Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20313430323038.roa
File: 3130392e3131302e3136352e302f32342d3234203d3e20313430323038.roa (raw, json)
Hash identifier: WVqMMcgfFs8vtG+MP3mv5dyf03jfg1ipR4HlIOoLirs=
Subject key identifier: 5D:DD:A3:C5:E0:C7:A9:F8:5C:30:77:73:6C:3A:F9:F3:BE:A9:5F:87
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6B458EEC392B73F3145344781F3019006AB7D567
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20313430323038.roa
Signing time: Sun 10 Mar 2024 10:44:14 +0000
ROA not before: Sun 10 Mar 2024 10:39:14 +0000
ROA not after: Sun 09 Mar 2025 10:44:14 +0000
asID: 140208
IP address blocks: 109.110.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:45:8e:ec:39:2b:73:f3:14:53:44:78:1f:30:19:00:6a:b7:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:39:14 2024 GMT
Not After : Mar 9 10:44:14 2025 GMT
Subject: CN=5DDDA3C5E0C7A9F85C3077736C3AF9F3BEA95F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:17:9d:92:7d:60:18:5c:e0:9b:73:2f:fc:
dc:22:8c:7b:44:48:18:74:3f:70:da:07:b3:1f:ac:
db:b1:59:c5:79:38:ca:8f:50:53:5e:5e:48:a1:1f:
66:0a:b7:56:2a:b3:37:4f:b4:6b:d0:f6:3a:da:e9:
46:2c:c2:35:79:26:4f:11:aa:90:71:b9:52:a9:38:
72:91:15:a8:f8:6e:ba:cd:f5:a3:14:61:81:c6:10:
de:40:bd:9a:04:2e:c6:84:3f:75:d0:3c:3f:6e:e8:
47:ec:b4:80:7b:69:e9:49:27:74:5c:c0:e1:ca:81:
7c:79:d5:47:b0:a8:80:94:53:6b:40:35:b5:91:ea:
73:ad:36:e8:5f:33:d9:20:2c:9d:5a:12:d0:9a:72:
6d:0d:6a:fe:ae:00:0f:63:15:10:6e:05:37:d6:4f:
7c:0d:fb:75:86:92:cf:ad:ac:81:36:7d:ff:16:8b:
ad:ac:39:f7:a9:51:77:38:86:a5:98:9d:67:e1:7b:
f5:b5:b2:b6:ba:a9:3e:7e:56:4c:5e:7f:e2:3b:fa:
0e:72:54:76:46:dc:58:7a:2b:ea:99:a8:a9:62:b5:
22:97:09:90:3c:30:06:08:90:fe:08:61:d5:70:21:
0d:20:a0:e0:cc:bb:dd:9d:6d:2a:b0:3e:1c:a8:d6:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:A3:C5:E0:C7:A9:F8:5C:30:77:73:6C:3A:F9:F3:BE:A9:5F:87
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20313430323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.165.0/24
Signature Algorithm: sha256WithRSAEncryption
03:84:13:1d:60:26:bb:b6:7f:a8:2e:cd:80:85:c7:26:f0:0c:
1d:8f:85:ef:8f:34:f6:e3:f3:41:b8:20:6a:3b:2b:12:8f:51:
cb:b4:78:ca:18:21:d4:3b:84:55:93:e3:c7:a9:4d:64:d4:18:
b5:06:82:17:b1:11:4f:35:86:55:44:d4:87:0f:aa:d7:1e:d7:
29:5a:63:bf:78:6e:cb:fe:28:b4:f3:0b:e8:33:24:28:c0:50:
b0:0b:a0:c4:e5:69:a2:20:3a:8f:c8:5d:08:56:85:4d:7d:50:
7e:57:ab:ce:a3:00:77:32:66:84:a1:fa:1c:f9:e4:dd:4f:d3:
20:cc:cc:12:ed:ff:5e:04:3f:39:60:a3:2a:ca:70:29:d1:12:
00:1b:00:49:27:7e:9f:af:86:00:b3:78:3c:00:7a:6f:17:96:
0e:d4:fa:4b:57:65:95:c9:60:ed:6a:2e:ad:8e:3a:ab:a6:4d:
67:cc:34:a0:bf:f5:51:9b:2e:92:d9:79:2e:0d:23:87:82:2c:
d3:b0:2d:70:4a:d6:28:bc:b8:3d:8f:02:85:b6:0e:da:b2:b6:
a8:45:15:c0:03:7e:37:8f:17:d0:66:53:61:7d:f9:c1:fe:09:
36:ce:4f:80:27:79:ed:3b:20:9f:ea:9a:ef:66:e5:d0:f7:9c:
7b:8a:17:9d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUa0WO7Dkrc/MUU0R4HzAZAGq31WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAzMTAxMDM5MTRaFw0yNTAzMDkxMDQ0MTRaMDMxMTAvBgNV
BAMTKDVERERBM0M1RTBDN0E5Rjg1QzMwNzc3MzZDM0FGOUYzQkVBOTVGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKBedkn1gGFzgm3Mv/NwijHtE
SBh0P3DaB7MfrNuxWcV5OMqPUFNeXkihH2YKt1YqszdPtGvQ9jra6UYswjV5Jk8R
qpBxuVKpOHKRFaj4brrN9aMUYYHGEN5AvZoELsaEP3XQPD9u6EfstIB7aelJJ3Rc
wOHKgXx51UewqICUU2tANbWR6nOtNuhfM9kgLJ1aEtCacm0Nav6uAA9jFRBuBTfW
T3wN+3WGks+trIE2ff8Wi62sOfepUXc4hqWYnWfhe/W1sra6qT5+Vkxef+I7+g5y
VHZG3Fh6K+qZqKlitSKXCZA8MAYIkP4IYdVwIQ0goODMu92dbSqwPhyo1kmFAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUXd2jxeDHqfhcMHdzbDr5876pX4cwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1upTANBgkqhkiG9w0BAQsFAAOCAQEAA4QTHWAmu7Z/qC7NgIXHJvAMHY+F
74809uPzQbggajsrEo9Ry7R4yhgh1DuEVZPjx6lNZNQYtQaCF7ERTzWGVUTUhw+q
1x7XKVpjv3huy/4otPML6DMkKMBQsAugxOVpoiA6j8hdCFaFTX1QflerzqMAdzJm
hKH6HPnk3U/TIMzMEu3/XgQ/OWCjKspwKdESABsASSd+n6+GALN4PAB6bxeWDtT6
S1dllclg7WourY46q6ZNZ8w0oL/1UZsuktl5Lg0jh4Is07AtcErWKLy4PY8ChbYO
2rK2qEUVwAN+N48X0GZTYX35wf4JNs5PgCd57Tsgn+qa72bl0Pece4oXnQ==
-----END CERTIFICATE-----
Generated at Thu May 9 00:39:13 2024 by rpki-client on console-ams.rpki-client.org