Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20313430323038.roa
File: 3130392e3131302e3136362e302f32342d3234203d3e20313430323038.roa (raw, json)
Hash identifier: fMJEJxaqwR2FLSwGqnzD6HGLcNvvMkWRDNDiTvYMOMc=
Subject key identifier: CE:F8:36:BB:65:62:EB:1E:C2:80:13:06:AB:84:C2:F7:96:0B:9E:9F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3BD5C6241295F876584393013ADB8525B030B00C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20313430323038.roa
Signing time: Sun 10 Mar 2024 10:44:14 +0000
ROA not before: Sun 10 Mar 2024 10:39:14 +0000
ROA not after: Sun 09 Mar 2025 10:44:14 +0000
asID: 140208
IP address blocks: 109.110.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d5:c6:24:12:95:f8:76:58:43:93:01:3a:db:85:25:b0:30:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:39:14 2024 GMT
Not After : Mar 9 10:44:14 2025 GMT
Subject: CN=CEF836BB6562EB1EC2801306AB84C2F7960B9E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:57:12:a6:db:81:e8:47:c6:04:77:3d:53:
7c:5b:8e:ac:fc:ab:70:f2:ff:85:74:98:e0:26:3e:
f7:7e:88:06:39:d3:55:47:4d:53:b7:95:92:55:1c:
0e:50:ad:d8:d3:b5:0f:60:d5:29:51:7c:56:42:c2:
3a:f3:f2:a3:8a:be:09:6a:51:ea:83:55:36:3b:76:
17:7d:dc:ec:7c:bc:1f:5a:96:58:97:3e:c8:a0:7b:
22:f3:16:5e:2d:94:a1:53:db:3b:fe:cb:8e:6f:89:
41:54:cd:c5:67:5a:1d:c5:43:04:d9:96:5a:a7:3a:
e0:38:69:28:4b:e6:78:14:09:1e:b4:89:09:e7:f7:
70:47:f1:7c:c2:b4:59:e4:d4:55:ee:a6:51:4a:37:
64:ec:66:8a:39:9c:08:62:a5:07:b1:59:66:b3:8e:
95:91:6f:03:46:5c:2d:7b:50:51:55:02:20:14:d0:
2b:83:56:2d:a1:09:bc:fa:4a:27:8d:f2:1a:a9:0e:
26:39:27:63:12:ee:3d:fb:43:5b:19:81:e5:e2:89:
52:7e:8c:55:6c:fb:b3:36:91:6d:cc:be:ce:28:96:
31:a6:de:40:20:15:ff:d1:bf:b5:f3:d4:b5:20:77:
3a:fe:69:0e:a0:05:4a:e2:4c:84:d4:97:26:97:65:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:36:BB:65:62:EB:1E:C2:80:13:06:AB:84:C2:F7:96:0B:9E:9F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20313430323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.166.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ad:10:a9:6c:f2:4b:a7:59:2c:a4:3a:aa:b1:ba:39:65:df:
fb:f7:68:fa:79:58:03:a2:07:32:d9:51:dd:76:3b:27:48:d0:
55:1e:94:4e:1b:49:97:a3:69:19:d9:94:09:8b:f3:56:0f:d8:
7e:cb:c9:c7:1a:4b:24:3c:8e:e3:e9:21:e1:b2:90:26:82:c7:
cf:0a:cd:29:a8:0c:30:3a:45:49:5d:d3:c5:27:af:dc:d5:9b:
58:49:ab:f0:b3:31:8d:95:d8:00:0d:10:c3:13:f9:4c:98:41:
78:9f:55:cd:b9:97:19:37:6e:1b:ed:7d:8c:f3:91:ce:61:c8:
a9:5b:97:38:ab:85:05:74:4d:9f:6d:83:21:49:57:c6:c1:ec:
c1:63:db:44:40:33:0c:5f:6f:45:e0:a6:cc:9a:dd:a1:7b:2b:
b9:b8:00:d6:5d:1e:62:fb:df:f8:aa:0c:f4:2a:77:c5:54:6c:
e6:99:9b:69:9e:5a:41:df:e0:31:53:be:72:f8:7a:84:30:0f:
4f:44:47:0c:a4:9b:90:01:aa:83:bf:1b:8e:be:20:5b:f4:88:
92:f6:8e:31:b9:5e:e9:26:85:b0:1f:54:19:8f:8c:0d:53:34:
64:96:f1:d9:98:a9:75:ac:09:71:d3:8a:9b:e0:68:e9:d7:76:
7b:85:60:9a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUO9XGJBKV+HZYQ5MBOtuFJbAwsAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAzMTAxMDM5MTRaFw0yNTAzMDkxMDQ0MTRaMDMxMTAvBgNV
BAMTKENFRjgzNkJCNjU2MkVCMUVDMjgwMTMwNkFCODRDMkY3OTYwQjlFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZVcSptuB6EfGBHc9U3xbjqz8
q3Dy/4V0mOAmPvd+iAY501VHTVO3lZJVHA5QrdjTtQ9g1SlRfFZCwjrz8qOKvglq
UeqDVTY7dhd93Ox8vB9alliXPsigeyLzFl4tlKFT2zv+y45viUFUzcVnWh3FQwTZ
llqnOuA4aShL5ngUCR60iQnn93BH8XzCtFnk1FXuplFKN2TsZoo5nAhipQexWWaz
jpWRbwNGXC17UFFVAiAU0CuDVi2hCbz6SieN8hqpDiY5J2MS7j37Q1sZgeXiiVJ+
jFVs+7M2kW3Mvs4oljGm3kAgFf/Rv7Xz1LUgdzr+aQ6gBUriTITUlyaXZSsdAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUzvg2u2Vi6x7CgBMGq4TC95YLnp8wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1upjANBgkqhkiG9w0BAQsFAAOCAQEAYa0QqWzyS6dZLKQ6qrG6OWXf+/do
+nlYA6IHMtlR3XY7J0jQVR6UThtJl6NpGdmUCYvzVg/YfsvJxxpLJDyO4+kh4bKQ
JoLHzwrNKagMMDpFSV3TxSev3NWbWEmr8LMxjZXYAA0QwxP5TJhBeJ9VzbmXGTdu
G+19jPORzmHIqVuXOKuFBXRNn22DIUlXxsHswWPbREAzDF9vReCmzJrdoXsrubgA
1l0eYvvf+KoM9Cp3xVRs5pmbaZ5aQd/gMVO+cvh6hDAPT0RHDKSbkAGqg78bjr4g
W/SIkvaOMble6SaFsB9UGY+MDVM0ZJbx2ZipdawJcdOKm+Bo6dd2e4Vgmg==
-----END CERTIFICATE-----
Generated at Thu May 9 00:39:13 2024 by rpki-client on console-ams.rpki-client.org