47:17:f8:3e:71:8a:97:
69:c7:42:16:6d:b3:fa:43:95:e9:b8:e1:b7:fa:59:
6f:12:2e:02:4d:29:e4:ec:a8:3b:9a:1a:32:81:34:
d5:8a:52:2e:cc:84:3c:cb:03:13:90:70:ac:a9:7c:
0a:cd:fb:35:c5:07:16:32:43:dd:d1:95:fb:e1:c8:
ea:02:d0:03:75:a4:2b:27:6d:0d:05:fc:85:25:8c:
8e:1d:3b:0c:e8:13:6e:7f:95:b4:ac:a0:af:c1:8e:
cf:c0:8b:ea:e3:70:e7:36:ba:df:af:a3:d9:c2:6c:
c7:cd:18:02:ac:c8:75:3e:57:06:ac:57:23:e0:c1:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:81:C4:0B:91:0F:AA:9F:97:A7:E5:C9:51:EB:93:9B:BF:15:62
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.163.0/24
Signature Algorithm: sha256WithRSAEncryption
07:72:19:37:43:c2:ed:94:ad:3e:97:a4:0a:ce:91:4a:af:f8:
a0:28:c5:ec:fa:9d:d7:08:7a:15:c3:b7:da:ba:bb:52:ab:21:
b4:69:08:2b:cd:48:d8:d8:e4:bb:55:6c:d5:9a:58:71:93:69:
64:43:a8:7b:7c:69:9e:a3:dd:72:e1:75:fa:ba:72:47:20:cb:
d3:91:84:04:e0:ab:33:52:cb:e5:b9:74:53:04:61:cf:14:be:
33:e9:e5:c1:2c:e0:65:eb:51:86:22:f9:78:32:c9:2b:67:2d:
01:7e:34:1c:d2:ca:a6:50:9d:02:0e:83:00:92:cf:22:09:27:
23:2a:5c:f8:cb:31:2c:72:01:fb:dc:31:83:4a:76:0b:6f:20:
0d:c0:07:5f:20:8c:b9:5d:06:38:8a:af:3f:8d:52:90:ad:0d:
73:43:d5:d2:be:be:d9:2c:29:7c:e8:8f:cd:37:bb:22:fe:40:
f2:ba:4c:2f:6c:ea:a2:66:3e:ba:c8:4a:af:88:e4:7c:df:d9:
bc:f6:57:e2:ed:29:89:66:51:70:09:19:45:c9:b7:62:6b:b9:
08:fc:c3:72:a0:81:84:91:8d:f7:2a:4b:01:dd:6c:75:e4:e1:
32:f9:93:6e:d6:1f:55:29:5e:20:2e:a4:26:d0:b7:ab:fc:5a:
61:6b:2c:0f
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org