Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier: pbsPPrMuud6l3w4NE/dg5eZSCWWqvtXOAghVaf+ROpM=
Subject key identifier: 2E:0C:E2:84:45:43:A6:B9:23:3D:8E:27:F0:2F:2E:12:96:8C:94:A8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4727796852770E1B45A2F4A9990B682696ACD3BA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
Signing time: Tue 23 Jul 2024 00:20:46 +0000
ROA not before: Tue 23 Jul 2024 00:15:46 +0000
ROA not after: Tue 22 Jul 2025 00:20:46 +0000
asID: 10753
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:27:79:68:52:77:0e:1b:45:a2:f4:a9:99:0b:68:26:96:ac:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 23 00:15:46 2024 GMT
Not After : Jul 22 00:20:46 2025 GMT
Subject: CN=2E0CE2844543A6B9233D8E27F02F2E12968C94A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:1a:8a:af:8c:39:7a:31:77:42:5e:0f:12:
d8:86:00:d4:d9:e1:8a:75:9e:10:e2:b5:49:4f:1c:
eb:55:78:1e:7a:2f:d9:cc:3f:f6:91:12:54:a3:1b:
a2:51:24:13:36:0a:e2:97:04:ce:91:e9:85:d6:8f:
33:b4:db:3f:c5:eb:da:29:1f:1f:cd:2d:55:88:79:
3f:61:7d:a7:67:80:88:96:8c:e5:3d:06:9f:53:47:
1e:36:74:c4:76:a2:50:c5:da:5c:55:d1:4b:6c:fe:
31:31:72:5c:c7:c2:54:65:59:06:81:50:52:06:23:
b0:a2:47:db:58:60:da:8e:72:2b:60:31:7b:69:1f:
37:ac:15:1e:50:73:22:17:67:0b:9d:75:22:19:83:
4a:44:da:3f:d0:e5:cd:00:5b:ef:14:f7:0e:35:f9:
89:d2:55:4e:c6:27:8e:8d:16:ac:56:0b:f6:be:12:
3d:b7:58:a9:7a:0b:96:7e:ed:a2:aa:d6:6f:74:0c:
b9:75:fd:27:b8:1f:2e:9a:d2:53:46:fd:8c:fd:8f:
0b:0d:30:fa:c4:15:fa:34:3e:56:60:8a:46:94:63:
64:a8:ed:c5:5e:d4:4b:e5:aa:97:ce:2d:c3:21:da:
81:01:0a:30:7f:e0:5e:5d:d9:6b:21:22:f2:da:88:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:E2:84:45:43:A6:B9:23:3D:8E:27:F0:2F:2E:12:96:8C:94:A8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3f:e5:0a:fb:22:f8:f3:e8:e9:ad:38:80:58:70:a9:8b:4e:
88:49:3b:fd:9c:b0:61:cf:8d:b1:4e:5f:76:97:81:42:2a:d9:
c4:08:f9:54:75:70:25:9a:4e:9c:c7:63:7e:96:53:29:a5:8a:
a0:6a:85:5f:b6:16:46:5c:28:83:11:40:83:14:54:8d:7b:ac:
6d:5b:dd:42:84:82:66:1a:80:3a:d6:45:96:b7:8a:65:37:73:
e4:24:ac:79:61:b8:3d:ac:a9:fd:27:7c:1b:d6:88:d3:ae:5d:
00:55:0f:5f:63:7f:c3:18:05:af:66:95:9e:d1:0b:fd:98:3e:
63:90:7f:47:77:13:7b:7f:1f:18:4e:e1:9e:a8:e6:9f:43:4b:
6e:30:8c:d3:66:6f:15:41:3c:ec:15:95:01:86:56:a9:cb:d1:
1e:e8:f8:7f:97:51:3c:d3:66:d8:eb:30:66:83:ea:17:fc:1f:
3f:d7:b4:09:10:e2:e7:fd:0c:64:43:a1:b9:eb:44:6a:1f:2a:
e6:7f:99:d8:6a:76:40:68:b4:03:06:38:d6:50:db:3f:45:13:
62:6e:ef:96:d2:54:af:35:8c:31:93:ee:48:6d:25:aa:fd:65:
df:ba:e9:14:67:03:2c:ef:9e:37:c8:50:a4:be:47:3a:5a:a0:
63:a9:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:42 2024 by rpki-client on console-ams.rpki-client.org