Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3136362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: KupJUIoi2km8ivlfH3Zv+lFypjkmejfzdPQH7eSv8yQ=
Subject key identifier: BF:E9:1A:7C:3C:62:22:0A:3E:7C:6B:19:DA:5B:41:28:4E:81:E9:66
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1D3693FDB26554C3CC3A0F913846E8E218BF532B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32332d3234203d3e20383334.roa
Signing time: Mon 20 May 2024 10:08:01 +0000
ROA not before: Mon 20 May 2024 10:03:01 +0000
ROA not after: Mon 19 May 2025 10:08:01 +0000
asID: 834
IP address blocks: 109.110.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:36:93:fd:b2:65:54:c3:cc:3a:0f:91:38:46:e8:e2:18:bf:53:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 20 10:03:01 2024 GMT
Not After : May 19 10:08:01 2025 GMT
Subject: CN=BFE91A7C3C62220A3E7C6B19DA5B41284E81E966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:4a:b4:10:02:d0:15:38:44:c1:32:78:2a:
84:4e:22:26:88:41:dd:85:95:76:37:5d:95:12:35:
0c:58:67:c0:60:75:fd:c4:41:01:2c:ec:a2:91:b5:
9d:40:58:47:d5:58:b6:e0:aa:d4:64:47:1f:76:7f:
8a:cf:b5:72:a3:2a:34:5a:17:96:2d:8a:f4:9a:4d:
b3:27:36:15:27:ea:85:22:2e:d4:39:1f:9d:5d:be:
cd:84:0a:08:19:6d:dd:8d:7c:28:2f:f9:ac:33:7d:
df:0b:8b:9e:3c:a7:c4:e9:6b:6b:67:47:75:29:c1:
3f:19:87:1b:48:9e:f2:9d:00:00:c0:13:b0:38:d2:
a8:25:2a:b5:59:5c:f3:7b:64:dc:95:80:b1:53:2a:
6b:e2:4e:7e:64:27:26:47:30:87:17:42:b8:e9:e4:
17:66:97:1b:e0:5e:6a:cd:2e:f9:77:ad:de:5d:85:
2c:ea:de:1c:e5:cc:0e:27:41:ff:d6:e4:6f:d8:18:
ab:25:9f:70:ab:d6:07:59:3d:25:71:41:65:92:a7:
5e:b1:68:09:4d:75:b6:22:a8:0b:51:e0:68:f5:87:
7d:89:bc:65:41:09:7c:d6:f7:83:23:6a:ea:06:f5:
11:7d:51:75:7a:c6:f2:5f:cc:19:61:51:e1:b6:ec:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:1A:7C:3C:62:22:0A:3E:7C:6B:19:DA:5B:41:28:4E:81:E9:66
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.166.0/23
Signature Algorithm: sha256WithRSAEncryption
59:de:68:0d:06:d0:43:42:68:80:0a:ff:02:ee:cc:07:5e:dc:
9c:10:ce:d2:c6:c2:15:83:a2:4f:d1:8c:13:1e:7b:6d:11:79:
d8:0f:30:ae:a6:65:6e:99:c5:4b:cc:13:d4:b4:c5:85:14:0a:
9f:a7:9a:13:ea:f9:04:4f:b6:46:cc:23:f4:c2:a9:09:bf:d7:
da:54:d9:e2:f6:bd:69:5b:2e:e1:97:6c:5d:d9:7b:a6:bd:2c:
e4:32:f7:89:18:ca:9e:ba:0d:8b:fd:39:09:14:0c:7b:49:63:
59:7a:ad:03:5e:37:dd:47:98:bb:1b:e6:0d:dd:a7:2c:0e:57:
74:2d:19:62:ab:9b:e5:83:59:d1:78:9f:c3:9c:f8:44:12:81:
e0:11:31:8c:0b:07:b6:68:f4:dd:5c:25:e8:ed:45:00:28:39:
c2:9e:eb:b7:5b:97:06:df:c3:3d:b9:b9:16:e3:70:56:9c:e6:
f6:26:d5:7f:66:4c:71:02:77:77:50:c0:ad:9b:3a:d5:ef:c2:
e8:56:d1:08:f0:96:ba:bb:24:67:fa:af:c6:5f:43:6d:6d:ca:
86:a6:fa:ad:ae:61:43:fe:98:04:b1:92:f2:75:05:4e:db:4e:
0a:7d:3f:b7:fd:ec:2e:d7:38:63:6e:c7:2f:7a:5d:8a:8d:01:
46:f0:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:37 2025 by rpki-client