Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2039333034.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: WQ4SqARJWJsmZZUDr2t3UZFQy64wxE3EWdoHmGAKsT8=
Subject key identifier: AF:E1:2B:5E:ED:AB:FA:92:20:5D:46:07:A9:2D:6F:AE:1A:74:96:4D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6AA69CEB8CC4B172F7A7FD2EAD55C94686DB4213
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2039333034.roa
Signing time: Sun 26 Jan 2025 14:39:23 +0000
ROA not before: Sun 26 Jan 2025 14:34:23 +0000
ROA not after: Sun 25 Jan 2026 14:39:23 +0000
asID: 9304
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a6:9c:eb:8c:c4:b1:72:f7:a7:fd:2e:ad:55:c9:46:86:db:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 26 14:34:23 2025 GMT
Not After : Jan 25 14:39:23 2026 GMT
Subject: CN=AFE12B5EEDABFA92205D4607A92D6FAE1A74964D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:a8:0e:cc:91:ec:58:a5:b0:3f:05:f4:97:
8a:08:f4:a3:e5:a3:71:99:78:91:a0:e2:44:fb:4d:
dc:c3:89:74:3d:56:2d:49:0e:11:73:61:7e:59:b7:
ef:3e:7a:63:40:96:39:d7:bf:9c:11:45:de:4c:b1:
af:3d:06:8b:44:b4:0d:af:af:3a:c9:0b:76:29:6f:
12:0c:be:cb:30:04:df:3c:dd:5b:49:72:7c:43:62:
dd:25:7b:25:92:7a:83:b3:83:a5:2a:30:f3:6c:e3:
95:48:92:79:45:06:66:54:8c:9e:d5:ec:dc:43:4e:
40:50:64:fd:33:34:d8:44:70:47:b1:dd:cf:f7:24:
b6:a0:c8:18:4f:0c:91:10:71:9a:59:55:93:b6:8e:
09:54:ea:ef:70:02:18:57:9d:6a:7e:e1:82:2e:c7:
6c:90:1d:66:d6:8c:65:24:e2:10:3c:84:8d:14:e6:
b7:1b:f3:0c:c0:f2:0a:db:df:15:ee:ff:24:ac:8d:
00:8e:fd:d5:6e:b9:cc:df:7e:ce:c2:04:0b:8c:fe:
13:08:33:d8:b5:52:01:8e:50:1e:33:db:72:79:c3:
6a:82:3b:de:3b:42:99:47:92:c6:db:50:7f:65:2e:
f2:15:9c:b6:c6:42:a8:db:01:b5:3a:bf:16:5c:a9:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:2B:5E:ED:AB:FA:92:20:5D:46:07:A9:2D:6F:AE:1A:74:96:4D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c9:45:14:3f:42:9b:a2:fc:a2:cb:5f:2b:af:22:69:ed:80:
3e:ff:10:a0:c6:62:d1:95:b9:b6:bd:91:bd:9e:1d:41:b0:42:
cc:2a:63:94:b0:b6:d3:ee:c5:29:d8:c5:7b:33:cd:dd:bb:07:
2a:b9:19:2e:27:9d:55:6d:dc:3b:de:39:24:22:e1:6f:23:df:
96:b8:b4:b0:86:e4:eb:53:3c:7c:e9:56:95:fb:25:ce:f9:fa:
fe:f5:d7:41:06:42:c8:61:97:82:a5:45:a4:07:85:8d:62:cf:
f4:81:c1:70:1a:28:45:57:bf:c5:e1:ef:02:9e:61:2a:8b:e8:
ac:44:42:53:55:39:ac:47:5b:14:ef:1b:54:cb:65:ea:8b:71:
14:45:0f:b0:d6:9e:de:40:bf:73:30:82:8e:55:e0:50:24:ec:
cb:b9:c9:3b:f1:c5:fd:eb:3c:68:9e:e2:c7:74:53:4f:4d:23:
f2:ae:48:41:c4:3a:35:0e:93:4b:a7:0c:30:16:5b:f7:71:9a:
4f:e9:9d:dd:72:e8:9f:a8:51:4b:80:48:1b:b5:5e:d6:c5:e4:
9d:1a:b9:25:10:32:7e:16:04:f7:19:16:10:bd:c0:ff:92:d0:
ae:69:2c:3c:18:89:a4:e2:eb:54:c3:09:b8:5b:8b:cc:1f:63:
68:e7:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:43 2025 by rpki-client