Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e203230343733.roa
File: 3130392e3131302e3137322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: Rmeamta8D6xyY4vvClQDGt2xhQiPuHz+JnkzHAlCUhY=
Subject key identifier: 6F:BB:18:0F:57:FD:97:2F:B2:E5:BD:2C:8D:BD:90:C8:F6:F8:AD:3D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3B49A42FBBC6690D01CB658832879E12A9C5D0C8
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e203230343733.roa
Signing time: Fri 02 Aug 2024 11:41:05 +0000
ROA not before: Fri 02 Aug 2024 11:36:05 +0000
ROA not after: Fri 01 Aug 2025 11:41:05 +0000
asID: 20473
IP address blocks: 109.110.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:49:a4:2f:bb:c6:69:0d:01:cb:65:88:32:87:9e:12:a9:c5:d0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 2 11:36:05 2024 GMT
Not After : Aug 1 11:41:05 2025 GMT
Subject: CN=6FBB180F57FD972FB2E5BD2C8DBD90C8F6F8AD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:e7:85:99:69:d4:de:09:55:07:b3:8c:42:
57:3a:80:4a:b8:c8:7f:93:16:64:df:17:05:93:23:
40:76:61:7d:ce:45:e5:b6:8c:97:cc:12:35:5c:1a:
9e:84:53:94:ce:89:5a:ee:60:3a:b0:17:42:c5:1d:
e5:d5:d6:46:5c:f0:7b:b2:6a:c8:81:52:45:b7:b9:
f5:7d:6c:56:02:7c:41:08:6d:65:40:5d:e9:1d:7b:
53:45:86:11:ba:07:ae:9d:d1:a2:d6:f0:34:ed:7c:
e8:77:a3:2b:78:c3:b3:7e:f3:1c:af:e8:09:e2:95:
42:51:a9:18:cd:52:58:1a:64:3b:6b:21:f9:b8:44:
a4:98:85:77:d2:9c:df:d1:ea:4b:8e:24:09:44:cf:
3b:e0:e7:b7:af:93:46:11:e9:5a:28:90:04:53:99:
07:be:0f:4d:0c:ae:77:de:b2:19:55:da:a7:dd:13:
d6:18:48:04:84:7f:8a:35:e9:3f:69:da:b9:f2:9f:
48:1a:ee:10:0a:d5:38:d7:d9:f0:eb:77:42:66:40:
e0:83:56:ff:ba:6b:a6:78:92:20:36:df:ac:0a:19:
0a:1b:c8:bb:15:18:81:69:dd:18:07:d9:7b:c3:99:
af:2a:1d:be:16:46:98:30:85:10:a2:ae:c7:bd:fc:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:18:0F:57:FD:97:2F:B2:E5:BD:2C:8D:BD:90:C8:F6:F8:AD:3D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3a:2a:9c:85:65:3a:a9:b9:b7:d2:28:65:a2:27:71:a9:dc:
2f:74:ea:56:9c:c7:cb:a2:16:b1:00:23:58:bf:73:40:76:09:
61:82:91:6a:80:51:2a:66:9e:be:1a:00:9c:97:d6:a8:c6:5f:
7d:56:a4:a9:c6:3e:0a:19:3f:69:b1:97:6e:45:43:e0:19:a5:
1b:97:8d:61:53:59:e6:aa:28:0b:90:12:92:2c:35:68:a4:7c:
0e:86:95:e1:e3:b6:bd:20:98:4b:f6:ef:94:58:07:1b:cb:f7:
5d:84:d0:5e:2b:f9:a2:5d:a3:26:69:32:01:fa:9e:39:1f:10:
2d:7a:fa:31:c7:7c:d8:88:02:56:16:3b:2d:b2:b9:a9:7f:a6:
13:6d:47:db:64:4f:46:0f:3d:60:50:a5:94:42:de:ad:af:36:
47:41:0e:be:77:2d:22:3e:ff:17:9a:dc:36:65:2b:34:e9:65:
21:1f:c0:72:df:05:d8:60:26:e2:28:fc:45:71:4f:8b:88:dc:
0d:a3:c1:c0:e5:97:d2:6d:cb:53:ea:d9:af:b2:7a:c6:44:44:
3f:94:4a:d9:0e:33:70:4d:c6:73:1f:53:c7:a2:fd:3b:36:cc:
e8:8f:61:53:35:d6:73:df:d0:8e:08:2f:de:90:7f:d9:c5:9c:
c5:e7:c6:e4
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 3 12:42:42 2024 by rpki-client on console-ams.rpki-client.org