Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Pimrt1Aij4vufy/HypgTfEVBCAMu4ftH9xSCTrfZ1qQ=
Subject key identifier: 0A:7D:84:AC:0F:92:1E:38:4F:9B:7E:4F:00:E0:F5:E2:70:55:49:E7
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 03D15C68B9CF5C63E6C9E33C77EEA2AF51158E11
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20383334.roa
Signing time: Sat 11 May 2024 01:01:33 +0000
ROA not before: Sat 11 May 2024 00:56:33 +0000
ROA not after: Sat 10 May 2025 01:01:33 +0000
asID: 834
IP address blocks: 109.110.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 09:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d1:5c:68:b9:cf:5c:63:e6:c9:e3:3c:77:ee:a2:af:51:15:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 11 00:56:33 2024 GMT
Not After : May 10 01:01:33 2025 GMT
Subject: CN=0A7D84AC0F921E384F9B7E4F00E0F5E2705549E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:fa:7b:c7:0d:5f:56:c1:a5:a5:9d:c1:c2:
50:12:ea:61:bb:1b:ce:2a:a9:03:3f:8e:6b:10:62:
ee:c8:03:65:72:bd:44:61:f8:e5:ee:b7:bf:4d:70:
64:75:60:dd:72:d4:16:74:4d:18:c7:24:cb:f1:fa:
1a:6b:74:64:d1:71:97:01:68:25:40:93:2c:c3:4b:
e7:ab:eb:31:cd:38:c9:dd:2d:71:2f:68:9f:e3:34:
70:e3:11:78:57:0c:1f:6c:0a:a7:e4:83:45:65:fe:
f9:70:7d:33:fe:e7:27:ad:25:78:e3:3e:15:00:b1:
69:e6:0b:ef:49:e3:ca:54:78:c8:2b:dd:a5:5d:bb:
6a:b1:a5:04:10:71:ea:79:20:b5:0b:fa:33:9d:de:
24:60:8c:da:ff:d1:ad:90:a8:96:f2:25:ca:1f:d2:
9a:e9:9e:1a:3d:2b:d8:8c:d7:07:0f:b5:df:a3:70:
f0:b2:b1:e2:89:d9:ef:2b:14:44:4b:b0:65:53:3b:
15:f0:1d:11:05:c1:fc:e9:10:41:03:d1:b9:80:d9:
ce:eb:16:d1:ef:7e:ca:75:d7:e2:61:7b:09:02:71:
e9:29:d9:de:a2:94:ca:fc:4e:ec:68:60:ca:b6:01:
8c:ec:92:1f:d4:59:9d:61:ea:6f:0a:e7:40:3e:d7:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7D:84:AC:0F:92:1E:38:4F:9B:7E:4F:00:E0:F5:E2:70:55:49:E7
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.165.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a4:7d:60:8a:31:c8:f0:7a:a1:df:6a:93:c5:0d:43:8a:02:
f8:b3:9b:fd:27:81:58:be:a3:93:52:ae:55:5c:a3:fe:f8:77:
1a:46:1f:62:ff:6c:67:5d:88:e5:92:2c:f4:db:64:a1:c6:63:
07:b2:b6:ab:fc:b8:f2:3c:9f:e6:ef:04:44:d0:37:a0:49:8e:
87:ab:2a:b2:7f:62:3f:2c:ba:d9:3a:07:a3:36:4f:e0:cf:c6:
a3:15:49:81:68:21:64:f7:51:c3:f2:70:a9:5d:53:40:f4:57:
ee:98:a4:ca:b6:01:e6:1c:a0:5d:12:5e:9c:f7:f3:3d:c7:76:
9d:38:af:9e:87:10:a3:25:15:fa:76:90:ce:b1:5b:71:ae:8a:
17:4d:dc:a3:b5:9f:a2:22:d6:f2:d7:f6:fd:1a:86:19:80:94:
34:53:26:96:e8:59:4a:e3:03:98:e4:1a:07:af:81:e8:c9:da:
88:c8:6c:8f:8a:e0:67:a1:46:ee:04:29:26:ae:c2:3b:94:01:
24:fb:48:60:b5:dd:35:6c:29:6e:58:79:19:3c:c8:92:78:14:
13:b3:73:a0:9d:c2:49:8e:50:15:89:b2:57:3b:77:df:27:53:
f2:e9:32:6e:0c:7d:d7:70:c5:b9:ad:a0:0a:3c:d8:c1:5b:eb:
dd:a8:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:58 2025 by rpki-client