Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3137342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: xF6aOkEI2rmRgWfmZc9G/oCC51xV4azirJaA3Tej5XM=
Subject key identifier: 86:F2:91:91:EA:43:14:47:EF:3D:F6:45:40:04:B7:40:39:31:7D:A8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0725401572636465737A4D8504B9096DD505964B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32332d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 16:59:53 +0000
ROA not before: Thu 08 Feb 2024 16:54:53 +0000
ROA not after: Thu 06 Feb 2025 16:59:53 +0000
asID: 834
IP address blocks: 109.110.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:25:40:15:72:63:64:65:73:7a:4d:85:04:b9:09:6d:d5:05:96:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 8 16:54:53 2024 GMT
Not After : Feb 6 16:59:53 2025 GMT
Subject: CN=86F29191EA431447EF3DF6454004B74039317DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:7d:de:50:ca:99:91:0d:2b:14:d4:c7:bd:
01:b3:65:d2:b6:b2:b0:90:e8:db:3f:aa:f8:71:5b:
24:a6:11:43:0f:ab:57:ea:61:ad:db:67:84:e8:5c:
79:71:c2:43:9d:45:0b:5d:e9:f8:a9:20:ed:fb:c5:
e6:bc:9d:a0:11:23:af:5e:51:4f:ab:f6:cf:a8:d3:
45:8b:9a:83:42:22:1f:97:d7:3d:3d:b9:23:4c:83:
97:49:ab:39:90:3f:cc:05:25:99:eb:3c:4e:f3:21:
85:8c:a5:ee:60:b5:a3:01:dc:4c:87:77:91:38:72:
d5:d2:9f:c0:aa:8e:4b:e3:12:38:41:2e:e2:bc:af:
80:6c:e6:46:a1:f0:0a:ee:d9:22:c2:e5:84:40:9d:
2b:5a:78:c0:f0:7d:c2:3b:96:56:1f:5f:7b:87:61:
46:a5:2f:d7:c4:f1:d4:52:12:55:a2:59:c6:d8:04:
0c:9a:d1:6b:c9:c0:da:8a:60:ba:86:2c:36:e0:d6:
ae:0c:93:59:d3:9c:0f:e7:ff:e1:61:fb:27:c3:70:
3e:f3:be:49:00:24:fb:81:cd:5c:26:4c:23:7c:f7:
9a:db:bb:77:0f:89:11:e8:1a:3f:3d:2f:31:d2:15:
fd:b5:d9:31:6c:d0:ac:cb:3b:30:56:0c:f4:35:51:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:91:91:EA:43:14:47:EF:3D:F6:45:40:04:B7:40:39:31:7D:A8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.174.0/23
Signature Algorithm: sha256WithRSAEncryption
15:1a:fe:0c:b5:28:e9:95:c8:61:81:76:e7:7c:5b:4b:7c:3b:
08:7a:78:ae:18:32:5c:08:46:a7:2d:4d:8e:43:fa:eb:d5:cf:
d4:e0:d0:11:25:94:cd:aa:1a:cd:7d:97:d3:48:a5:85:b2:0f:
02:25:62:3d:27:30:80:1f:49:3a:7c:12:81:5a:64:0d:db:49:
dd:93:c0:1e:4d:b9:11:e5:38:40:43:ff:fc:32:9c:72:b1:65:
2b:d3:cf:b3:68:b1:37:52:82:eb:17:50:b5:dd:00:1c:f3:0d:
db:19:10:a7:c7:c6:48:3d:4e:c3:4e:80:48:32:fd:ac:fa:a7:
b4:52:47:62:4c:22:ff:d5:2f:b6:8d:c7:da:f9:9b:1b:77:d0:
93:8b:60:57:8f:9d:a6:ec:dd:54:cf:a8:d4:48:f9:56:d2:67:
87:98:85:e3:7b:7f:82:55:5c:8c:27:12:78:d7:bb:43:cb:f1:
fa:ce:1c:f7:3d:07:28:d4:75:f9:27:fb:34:88:60:3c:58:59:
34:a8:b7:2c:22:54:ac:72:57:d0:f2:2e:35:ef:74:ac:83:08:
f9:6c:b9:6f:31:33:fa:cd:9d:0a:62:9f:52:c9:de:20:24:74:
6c:a4:d5:e8:44:30:78:0f:11:8a:ee:0f:1a:53:63:24:25:3d:
48:79:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 18:27:21 2024 by rpki-client on console-ams.rpki-client.org