Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: MPQlmfMvzQvlA4Zinp7hayg7DL4pWQwf/cHEuZPji/Y=
Subject key identifier: 29:FA:1D:E7:E7:EE:D4:78:C8:31:D0:51:F0:1B:89:E9:33:14:76:07
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3FC8B71ED8509037770DA7305F140DC26011CEDB
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Jun 2024 00:04:23 +0000
ROA not before: Mon 10 Jun 2024 23:59:23 +0000
ROA not after: Tue 10 Jun 2025 00:04:23 +0000
asID: 834
IP address blocks: 109.110.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 07:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c8:b7:1e:d8:50:90:37:77:0d:a7:30:5f:14:0d:c2:60:11:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 10 23:59:23 2024 GMT
Not After : Jun 10 00:04:23 2025 GMT
Subject: CN=29FA1DE7E7EED478C831D051F01B89E933147607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:ad:a9:b6:7d:da:01:ac:bd:82:ed:ee:db:
99:36:2b:b0:eb:b0:ed:2f:35:a6:45:04:11:73:81:
58:b1:a0:fb:55:a2:dd:20:19:62:5b:b5:68:0a:c3:
9a:fc:61:4d:88:45:03:12:00:46:a6:90:04:cf:65:
6e:82:47:e3:46:cb:b7:12:16:08:ba:76:b4:5e:48:
36:b0:13:1e:7f:bd:38:f3:ce:7b:31:ec:7e:9d:5a:
c5:4e:43:58:c9:7d:72:6a:b2:43:7c:4e:02:16:f8:
5e:1e:47:90:41:29:38:62:de:23:b3:c3:ac:87:2d:
56:2a:b9:af:84:ba:cc:d4:f9:be:10:50:5d:4b:5f:
64:1b:cf:00:ed:65:e7:ea:2f:4e:ec:1d:b9:f8:62:
4c:09:93:eb:1d:ca:3a:0c:57:08:16:2b:59:3a:a3:
e9:e8:43:8c:ce:03:32:94:7c:e9:b8:0c:ad:6e:92:
f1:6f:8e:b0:57:57:8b:a8:9b:a7:d1:a4:33:fb:78:
7b:1f:d7:7c:2e:87:48:ce:a3:5b:79:de:62:4f:56:
7a:5f:9e:94:82:5d:45:8a:2f:d2:bf:0e:83:75:67:
26:d9:34:ca:23:c6:2e:1a:b9:fc:f2:07:69:61:75:
cd:fa:d4:07:24:45:98:a6:f1:d7:c6:1c:7a:f2:22:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:1D:E7:E7:EE:D4:78:C8:31:D0:51:F0:1B:89:E9:33:14:76:07
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:42:ac:a9:b6:96:15:98:f3:09:e1:53:46:30:e5:fd:a0:78:
ee:1b:97:46:0a:44:1d:d3:9b:1e:98:f6:27:6e:d0:19:68:cc:
66:e0:07:bc:d5:cf:99:13:84:77:2b:90:39:45:83:5c:a3:d7:
21:6a:5a:84:04:3f:31:a1:60:28:c2:e2:42:e4:83:aa:0b:5f:
8e:9d:4e:9c:be:96:bc:9c:a8:cc:f8:b2:6b:80:be:c9:d7:17:
e1:b8:a1:0e:9b:bc:b8:bb:e0:10:89:05:03:59:0d:d4:3a:cb:
d8:ba:da:89:af:17:6d:e8:83:75:73:ec:a4:68:7c:c9:e9:79:
8c:1c:e7:0a:b0:49:74:7e:07:9c:61:ae:0a:2e:73:be:e5:f9:
54:da:da:18:6a:4e:ae:6e:64:1c:f8:c2:d9:56:85:64:c5:43:
00:af:80:13:22:2c:67:21:68:10:5e:95:5c:d6:17:6f:28:fc:
32:97:12:de:82:29:b1:34:68:9d:d9:8c:f2:57:06:15:4f:fe:
06:83:e2:83:45:61:b2:3a:30:85:97:4c:6f:2a:47:ba:18:79:
5c:b7:29:a9:0e:1b:ef:a1:fb:32:f3:ea:58:38:e3:74:43:57:
20:0b:62:b9:85:e2:99:23:56:55:c2:d4:61:d4:9a:9c:82:f7:
16:30:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:46 2025 by rpki-client