Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3136342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: VkA/yJi/Xw0fPSVwn2TvZ4ojDa1hQpqbmqrL1YFWzuk=
Subject key identifier: B6:09:52:0B:88:3C:C9:34:63:23:93:64:06:C5:C0:9D:91:B9:A6:D9
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5B22B66842009DEE4DCC00B79161528D9FAA5D70
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32332d3234203d3e20383334.roa
Signing time: Thu 09 May 2024 00:02:05 +0000
ROA not before: Wed 08 May 2024 23:57:05 +0000
ROA not after: Thu 08 May 2025 00:02:05 +0000
asID: 834
IP address blocks: 109.110.164.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:22:b6:68:42:00:9d:ee:4d:cc:00:b7:91:61:52:8d:9f:aa:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 8 23:57:05 2024 GMT
Not After : May 8 00:02:05 2025 GMT
Subject: CN=B609520B883CC9346323936406C5C09D91B9A6D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:2d:b7:c9:a5:34:d5:27:39:26:1b:c1:4c:
2c:2e:04:1b:9e:a1:28:c1:45:f9:7f:6a:00:8c:0c:
06:a4:aa:31:c4:4c:41:1b:b6:5e:84:33:e7:9f:2c:
56:a6:61:ff:03:2c:32:1c:b5:0a:b8:d5:fb:1e:6d:
09:12:03:3f:8a:2f:dd:23:70:35:e6:ce:e1:aa:90:
c0:28:f0:b0:5a:ac:33:51:3b:ec:62:c1:ed:7e:7e:
65:a4:4d:ae:1f:28:39:08:10:b7:7f:b5:ae:86:8f:
68:19:e8:52:32:09:8f:55:cc:73:4f:7e:ca:32:dd:
66:ef:1a:75:05:bd:ec:16:c1:e8:02:a3:2d:cc:f7:
7a:4c:13:71:2f:20:9c:55:24:82:10:2a:56:f8:40:
20:18:da:d6:b3:44:09:d4:5f:d2:d7:35:fa:d4:e7:
d9:36:90:61:c8:d8:93:f8:30:03:74:a8:8b:e7:77:
d4:86:fe:6b:2d:09:e1:10:e0:9d:11:56:e1:28:32:
a8:73:9b:43:bf:f0:3a:ab:b8:a9:dc:e3:05:22:1f:
ee:13:eb:c9:2c:d0:97:db:42:17:20:ea:d8:03:41:
be:f7:6a:1a:29:83:c9:54:09:a5:48:1b:6d:2d:65:
00:78:d2:bd:3a:67:87:15:5e:cf:56:32:51:ca:4d:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:52:0B:88:3C:C9:34:63:23:93:64:06:C5:C0:9D:91:B9:A6:D9
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.164.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:6b:13:5d:f8:40:3d:7f:00:fd:33:2c:f6:8e:8f:a5:34:84:
74:09:1b:f6:9b:20:86:99:b4:43:57:7f:ed:f8:52:ab:b3:56:
62:20:94:e1:f3:7a:24:30:2e:b9:80:43:a7:8d:c6:aa:2b:c7:
bb:38:db:84:d8:a0:c3:1d:d8:85:43:84:77:df:fa:a5:88:bb:
85:81:29:5f:48:de:d3:75:c0:23:89:ea:3b:28:a5:40:59:bb:
34:ff:b2:89:91:1e:47:e8:70:af:9e:5b:72:23:70:91:8d:cf:
b0:e4:59:8b:39:a5:c2:09:15:dc:fa:6e:00:15:94:58:96:70:
da:27:c5:70:37:cd:e5:ef:cf:21:0e:57:c5:a2:11:a2:45:2d:
a5:28:ae:ef:de:41:73:7e:92:19:89:95:b6:5c:bf:8f:b5:52:
e4:cd:70:92:d6:bd:bf:6e:81:08:db:3d:12:60:f3:26:14:9d:
15:bc:9a:9a:e2:36:4b:83:87:ab:1a:36:73:19:fb:ca:40:2c:
11:c0:67:4a:ea:53:31:36:40:c2:2f:71:05:ac:2e:9a:aa:70:
09:3a:73:24:e9:83:2f:b0:3f:cb:2b:2b:cb:e9:37:ae:21:ac:
d8:05:d3:b1:6e:87:15:3a:2a:ef:e5:27:80:b1:41:5c:e7:31:
0c:fe:02:53
-----BEGIN CERTIFICATE-----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Generated at Sat May 11 03:15:35 2024 by rpki-client on console-fra.rpki-client.org