Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32322d3232203d3e20323132323338.roa
File: 3130392e3131302e3136382e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier: l0wRI3tHW25R00r007jLLsPyGrO6JlUZQ0qvtPvnLyk=
Subject key identifier: EB:55:34:C8:56:D5:EF:E6:D4:52:B5:49:73:63:DC:F8:1F:6C:73:10
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3E43FDE752457FC0D7B8B58985FA301488837076
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32322d3232203d3e20323132323338.roa
Signing time: Thu 01 Feb 2024 04:17:04 +0000
ROA not before: Thu 01 Feb 2024 04:12:04 +0000
ROA not after: Thu 30 Jan 2025 04:17:04 +0000
asID: 212238
IP address blocks: 109.110.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:43:fd:e7:52:45:7f:c0:d7:b8:b5:89:85:fa:30:14:88:83:70:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 1 04:12:04 2024 GMT
Not After : Jan 30 04:17:04 2025 GMT
Subject: CN=EB5534C856D5EFE6D452B5497363DCF81F6C7310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:6b:0a:07:1f:35:c0:58:05:9d:42:08:d5:
08:6b:b1:03:1a:ab:8d:1e:b4:78:74:cd:2c:c2:82:
91:72:d3:60:8d:50:32:40:1d:35:6e:3e:63:7d:ba:
70:94:f4:24:2c:56:5d:89:41:33:95:4d:8e:d8:1f:
c6:fb:21:c0:52:56:82:a6:f9:28:50:c3:80:f2:2d:
8a:a3:a7:30:16:dc:c7:43:31:bc:eb:ba:ea:c6:02:
f5:09:22:0d:0f:e2:30:b7:5d:80:d3:94:d0:08:70:
e5:2c:3c:ec:fc:48:5f:fe:f3:68:21:d5:23:93:cc:
37:78:2f:67:a5:56:03:33:b4:02:4f:f2:5d:6c:88:
60:c4:8d:79:b6:b2:4f:d7:08:4c:83:26:d8:16:8e:
64:b0:da:c9:c6:c4:9e:9d:fe:0f:4b:7e:b8:4a:a4:
d7:e4:f8:05:64:ec:3b:08:32:cc:df:1f:c6:ac:d7:
94:45:6e:4c:ec:ec:06:8c:15:77:e5:cd:bf:37:c1:
ab:f7:11:21:43:44:0c:62:45:06:29:b3:bc:92:79:
02:e4:b6:14:61:ca:17:54:89:52:b7:d9:23:7d:d5:
db:ad:01:71:40:59:47:41:24:15:91:c2:45:0f:c9:
cf:c2:1f:24:f9:0a:61:3b:8b:84:ef:96:50:a1:f5:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:34:C8:56:D5:EF:E6:D4:52:B5:49:73:63:DC:F8:1F:6C:73:10
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32322d3232203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.168.0/22
Signature Algorithm: sha256WithRSAEncryption
40:58:4c:78:60:06:1d:c9:b2:5c:5a:bf:e5:c3:a2:32:d6:d3:
65:fd:6d:09:2c:e9:58:ea:b0:ab:a1:fc:39:43:70:f3:40:ac:
bd:aa:75:a8:63:96:dd:b8:01:9e:da:a7:55:08:53:10:31:2f:
d3:6f:5e:23:6c:32:a5:f6:12:ba:ee:db:6d:0f:d3:b8:28:62:
c8:a8:7d:b2:8b:06:96:bc:30:38:47:7f:d6:62:3b:71:cf:ae:
1d:eb:1a:7d:c1:2e:ae:83:26:8d:03:44:37:4c:2f:9e:56:63:
3d:57:c9:45:c1:77:9e:a0:c5:3c:fa:81:ca:73:d4:f6:9f:cb:
8d:bc:40:3e:35:e0:53:9f:48:3f:0b:06:30:8f:3c:ba:d6:6a:
30:7f:62:b1:f1:22:24:dd:db:30:11:b9:9d:c1:9c:06:a2:8d:
4b:fd:26:d0:83:80:80:b7:61:43:a8:1c:e1:10:58:f6:1c:78:
e4:2b:6b:e7:34:a3:2e:2b:a8:14:75:88:dc:12:b1:c0:22:f1:
f1:f2:37:61:6c:48:4b:be:d5:8d:93:99:38:d8:9d:39:a3:8c:
f0:b8:b8:89:48:76:14:17:e3:44:f0:a5:c0:8d:2d:5e:43:9c:
28:19:a7:4b:e9:b9:93:c4:e6:08:92:7c:b4:b9:7a:2f:8d:26:
d6:ed:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:19:06 2024 by rpki-client on console-ams.rpki-client.org