Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WxDxC7kW7NvLUcSynzi9tYt10MWtv6NEZheEEPy+mGY=
Subject key identifier: 58:7A:BD:6F:C1:DC:6E:FE:1D:DA:0B:39:0F:80:87:62:CA:FB:55:27
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1CCA6834455789E43015CF9D002EF5EC371357BF
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20383334.roa
Signing time: Thu 09 May 2024 00:02:05 +0000
ROA not before: Wed 08 May 2024 23:57:05 +0000
ROA not after: Thu 08 May 2025 00:02:05 +0000
asID: 834
IP address blocks: 109.110.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ca:68:34:45:57:89:e4:30:15:cf:9d:00:2e:f5:ec:37:13:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 8 23:57:05 2024 GMT
Not After : May 8 00:02:05 2025 GMT
Subject: CN=587ABD6FC1DC6EFE1DDA0B390F808762CAFB5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:b4:8c:c5:92:96:26:b8:d2:66:f3:33:c2:
79:1e:65:94:01:84:05:1c:50:1b:4a:c5:99:5d:74:
e8:a3:a1:29:a4:6b:8d:47:c4:0c:b7:2b:ac:be:d6:
3a:65:25:73:b3:a6:7a:3a:21:2a:e7:d6:d8:6d:a7:
9a:fc:68:c9:3a:51:1c:19:d2:19:00:7f:66:42:9a:
fe:d5:b9:ac:1a:55:03:29:14:7e:c6:d6:2c:da:f3:
ea:20:24:04:ee:93:9f:23:be:25:45:2d:b3:e9:df:
15:7d:69:68:13:4d:73:72:b9:7c:18:41:77:2e:c4:
02:3c:61:91:f1:99:9e:cd:72:12:b8:ce:21:84:a8:
ab:68:d0:40:47:9a:c3:d5:28:3b:06:29:2a:cb:0c:
23:9a:95:ab:04:bc:34:c3:c7:15:26:68:98:b0:fe:
87:dc:ed:bb:6a:6d:0a:08:2a:29:78:da:c0:79:98:
a4:5d:88:7a:b7:15:c7:67:bc:0f:88:72:3a:6c:4d:
ce:f4:70:05:c8:ad:72:dc:8b:0f:c3:f3:e6:aa:5b:
f5:78:e6:2a:a4:ac:e9:2b:2d:7d:d8:0f:20:98:89:
27:39:82:78:d3:8a:f5:66:77:b6:36:94:9e:3f:da:
ce:b6:53:b2:6a:ed:69:15:03:d3:e8:de:48:ff:07:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:BD:6F:C1:DC:6E:FE:1D:DA:0B:39:0F:80:87:62:CA:FB:55:27
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.166.0/24
Signature Algorithm: sha256WithRSAEncryption
28:19:f4:0b:a2:19:8d:cb:48:f8:f9:b6:af:e3:10:de:6e:d4:
10:07:95:4c:68:f1:91:f7:d7:ae:ca:fa:00:c9:8f:fb:5c:0c:
2a:58:cf:64:c2:a1:c9:e4:92:d9:22:b8:00:8e:d8:ac:cd:95:
84:cf:62:33:c2:f6:56:ba:97:7b:3f:66:ff:85:c7:40:67:f7:
88:f2:7d:c8:26:3e:f5:2f:b6:26:d5:c0:df:22:97:b5:27:87:
4b:cb:ba:98:34:d8:cb:be:d2:1d:0c:e0:61:d8:06:e6:36:6c:
7a:3a:04:fe:0e:9e:f3:04:f7:da:16:75:b8:76:97:b7:e4:9c:
ce:8e:88:33:9f:e4:d2:8e:04:5e:0a:7a:fa:20:ff:95:39:22:
b0:cb:de:00:da:7f:bf:fa:31:75:08:32:68:cc:c1:65:8f:f6:
a7:14:1b:91:42:3f:a5:f7:49:95:2c:bc:e2:f7:fb:fd:77:78:
ed:b5:f6:a7:4d:4c:e2:bb:5a:79:37:48:e0:26:a3:6e:3c:a1:
33:e0:f3:fe:d7:4a:da:8e:c3:e8:e1:1f:6a:55:e1:48:b6:a1:
56:70:a3:39:35:cf:38:62:c2:45:7a:28:b1:4b:09:ca:fd:eb:
b4:b5:09:30:86:61:e4:e6:dd:f7:02:d2:52:8f:d3:74:34:dd:
8f:8c:d3:49
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHMpoNEVXieQwFc+dAC717DcTV78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDA1MDgyMzU3MDVaFw0yNTA1MDgwMDAyMDVaMDMxMTAvBgNV
BAMTKDU4N0FCRDZGQzFEQzZFRkUxRERBMEIzOTBGODA4NzYyQ0FGQjU1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T7SMxZKWJrjSZvMzwnkeZZQB
hAUcUBtKxZlddOijoSmka41HxAy3K6y+1jplJXOzpno6ISrn1thtp5r8aMk6URwZ
0hkAf2ZCmv7VuawaVQMpFH7G1iza8+ogJATuk58jviVFLbPp3xV9aWgTTXNyuXwY
QXcuxAI8YZHxmZ7NchK4ziGEqKto0EBHmsPVKDsGKSrLDCOalasEvDTDxxUmaJiw
/ofc7btqbQoIKil42sB5mKRdiHq3FcdnvA+IcjpsTc70cAXIrXLciw/D8+aqW/V4
5iqkrOkrLX3YDyCYiSc5gnjTivVmd7Y2lJ4/2s62U7Jq7WkVA9Po3kj/B2efAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWHq9b8Hcbv4d2gs5D4CHYsr7VScwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
pjANBgkqhkiG9w0BAQsFAAOCAQEAKBn0C6IZjctI+Pm2r+MQ3m7UEAeVTGjxkffX
rsr6AMmP+1wMKljPZMKhyeSS2SK4AI7YrM2VhM9iM8L2VrqXez9m/4XHQGf3iPJ9
yCY+9S+2JtXA3yKXtSeHS8u6mDTYy77SHQzgYdgG5jZsejoE/g6e8wT32hZ1uHaX
t+Sczo6IM5/k0o4EXgp6+iD/lTkisMveANp/v/oxdQgyaMzBZY/2pxQbkUI/pfdJ
lSy84vf7/Xd47bX2p01M4rtaeTdI4CajbjyhM+Dz/tdK2o7D6OEfalXhSLahVnCj
OTXPOGLCRXoosUsJyv3rtLUJMIZh5Obd9wLSUo/TdDTdj4zTSQ==
-----END CERTIFICATE-----
Generated at Mon May 20 12:33:11 2024 by rpki-client on console-fra.rpki-client.org