Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2034353135.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier: 9VWCcS0LW17IYJ9zsEC1WFS2oUkaPNXzBh0w+YCKU8g=
Subject key identifier: 6E:3D:EB:FE:5A:12:52:BC:5D:3A:16:44:B8:C8:05:49:7D:FC:35:82
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2633D1A6B3BF545ECF9B3C158971CEC2D0CA91C0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2034353135.roa
Signing time: Sun 26 Jan 2025 14:39:23 +0000
ROA not before: Sun 26 Jan 2025 14:34:23 +0000
ROA not after: Sun 25 Jan 2026 14:39:23 +0000
asID: 4515
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:33:d1:a6:b3:bf:54:5e:cf:9b:3c:15:89:71:ce:c2:d0:ca:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 26 14:34:23 2025 GMT
Not After : Jan 25 14:39:23 2026 GMT
Subject: CN=6E3DEBFE5A1252BC5D3A1644B8C805497DFC3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:73:4e:b4:4e:0d:39:6c:f1:ce:10:f2:6c:
20:b3:de:dc:9d:8e:52:91:10:0a:eb:7e:e7:c9:58:
06:7b:22:05:f6:28:5d:e4:cd:9e:79:b9:94:55:30:
af:3d:ce:dd:45:75:1b:82:3d:81:2d:3e:19:93:01:
ca:1c:56:74:c0:5e:d6:28:f5:58:61:b2:7d:4b:92:
35:59:19:f3:01:e7:62:df:31:de:f0:71:ce:0a:c2:
b4:5f:55:8e:0d:9c:7e:ed:0e:38:13:83:55:af:08:
a3:5e:dc:40:ea:b3:ed:f8:fd:bc:b4:83:9a:e4:b2:
ba:e7:e2:91:73:86:55:68:06:b2:a5:d8:9f:1b:68:
d7:19:f9:14:79:ae:fb:78:75:e1:36:01:49:10:9d:
df:c7:c2:c4:77:5e:8b:d7:1f:cf:10:df:15:b8:69:
56:ec:bf:c1:11:6c:ed:7b:df:0f:0f:f5:05:7c:1e:
16:be:86:5f:e4:87:42:2b:1f:10:7e:5d:c9:cc:32:
0c:82:79:84:f4:e7:36:98:95:b6:eb:dc:78:1a:7a:
f2:6b:b8:0d:22:22:5f:27:9f:fb:e8:32:f5:63:f7:
ac:6d:e7:69:03:e6:7e:c0:7b:86:7c:24:51:bd:45:
25:5c:c4:c8:9b:d1:68:18:f7:d8:1c:e8:e7:50:dc:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:EB:FE:5A:12:52:BC:5D:3A:16:44:B8:C8:05:49:7D:FC:35:82
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2034353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
82:60:60:9c:49:09:08:4c:a4:dc:ef:4d:a2:eb:d7:6a:54:6d:
c0:46:e4:f1:51:d8:43:b8:88:ee:b2:c0:6e:5c:19:b6:c4:a7:
71:28:d0:3f:c2:48:8d:f8:0f:52:27:8e:42:4b:02:c5:e1:6d:
09:4d:a6:ff:a9:c6:1f:88:c7:9f:bc:3c:7c:70:d4:3e:1a:a2:
23:2f:4c:81:0f:c6:78:e6:83:4c:16:cb:00:7b:34:08:68:8f:
3a:8a:49:37:23:89:f5:c5:89:bf:f9:32:39:c1:c3:a0:cb:77:
00:d6:a4:ee:9c:6c:c8:ff:aa:6f:d7:5d:9b:04:ad:eb:4f:58:
ab:e2:4e:3b:8d:b7:fc:8f:35:44:42:98:19:39:a1:67:3f:45:
ad:44:a1:5d:79:7a:01:cb:64:fb:8e:f0:31:ee:21:72:c9:53:
62:c3:b3:34:dd:2d:0b:04:57:3d:92:6f:f2:7a:35:cc:ce:07:
09:8e:4a:93:60:39:09:96:a7:f5:ac:b5:44:c8:b1:7f:49:1c:
e5:d6:81:5a:26:c4:bf:93:fe:68:db:2e:e7:a1:99:14:ff:47:
72:ea:85:f6:82:d0:ec:f1:6a:cf:8e:61:15:56:26:a1:1d:16:
62:d3:1f:11:18:4e:29:af:84:a9:9a:29:4a:71:57:8d:e0:51:
a4:aa:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:04 2025 by rpki-client