Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CO5oSRihu8i1NyO9S73nRvserJE3s5pbzqPVHwZ25Uc=
Subject key identifier: 8E:D9:8C:33:6C:0C:80:2D:A7:73:D9:3F:E0:45:09:EE:92:1E:E6:AE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4E1A73F60B7A3E4126AE95AB9541FFC1B71B0BF4
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20383334.roa
Signing time: Sun 26 Jan 2025 14:40:42 +0000
ROA not before: Sun 26 Jan 2025 14:35:42 +0000
ROA not after: Sun 25 Jan 2026 14:40:42 +0000
asID: 834
IP address blocks: 109.110.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 14:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1a:73:f6:0b:7a:3e:41:26:ae:95:ab:95:41:ff:c1:b7:1b:0b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 26 14:35:42 2025 GMT
Not After : Jan 25 14:40:42 2026 GMT
Subject: CN=8ED98C336C0C802DA773D93FE04509EE921EE6AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:81:52:42:f3:d1:c2:29:d5:b9:03:dc:00:
fd:20:9d:cf:10:97:40:0e:da:35:f4:2f:2f:7d:fc:
63:62:3d:90:fc:b4:cf:83:a3:07:c8:07:76:bb:53:
72:e6:a5:cb:a5:84:7c:0d:44:e1:bf:49:d0:b2:2c:
94:e2:d7:1e:4f:a5:c4:75:02:f5:2d:66:e9:f3:2b:
01:47:51:61:68:4c:47:06:c7:c7:9d:30:f9:2f:70:
3e:d7:19:7c:9e:3d:33:19:11:09:63:d1:1c:ef:97:
b1:6c:0b:5d:d7:64:62:44:5e:64:25:61:57:3f:b0:
30:6e:d5:e7:a3:df:35:71:82:ca:cd:d5:3f:76:e9:
c0:cd:81:a1:19:4c:1c:77:b0:41:18:9f:68:2b:bf:
81:78:1f:0e:a0:c5:8d:f1:e1:3c:b6:57:23:e1:5d:
9b:33:06:44:36:e2:9e:33:85:a3:b0:01:53:10:9f:
b9:c8:c5:f8:38:1d:d0:9c:0e:73:b0:8e:30:72:ad:
73:b8:bd:94:cb:5d:51:76:1b:4e:bc:c4:9f:d6:3f:
0b:4d:26:1e:1a:43:17:8e:d5:08:ae:85:ae:27:95:
51:a1:e4:9d:af:f9:ae:0f:ab:e8:4b:f8:e3:90:28:
43:6f:e8:b1:ad:43:d7:87:5e:c9:23:9f:00:c6:85:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D9:8C:33:6C:0C:80:2D:A7:73:D9:3F:E0:45:09:EE:92:1E:E6:AE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.170.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8a:12:a0:64:a1:86:ae:72:12:f9:f1:67:42:b4:34:e8:d2:
38:82:3a:bc:ae:59:2f:37:03:31:7b:30:31:13:b9:5f:5f:93:
5f:16:1b:2d:55:ee:75:ba:d4:c2:d6:52:5e:6e:87:02:cb:3f:
b8:e9:8b:d2:15:8f:cf:f4:83:da:af:01:67:6b:7b:d6:05:9b:
6c:a2:53:70:d3:68:cd:4b:fe:9e:f0:e9:00:58:e5:ad:85:5c:
97:b3:cd:60:d9:66:27:8e:02:d7:05:9a:35:be:96:7a:69:0f:
e8:6a:ee:de:50:f8:32:58:66:ff:76:72:3d:32:14:d4:a6:39:
0b:f9:c5:61:f8:c1:7b:0c:1e:c4:35:d6:82:11:e0:ee:74:0b:
c1:b5:35:bd:00:36:ec:35:30:48:4d:ba:09:f3:c0:95:37:84:
99:b0:18:eb:05:36:af:c9:13:0c:88:c6:f8:e8:ab:30:35:a5:
6d:30:5f:d3:59:37:99:80:21:e9:39:6c:39:ce:c4:f3:a5:b5:
09:19:99:6b:26:d7:bc:5b:97:be:8b:ec:27:00:0d:35:36:9b:
17:d5:0b:3c:a4:90:bb:c8:79:52:07:60:01:d0:21:b6:98:48:
8e:2e:ac:89:4c:90:f7:0d:18:6d:87:f2:d4:17:ed:37:8e:fa:
51:ff:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:59 2025 by rpki-client