Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: J5B0TbhvsJFzmq0giCZ3vYGQC7BpQ5pwoxw2wGnnkVA=
Subject key identifier: E5:47:E2:2A:65:94:98:35:5A:A5:F9:6F:16:A3:88:64:C4:50:9A:F0
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4B7ACB83F8015C2F2EE4BC0C48FF1B3157210FCB
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20383334.roa
Signing time: Tue 03 Sep 2024 10:07:44 +0000
ROA not before: Tue 03 Sep 2024 10:02:44 +0000
ROA not after: Tue 02 Sep 2025 10:07:44 +0000
asID: 834
IP address blocks: 109.110.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 16:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7a:cb:83:f8:01:5c:2f:2e:e4:bc:0c:48:ff:1b:31:57:21:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 3 10:02:44 2024 GMT
Not After : Sep 2 10:07:44 2025 GMT
Subject: CN=E547E22A659498355AA5F96F16A38864C4509AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:ff:62:39:b8:45:ad:b5:16:1d:e1:b5:ef:
de:24:a5:cc:87:bc:64:e0:7a:20:d9:b3:9d:2e:7b:
c8:b7:93:e4:60:9c:7b:fe:7f:e8:24:9c:c1:a3:21:
8d:0f:d5:56:54:27:79:03:4a:1a:ee:e3:3d:96:95:
31:60:e1:fa:68:b7:ca:d9:63:ee:9a:35:d7:cc:82:
1c:de:38:a3:34:c2:fc:86:cc:cb:55:c9:e3:a2:94:
77:a3:f9:79:6f:0e:dc:41:e0:56:68:23:1a:e0:be:
b0:90:fb:f7:04:68:8d:1a:0a:09:ba:9c:e0:6d:8b:
f9:4f:87:81:26:fd:63:e9:34:53:b2:be:c9:db:b0:
ec:06:08:1a:4b:00:b7:67:32:0c:33:a9:1b:cb:43:
99:58:c5:73:21:40:b8:c9:2b:85:d1:df:2a:5d:54:
6b:e2:14:ef:02:18:24:f9:3c:35:28:e4:17:2b:1c:
97:3f:5d:51:1d:3e:a8:8f:45:48:93:3c:8c:f2:d1:
8c:76:d2:07:91:b0:7e:c3:0f:88:e3:f0:23:a5:69:
ab:5a:15:92:52:e7:82:0d:1b:39:af:36:78:37:77:
0e:e1:76:57:ff:e5:f0:91:39:41:df:b1:c1:30:00:
3a:b1:ab:e0:bc:e3:23:4a:b9:c7:87:6c:e3:eb:b9:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:E2:2A:65:94:98:35:5A:A5:F9:6F:16:A3:88:64:C4:50:9A:F0
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c2:81:d4:9b:c2:a2:b7:c7:8e:c9:ba:17:f8:11:c0:55:bc:
f1:94:7a:18:22:20:0a:f5:a6:58:48:77:60:d4:17:7d:6a:a8:
1f:23:93:8b:b1:7b:96:91:ea:99:66:72:3e:8f:36:0d:94:b0:
29:38:7a:77:9e:f9:d4:cc:12:4c:a9:68:94:39:0f:61:76:f9:
17:e0:49:32:7f:38:3a:39:45:63:4f:62:fe:53:ae:16:b4:d4:
df:f8:25:f8:34:8f:e1:88:94:79:1e:ea:fb:77:59:34:0f:46:
c8:25:9b:c1:5e:0c:d1:df:20:66:9a:ac:f2:d9:3b:b7:b8:39:
b7:e8:5d:46:ae:be:5c:d0:57:a4:f4:de:8a:73:23:ec:9e:5e:
91:40:c7:44:13:eb:5c:37:ed:16:f3:a4:38:74:87:70:77:57:
d3:b6:06:6b:dd:79:fe:87:dd:ef:7a:86:22:58:78:02:c8:cf:
a1:a4:bf:8e:93:f2:87:30:b2:fa:e8:ac:a4:1f:16:23:cf:04:
54:2d:98:01:23:fa:d6:c6:83:64:52:13:44:fc:a0:a2:77:cd:
a3:7c:e1:5e:94:51:a1:4b:d6:f4:92:59:59:1a:de:80:8a:9c:
43:4a:f1:c8:fc:7c:5b:db:1b:63:b4:a8:df:94:f4:39:97:35:
d4:af:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:57 2025 by rpki-client