Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: oZgWMV/wCpwK43SFvkssLwnjTK+M5sagGzP6UPhW+LA=
Subject key identifier: 6F:56:E3:61:5A:60:A2:7C:02:3D:A6:78:4B:FA:B9:1F:C7:80:41:F4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6444A4C60245772E214DB248CA0820F467B64919
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20383334.roa
Signing time: Sat 02 Nov 2024 10:49:44 +0000
ROA not before: Sat 02 Nov 2024 10:44:44 +0000
ROA not after: Sat 01 Nov 2025 10:49:44 +0000
asID: 834
IP address blocks: 109.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 16:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:44:a4:c6:02:45:77:2e:21:4d:b2:48:ca:08:20:f4:67:b6:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 2 10:44:44 2024 GMT
Not After : Nov 1 10:49:44 2025 GMT
Subject: CN=6F56E3615A60A27C023DA6784BFAB91FC78041F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:54:8f:a5:8b:0d:c3:76:d4:54:28:69:87:
14:68:f5:01:9c:5f:b1:7b:e3:b5:38:20:35:75:62:
37:70:9d:11:1f:d0:fe:29:7d:5b:c3:24:99:9b:8a:
3a:72:d0:64:ae:73:7a:57:51:b3:95:e6:c5:e0:d2:
28:aa:24:56:94:d6:e2:c0:4b:bf:27:6f:9e:1d:61:
eb:7f:83:d9:19:6c:9f:35:25:f0:1a:a7:d8:2b:71:
d3:d7:24:3c:e2:51:d5:25:27:7a:a5:ec:29:57:2d:
ea:a6:f5:02:14:22:ee:09:e6:87:0e:e6:80:6d:34:
02:16:31:05:d9:85:59:ee:ad:54:e7:91:1f:8f:be:
95:a7:74:0f:b3:ae:89:db:b9:24:28:64:06:55:05:
82:24:df:9f:49:4c:18:2c:ef:49:46:8a:ca:84:05:
bb:d0:5c:f7:ff:67:93:00:c2:1d:83:1a:d0:f2:8a:
d7:eb:7c:4f:2a:f8:1f:a8:a1:09:39:f6:d6:d3:1b:
50:4f:73:d2:9d:37:ec:2f:f1:ce:8e:a0:b2:d2:0d:
2d:b1:c9:98:35:52:6a:9f:50:f5:1e:86:5c:65:77:
66:b9:3e:09:98:d7:be:85:5b:cd:0f:30:28:67:89:
5c:8e:ea:6c:a5:3e:53:de:2c:59:8d:15:ae:e4:ee:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:E3:61:5A:60:A2:7C:02:3D:A6:78:4B:FA:B9:1F:C7:80:41:F4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6c:6d:9e:be:2e:f8:8e:de:71:79:d5:7e:c6:22:ad:9c:ad:
7f:33:bf:83:92:df:c0:71:b3:29:64:c9:25:e2:01:dc:d4:a2:
a9:51:b3:75:31:48:37:6c:57:05:f4:83:d4:69:7b:2d:ff:05:
b4:f9:55:b5:7d:3b:d8:45:ba:9d:71:50:b7:e9:97:67:7a:eb:
bf:6a:1c:f7:9c:6c:b7:7d:aa:f2:35:83:2d:8b:29:0f:97:7a:
db:13:00:49:1f:b4:19:f5:be:2c:08:63:fd:95:b8:80:b4:02:
ea:94:d6:de:bd:dc:e0:d6:64:78:c9:e9:3e:0b:f1:ac:ba:23:
4a:34:26:ca:c3:d6:6b:b3:82:29:49:ec:20:d5:52:9c:8b:2c:
5c:c8:65:4e:76:78:ac:11:ab:c7:12:4c:3e:a2:56:41:16:09:
97:66:a7:fe:4b:75:28:ba:00:6e:7d:2b:6b:b1:26:5a:e2:61:
fe:b8:5f:ce:6f:12:3b:15:9f:4a:de:78:cb:94:94:44:84:74:
30:cd:c6:4a:ea:d6:8e:23:38:4b:52:f2:f6:0e:7d:45:28:a1:
c0:37:27:33:7c:16:b0:70:3b:f9:e3:37:62:96:6f:3e:67:de:
9a:a0:4d:67:d2:fe:df:a1:70:fa:a6:1d:b5:3b:20:69:12:69:
46:24:3f:26
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 4 21:00:43 2024 by rpki-client on console-ams.rpki-client.org