Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32322d3232203d3e20323132323338.roa
File: 3130392e3131302e3136342e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier: ChuKXj3ZswD/DRsj306Kv+A40LvJUPsv5VSMln/LhEY=
Subject key identifier: FD:C9:CF:7F:01:2B:59:FC:FC:49:2F:3D:A4:CA:E8:98:A1:E9:35:49
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0FFF3C64A32C4682F2DD754D0B6CC649EC53A71C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32322d3232203d3e20323132323338.roa
Signing time: Thu 01 Feb 2024 04:17:03 +0000
ROA not before: Thu 01 Feb 2024 04:12:03 +0000
ROA not after: Thu 30 Jan 2025 04:17:03 +0000
asID: 212238
IP address blocks: 109.110.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ff:3c:64:a3:2c:46:82:f2:dd:75:4d:0b:6c:c6:49:ec:53:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 1 04:12:03 2024 GMT
Not After : Jan 30 04:17:03 2025 GMT
Subject: CN=FDC9CF7F012B59FCFC492F3DA4CAE898A1E93549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:e8:29:43:e1:dc:5a:70:73:22:c0:dd:b9:
82:95:88:c8:c5:f4:46:46:ed:fe:d4:f4:34:e9:e7:
ae:fd:24:c5:d2:7b:4a:66:51:c1:44:69:74:46:20:
2d:99:a6:ce:60:bd:80:e1:26:75:15:a4:14:62:aa:
9f:be:b8:4c:1c:a2:3a:ad:66:d3:ce:22:28:a1:be:
a3:bf:e2:b3:52:60:b8:96:ae:b1:71:76:8b:50:00:
92:b0:b0:f4:cf:f9:c9:af:90:40:21:88:06:92:35:
8e:a0:83:15:7b:b0:e3:3b:dd:3f:3f:ac:b2:ec:f8:
f4:b9:06:22:f8:9f:1b:39:77:70:8b:df:05:45:a1:
4e:ae:50:62:17:fc:df:b1:84:2c:2f:24:fe:b1:54:
e7:43:54:ec:65:f4:e2:cc:75:04:57:61:e5:da:8f:
0f:91:05:49:51:88:8f:34:33:3c:a7:1c:66:da:43:
dd:10:33:e3:b4:5f:7c:4b:2d:18:b6:c6:b8:ae:aa:
01:68:29:30:1e:0a:70:a4:04:f5:79:44:1b:6c:0c:
29:3e:f9:46:0b:bf:f8:43:92:84:6e:6a:b8:11:31:
fc:d4:aa:1f:34:d0:59:f1:5c:dd:f1:43:a3:b3:46:
9b:95:d8:4f:5a:74:14:68:8c:e4:09:e3:74:21:11:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:CF:7F:01:2B:59:FC:FC:49:2F:3D:A4:CA:E8:98:A1:E9:35:49
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32322d3232203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.164.0/22
Signature Algorithm: sha256WithRSAEncryption
26:ef:d2:4f:3b:3d:9c:45:cc:72:17:11:7e:88:25:2d:38:49:
e2:69:c1:af:f5:81:67:ff:79:ac:78:ec:c9:5d:07:7a:fc:a2:
f3:b8:46:42:32:64:05:69:5c:ef:68:82:ba:3b:4c:00:73:2c:
71:27:0b:74:fa:66:38:21:81:05:82:0a:f4:d8:9a:dd:1b:10:
b0:4a:07:d2:f3:98:81:dc:4f:7e:9e:14:fe:2b:88:ce:a5:c4:
af:aa:c6:ce:5c:3f:5c:95:3a:68:74:db:19:f8:fe:bf:cf:5a:
74:70:fa:21:ab:98:81:97:43:67:04:dc:71:63:20:7e:65:9d:
2f:c8:56:84:18:01:cc:0e:15:20:14:59:cb:4a:f8:3b:9c:31:
ac:25:1d:9c:5e:e0:18:26:3e:e5:da:36:1e:f7:13:45:68:8d:
cb:e6:61:ce:dc:46:30:84:94:c8:47:b5:da:d5:c0:55:e2:ef:
73:ea:f7:3f:32:06:db:32:53:30:11:f3:cc:34:01:3f:49:44:
2e:6a:1a:41:25:2a:0f:57:3c:51:b5:38:bd:56:48:9b:fc:f0:
8d:f7:f4:13:05:d2:75:24:2c:2a:21:7d:d0:85:fe:cc:03:aa:
a8:7f:f9:9f:a5:15:12:7f:1a:5f:53:9f:fe:89:b8:fe:74:91:
ca:a4:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:19:06 2024 by rpki-client on console-ams.rpki-client.org