Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323136303538.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e20323136303538.roa (raw, json)
Hash identifier: LVCIYDYd+VinQ3PEB9MZmfOvVw8ps+90JcbnqQa0wVI=
Subject key identifier: 17:42:7A:91:24:8D:15:CF:54:01:85:B0:1D:F1:0E:54:69:DF:66:03
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4307FE63B5855B04DAD6CD98D6B8A0AB097D8CD1
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323136303538.roa
Signing time: Sun 10 Mar 2024 10:48:00 +0000
ROA not before: Sun 10 Mar 2024 10:43:00 +0000
ROA not after: Sun 09 Mar 2025 10:48:00 +0000
asID: 216058
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:07:fe:63:b5:85:5b:04:da:d6:cd:98:d6:b8:a0:ab:09:7d:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:43:00 2024 GMT
Not After : Mar 9 10:48:00 2025 GMT
Subject: CN=17427A91248D15CF540185B01DF10E5469DF6603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:52:34:24:b6:66:bb:c2:27:38:21:b0:06:
9b:2e:88:28:a0:74:5b:70:c6:1f:07:ca:15:48:99:
c1:c9:81:cc:67:17:f8:c6:07:b7:5f:b2:9d:06:bb:
85:81:9c:17:47:1c:bb:ff:1d:cf:44:53:79:ec:14:
60:e9:7c:92:37:4e:a0:12:66:b8:5f:1d:ce:48:4e:
e3:ba:33:d3:fb:e1:8e:56:b1:ed:33:11:fb:a2:1e:
37:83:9c:16:e8:f4:a2:5b:bf:f7:10:2c:e4:a7:55:
ca:37:9d:65:cd:cb:34:2e:d5:13:ee:b8:0b:5e:bd:
7c:43:e6:33:27:28:c0:16:a4:a2:71:c5:d7:19:06:
79:0c:6d:1c:a1:a3:7c:34:70:5e:f1:11:e2:2b:75:
8d:10:e2:0c:36:03:c2:4c:f2:9d:b2:00:ca:0d:74:
43:1f:95:f0:e3:a9:5d:df:ad:43:6e:68:be:13:cd:
cf:93:67:fb:19:e3:fc:a3:ac:6b:f5:b1:14:72:7d:
84:5d:16:38:6a:19:ed:21:35:46:b6:7d:8e:43:10:
d4:2a:85:6d:8d:db:1f:f4:dc:d1:e1:12:83:67:0a:
a1:23:ae:84:17:19:b4:2e:60:d4:9b:d9:ff:8f:4a:
97:41:f9:ff:66:b4:63:d2:81:b1:b3:02:e7:07:4a:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:7A:91:24:8D:15:CF:54:01:85:B0:1D:F1:0E:54:69:DF:66:03
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323136303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
42:89:71:88:37:ed:8f:05:d0:bd:ca:f4:8c:4a:93:fb:73:52:
7f:29:c6:fa:76:3c:2e:a0:89:dd:97:9d:0b:2b:64:c4:b2:fc:
de:03:dc:1a:0b:0c:da:86:77:5b:2e:73:14:61:24:33:ee:38:
e8:2e:34:84:19:9e:be:43:df:aa:02:73:9a:90:f8:97:87:5c:
36:23:42:91:4f:8a:32:03:12:55:01:fe:06:9a:24:6e:5d:21:
76:1b:97:d6:0c:a6:fc:7e:b8:d7:7b:1b:1c:83:76:02:43:d5:
50:57:7d:7c:49:59:81:9a:5c:41:ce:de:3d:b6:5d:a7:86:e9:
9c:a8:31:81:85:87:0b:8e:7b:04:05:23:84:e3:43:d3:bd:7b:
7d:b7:c6:c3:67:f1:b4:bf:17:7b:9a:ec:e6:ba:9d:44:2f:1c:
6d:3c:c3:eb:63:0e:69:d4:26:90:e1:fb:ee:97:89:63:2f:1b:
be:84:a5:34:03:35:01:0b:2d:43:4c:b3:e6:05:c9:37:05:43:
2c:b0:e1:d7:dc:4d:7a:e1:89:74:6b:5d:91:65:29:18:dd:61:
a3:32:47:af:15:9f:b8:8f:ef:62:a9:d2:29:c5:88:b0:63:52:
89:c4:82:d8:6e:b4:25:5e:0a:60:ed:ac:f8:e4:c5:9b:e3:e7:
3b:6b:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:29 2024 by rpki-client on console-ams.rpki-client.org