Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303539.roa
File: 3130392e3131302e3136372e302f32342d3234203d3e20323136303539.roa (raw, json)
Hash identifier: 8jgfLi7UMbvboGleTBlLnhCE3vTBiXUeGJeIGKIXSjU=
Subject key identifier: 3E:AB:25:8E:62:2F:8B:23:E3:8D:1C:86:5B:B1:19:8A:E8:E7:6F:27
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5DEC5F02BA3A5017B7168EDD28DCE838CE44CAC7
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303539.roa
Signing time: Sun 10 Mar 2024 10:50:54 +0000
ROA not before: Sun 10 Mar 2024 10:45:54 +0000
ROA not after: Sun 09 Mar 2025 10:50:54 +0000
asID: 216059
IP address blocks: 109.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ec:5f:02:ba:3a:50:17:b7:16:8e:dd:28:dc:e8:38:ce:44:ca:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:45:54 2024 GMT
Not After : Mar 9 10:50:54 2025 GMT
Subject: CN=3EAB258E622F8B23E38D1C865BB1198AE8E76F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:ca:6b:dd:bf:23:be:06:ab:94:bd:02:cb:
8f:d4:e0:ba:e2:20:35:71:55:a7:c0:8f:1d:a4:4d:
c5:40:0b:5b:a2:ce:9c:c7:97:6a:85:f1:e1:27:41:
84:60:92:e6:12:fd:bb:8e:e7:16:46:d2:69:a1:d6:
5a:32:e9:ee:c1:63:97:86:06:5c:ca:36:1a:ea:66:
5d:52:54:77:96:15:eb:15:b1:b3:3f:db:30:bc:5d:
85:5f:4c:a8:1a:55:2b:a5:d8:34:ed:fd:bb:33:b3:
c2:09:fe:f8:c9:12:bd:92:50:27:48:d0:c8:04:a0:
1a:49:73:0c:66:38:64:cc:3c:04:d9:81:8e:e8:a9:
f8:c4:56:18:64:0c:c4:3b:b9:59:74:2e:fd:96:77:
7c:b8:98:28:c0:4c:d1:ef:cc:f4:f6:3a:1b:8a:f6:
81:a0:6c:4f:60:44:70:be:a5:29:b3:e1:43:12:37:
bd:8b:20:5c:2e:7f:c1:3e:3f:cc:dd:89:44:84:a1:
fb:65:43:9e:46:66:db:63:bc:86:ca:6b:5f:d8:af:
1d:7b:1d:ed:06:80:5f:cd:03:fe:af:45:f4:dc:7a:
b6:33:bc:92:3d:60:a9:72:28:3b:99:2a:9a:ad:1e:
4d:a7:64:dc:0a:91:f9:cc:98:1f:07:39:89:05:e3:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:25:8E:62:2F:8B:23:E3:8D:1C:86:5B:B1:19:8A:E8:E7:6F:27
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
72:da:33:5f:11:65:a5:c4:b8:34:75:8e:3f:6c:49:fd:b6:03:
bf:bd:77:d5:fe:df:c1:41:a7:86:02:db:66:da:38:47:35:0f:
42:b0:af:bf:b2:25:85:82:8c:6f:32:d3:4d:ee:00:4f:6f:e6:
ec:0e:66:68:ac:fa:49:cd:4e:83:e2:02:b1:0e:05:0f:34:4b:
5a:4a:bd:e8:5a:3c:f0:6c:ac:19:69:04:35:43:e5:46:b7:91:
a1:f7:59:94:ee:3a:b3:cb:c5:f6:38:d2:b8:fc:b1:5a:4f:3d:
26:86:76:8d:82:f2:99:ab:1e:e6:86:f7:6e:bd:b4:fc:6f:43:
03:20:2f:9a:6a:f1:4c:d2:62:12:1e:03:4a:3e:bb:3d:85:e0:
ca:68:41:67:94:f8:38:32:87:25:0e:7f:2c:e3:b9:c5:de:1b:
c2:44:ab:bd:42:1b:58:4f:2e:42:7f:77:8d:6f:0c:77:8a:c5:
0a:ec:0f:c6:8a:03:a9:cc:42:b5:c4:7d:ac:13:72:fb:16:bd:
07:ab:48:6f:ff:4c:c1:cd:85:6f:71:63:2c:d0:70:1b:c5:0e:
4c:96:23:bb:66:55:14:98:d3:57:21:47:c9:40:e2:a4:af:ab:
b7:d8:6c:e0:0d:86:9b:90:89:bf:a1:a6:08:df:cf:1e:ee:bd:
fc:0c:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:33:11 2024 by rpki-client on console-fra.rpki-client.org