Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eFRQqKucOlbx69AL1moWl2OE+HSZKeEHjZg8ZBl75t0=
Subject key identifier: DE:71:F7:34:ED:8C:45:07:22:B5:22:39:CF:A9:33:41:B9:CC:59:87
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 13D6A4B88D776CCA11060D92AFF26B75084913FD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20383334.roa
Signing time: Tue 09 Apr 2024 00:02:45 +0000
ROA not before: Mon 08 Apr 2024 23:57:45 +0000
ROA not after: Tue 08 Apr 2025 00:02:45 +0000
asID: 834
IP address blocks: 109.110.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 04:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d6:a4:b8:8d:77:6c:ca:11:06:0d:92:af:f2:6b:75:08:49:13:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 8 23:57:45 2024 GMT
Not After : Apr 8 00:02:45 2025 GMT
Subject: CN=DE71F734ED8C450722B52239CFA93341B9CC5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:1e:ee:36:26:00:7c:1b:60:12:7c:c5:ba:
83:a8:80:71:b8:09:46:e6:c9:42:9b:a1:04:7b:88:
f4:97:fd:d3:60:57:cc:a1:ea:f2:e9:07:c9:3d:b5:
e0:01:ce:38:c3:dd:b9:6e:63:61:46:55:a1:0c:08:
f1:a4:1c:3e:eb:da:c3:58:28:23:e7:5d:51:12:2f:
78:c5:22:8b:9a:47:51:d5:09:3f:e9:4f:dc:ef:38:
4f:8d:c7:49:dd:f5:da:83:ca:8b:32:b1:45:f2:b8:
46:70:ff:86:49:4e:64:11:7a:36:f8:0c:03:bb:51:
6f:f9:b2:a0:c4:0b:5d:27:9e:56:49:b1:68:5b:26:
38:ba:fd:99:f9:43:9d:50:e4:53:07:2d:cb:9d:55:
44:c3:61:75:f2:49:43:99:6c:67:9d:16:35:2d:9a:
39:0d:8a:6b:6e:5f:5b:38:0b:68:a2:3e:bd:90:f6:
fa:54:f4:4a:5b:f3:ac:f6:45:c9:f2:ac:19:93:f8:
5a:da:14:85:27:c8:16:8d:ea:a5:1f:a3:f2:c9:99:
e7:bc:1b:6d:37:ec:84:d8:4a:c1:d5:6e:57:99:35:
e6:b9:6b:96:8c:4f:91:97:57:fe:fe:34:90:41:f8:
6a:68:e1:60:91:5d:fd:c9:ef:b7:17:5d:a7:ad:46:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:F7:34:ED:8C:45:07:22:B5:22:39:CF:A9:33:41:B9:CC:59:87
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.168.0/24
Signature Algorithm: sha256WithRSAEncryption
36:7b:13:bf:f2:a3:c7:0f:48:d3:2a:44:14:f8:90:e5:46:53:
53:bd:71:8d:4e:2f:ed:97:1f:a1:2e:5f:24:9e:4a:c8:29:e7:
c6:6f:c1:a2:9c:1a:59:8b:69:5f:c5:10:94:c5:b4:54:30:c9:
75:1b:e4:41:ce:4a:fe:37:53:35:14:2b:b0:d5:61:ac:70:c4:
f9:fb:09:ec:aa:8d:f0:df:99:b2:9a:23:cf:36:d3:5f:24:b5:
49:ca:c0:1e:68:c8:4f:02:5c:e0:fc:54:18:e9:bf:b6:02:58:
bb:c9:a3:46:40:a4:33:34:83:c9:79:2a:d2:ae:ea:34:8a:90:
af:dd:6f:19:33:b9:5e:47:29:9f:8f:08:0b:c3:62:42:25:e5:
c0:2f:d4:87:d4:1d:54:8c:82:9e:aa:4d:34:3f:e6:cb:f8:98:
fb:3c:6e:4a:31:13:b4:f7:cc:4e:f1:d4:8a:60:dd:d2:f6:bf:
c0:ad:e5:a0:07:a5:ed:87:c6:e8:df:50:25:59:de:dd:02:2e:
1c:bb:1e:7e:ab:08:f9:ec:0e:e1:c4:73:9e:3c:b0:96:02:77:
5c:6b:a9:bb:11:e0:4f:6f:b9:b2:8e:b0:c2:a2:9a:69:61:44:
6a:62:94:c7:5b:dd:3e:e5:4f:f2:2f:9e:b2:e2:67:49:9e:a6:
9a:f3:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:24 2025 by rpki-client