Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8vNgwyJGB3JuWdh8Ux7Ht2XmEDlfSEcd/r+lCnbHnL4=
Subject key identifier: 02:9D:D2:31:66:88:58:A7:EF:7B:25:77:07:E6:9F:2A:B1:DE:46:25
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2D4E03698BEF584D621F60A8DFC3E580FE03B699
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jan 2025 07:43:03 +0000
ROA not before: Thu 02 Jan 2025 07:38:03 +0000
ROA not after: Thu 01 Jan 2026 07:43:03 +0000
asID: 834
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4e:03:69:8b:ef:58:4d:62:1f:60:a8:df:c3:e5:80:fe:03:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 2 07:38:03 2025 GMT
Not After : Jan 1 07:43:03 2026 GMT
Subject: CN=029DD231668858A7EF7B257707E69F2AB1DE4625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:9b:be:d8:74:54:3b:1d:3b:49:a3:71:c6:
7d:8c:bc:db:ed:41:76:67:58:d8:19:23:00:b7:40:
58:0a:ba:e9:40:75:e6:a6:af:4a:de:7a:3a:80:55:
3c:20:3e:2b:75:20:8d:ce:76:87:24:9a:01:c8:54:
a5:14:53:8e:c4:0a:10:84:03:b2:67:5b:6f:90:ef:
67:61:a6:42:50:98:7e:de:80:c7:b9:43:e0:90:80:
e6:c9:17:a7:7b:61:a7:aa:48:1f:ab:93:e3:45:e7:
c1:a8:7b:71:23:75:ff:4d:9b:29:e6:9f:c0:06:3d:
cd:22:e8:79:b2:4d:64:a0:8f:8f:3b:8d:bf:d7:3a:
c3:6d:fe:15:cd:08:91:34:ac:a2:4c:51:72:ac:3a:
48:3a:71:43:a0:b3:fe:4d:2b:38:8e:87:de:bd:75:
1e:9a:34:fa:4e:cb:aa:30:a3:d6:68:ea:fb:40:2b:
18:80:f3:37:85:32:cc:97:a3:9d:3c:6a:2f:a6:bb:
c9:d6:b7:1e:0c:9d:04:f4:d2:d1:57:a5:66:82:03:
9a:bb:d4:40:92:3c:bc:ef:fe:28:b1:46:42:48:af:
5a:a8:26:2c:a5:72:8f:96:58:8f:3f:06:44:00:83:
12:0b:15:0e:c8:e0:2a:d2:49:26:fb:a6:82:3b:d3:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9D:D2:31:66:88:58:A7:EF:7B:25:77:07:E6:9F:2A:B1:DE:46:25
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f6:a2:d4:6e:86:90:c9:61:d8:6a:78:de:51:c2:ad:31:ec:
28:46:3c:08:c7:31:ed:7a:fc:c8:56:43:54:4b:b6:a1:ea:a3:
88:75:92:44:00:3a:a4:a6:56:1b:8f:66:b0:9a:4c:c9:11:99:
1c:9b:54:4a:88:4c:07:1e:75:e9:32:b3:ab:ee:c0:16:79:87:
e2:70:46:40:d6:88:f3:fd:35:3a:0f:d5:05:9b:f8:15:9c:24:
4c:71:76:2c:0d:b2:da:f3:f4:60:f9:1b:d5:72:11:4d:7c:07:
fa:eb:a7:12:8e:dd:5a:97:b2:2b:23:27:b6:b6:be:7b:53:41:
7f:6a:50:30:45:2f:86:ec:41:f1:6d:8b:c9:55:a0:d2:c3:a9:
a0:26:35:22:4d:3f:50:c9:9f:4e:88:96:3b:35:14:51:fe:19:
86:e2:4e:e0:cf:2a:a7:09:e9:bc:ee:82:c1:ff:d0:d3:48:8e:
e7:9b:bc:9b:9d:9c:9e:15:74:a7:fd:0d:7a:8c:a5:ed:23:ca:
8d:91:13:fc:4d:ee:c4:54:1f:3d:e8:b4:fb:5f:dc:31:1e:3a:
6b:4b:cd:8f:d3:fb:30:f6:44:67:5b:cb:a0:78:c9:ef:f3:48:
cd:93:c2:91:73:d7:9e:73:c0:ed:6b:a5:b0:6d:e3:f4:0a:ac:
cd:3a:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:44 2025 by rpki-client