Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OYmKM2+Ux5JWenuCNCveM/zSOiW/7zvxgKW/rhWYaLI=
Subject key identifier: 42:C9:D5:8C:E5:79:FD:2E:07:0E:67:A8:FC:A2:B9:2A:C6:17:25:72
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 523A80EBF94711147B7B930E370133FB64C31C34
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20383334.roa
Signing time: Fri 01 Nov 2024 10:46:33 +0000
ROA not before: Fri 01 Nov 2024 10:41:33 +0000
ROA not after: Fri 31 Oct 2025 10:46:33 +0000
asID: 834
IP address blocks: 109.110.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 15:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3a:80:eb:f9:47:11:14:7b:7b:93:0e:37:01:33:fb:64:c3:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 1 10:41:33 2024 GMT
Not After : Oct 31 10:46:33 2025 GMT
Subject: CN=42C9D58CE579FD2E070E67A8FCA2B92AC6172572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:fe:28:c8:96:85:2c:48:10:23:8c:ee:98:
c0:6a:cf:89:0b:ff:d3:0f:9a:d9:94:3f:11:5f:4d:
7e:df:df:4e:18:d4:e6:63:2a:cd:98:e8:06:22:9d:
c6:66:bb:fc:46:bb:54:f3:0f:fd:af:b1:5e:d4:77:
ce:08:61:bb:82:4d:74:a3:3e:2e:7c:79:c8:18:0b:
e5:6c:99:70:22:ea:16:12:14:c5:e7:10:eb:ab:fa:
81:62:e3:05:3b:7a:9a:1f:a7:c8:37:64:8a:52:a7:
6a:55:0c:ff:8b:45:54:6e:71:ba:50:85:ea:b6:22:
fb:55:b6:fb:e7:ab:01:81:27:b3:64:b6:41:51:e7:
d0:ed:5d:5e:62:fd:0b:83:69:44:26:02:82:9e:01:
cd:27:26:72:8f:48:ed:01:b8:8a:7e:91:ba:ea:c8:
45:38:ab:e9:64:f5:63:df:5f:a8:bb:23:f4:53:50:
75:49:d3:3e:6f:b1:2b:ff:40:66:7b:6d:39:d4:d9:
7b:d4:e5:c1:00:76:2d:07:f3:99:3d:f6:17:be:3e:
e9:5f:df:d1:66:37:06:9a:38:da:6a:61:23:4d:68:
f2:d0:74:8c:9f:f9:62:7a:f1:20:57:82:b1:e5:c2:
f7:59:c1:6d:f7:ab:10:16:8a:0d:8b:c3:58:62:67:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:D5:8C:E5:79:FD:2E:07:0E:67:A8:FC:A2:B9:2A:C6:17:25:72
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:1e:c2:1e:4d:0a:2e:07:52:ea:85:08:20:32:20:48:8c:
14:47:4e:e0:78:0f:55:0f:44:c2:0e:13:a0:dd:97:05:7c:e7:
d0:6e:5b:32:c8:ed:fb:1c:14:50:01:70:c7:43:36:26:af:b5:
78:71:85:a8:37:ea:a4:b0:39:c6:23:93:1c:24:9b:39:ab:c1:
d2:d5:45:d1:f0:6e:b2:b4:92:77:ac:25:2f:84:62:c3:ed:bf:
3c:c4:23:f1:e9:bc:ba:0d:11:b5:65:77:6b:38:d6:04:ea:4e:
3b:af:28:f8:38:e0:3b:58:2b:db:4b:5c:27:13:ea:37:4f:91:
8f:45:db:8a:3c:fc:42:bd:0d:48:fd:67:f2:05:a1:fd:ec:26:
f1:e9:47:47:e1:3c:3d:dd:8c:ba:dc:f5:f2:5a:22:01:2e:4b:
16:fa:0f:b8:7b:79:33:ce:0d:89:2d:df:d3:e4:01:70:ab:59:
8d:08:78:35:e3:a6:5f:d3:ef:15:c0:df:94:8b:87:d8:f4:ea:
77:63:85:6e:1b:03:da:f5:8f:c9:28:ca:76:6c:c1:cc:91:08:
a2:69:74:9e:50:3b:6c:c6:5a:58:62:9b:64:c4:f9:d0:69:90:
1d:22:7b:32:61:da:4c:a1:86:f9:60:eb:04:cb:7c:b9:ba:b3:
bb:e7:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 17:59:44 2024 by rpki-client on console-fra.rpki-client.org