Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20313430323038.roa
File: 3130392e3131302e3136382e302f32342d3234203d3e20313430323038.roa (raw, json)
Hash identifier: BBriWQ7THm5IDrINtleC/uRsjv5CbyUiThho5IBq1IQ=
Subject key identifier: BD:45:93:AD:99:FF:65:63:F6:75:F0:79:EA:70:6C:73:28:64:D9:A0
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 40EA974708C92F3289DCB56C331BCC4C3EC076B9
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20313430323038.roa
Signing time: Sun 10 Mar 2024 10:44:15 +0000
ROA not before: Sun 10 Mar 2024 10:39:15 +0000
ROA not after: Sun 09 Mar 2025 10:44:15 +0000
asID: 140208
IP address blocks: 109.110.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ea:97:47:08:c9:2f:32:89:dc:b5:6c:33:1b:cc:4c:3e:c0:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:39:15 2024 GMT
Not After : Mar 9 10:44:15 2025 GMT
Subject: CN=BD4593AD99FF6563F675F079EA706C732864D9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:91:45:ca:e5:85:fd:7f:5b:ef:c0:e9:ad:
4c:e3:37:50:90:b3:ff:4d:4e:7d:a4:67:b1:6f:b2:
1e:bc:b4:01:3a:8b:5b:fe:3a:e8:c7:77:ed:96:02:
9d:5f:12:53:b0:4f:1d:3b:73:6e:eb:ba:89:be:da:
2c:6d:fa:96:0d:c3:9d:ba:f8:1a:22:43:41:30:1a:
03:83:08:ea:aa:a3:4d:46:92:8d:0c:14:23:16:d3:
8f:d0:35:cf:92:e0:08:50:61:89:f4:f5:0e:31:2b:
78:62:76:2b:40:a6:60:e3:82:d7:4c:d9:a7:7a:2e:
08:2a:59:c9:19:ad:e9:6c:68:1f:8e:48:0a:83:a4:
d2:01:94:4c:3a:2a:43:65:21:6d:09:08:e0:cb:01:
f3:37:d4:46:67:e9:38:cb:23:4a:d5:f6:8a:94:86:
8a:a4:62:7e:8d:ad:1f:9c:2f:30:e3:8d:10:e4:dd:
ac:fe:30:e9:12:96:15:45:a1:04:b8:fb:b2:7d:ea:
ea:7f:f9:cd:6b:7c:74:bb:ea:d5:e8:9e:17:60:26:
49:e2:cc:1d:e5:df:f3:a1:4b:4b:d6:97:4b:4b:14:
cd:61:f9:fe:47:65:92:8c:07:b2:35:9d:e5:ca:ad:
c1:01:ec:3d:cd:ca:a9:d0:ee:77:6d:ad:4c:24:fc:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:93:AD:99:FF:65:63:F6:75:F0:79:EA:70:6C:73:28:64:D9:A0
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20313430323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.168.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7b:b9:e9:da:81:0a:be:11:0a:ad:47:84:3a:b9:18:15:ea:
19:f8:5c:37:87:ff:81:e3:d2:a4:60:4d:26:14:48:b8:24:60:
9f:dc:48:7c:d6:bb:03:f7:f1:a9:09:3e:04:bf:b4:dd:dd:6d:
22:62:fd:c5:99:fd:ec:65:e7:41:be:5d:f5:27:f4:47:00:e8:
5e:ad:af:bd:34:63:70:b3:c1:63:50:78:19:91:4e:ae:29:74:
56:7c:b7:1d:87:df:c6:f5:a2:73:85:a5:31:28:07:15:3b:82:
33:20:90:33:e7:c8:91:49:5d:7d:a7:93:45:2e:a6:f1:a5:f1:
ab:1d:c3:83:5d:31:a8:a1:84:7c:09:d8:2e:a8:ec:67:f5:9d:
5f:7e:8a:63:7a:75:de:d9:62:8a:fa:cd:9b:cb:ea:f7:9a:06:
0d:1d:46:8c:16:31:98:5b:61:82:e5:91:8a:cc:3a:e0:a0:e1:
6f:25:1f:c0:79:65:b0:a1:2a:b7:19:43:c6:3b:4f:9e:fe:e5:
b5:95:f9:fd:73:a0:1f:49:eb:d8:fc:af:36:91:62:a5:5d:91:
00:96:d2:f2:39:77:e0:ca:54:fe:42:d5:6c:b8:b0:93:1c:e9:
5f:73:fb:0b:8f:8b:ed:55:aa:0e:56:bd:d3:f5:b8:ff:88:42:
b1:09:16:ee
-----BEGIN CERTIFICATE-----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Generated at Tue Apr 9 00:57:04 2024 by rpki-client on console-ams.rpki-client.org