Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313430323038.roa
File: 3130392e3131302e3137352e302f32342d3234203d3e20313430323038.roa (raw, json)
Hash identifier: lFh6K6C7xatuYlwdWW7HYImT4wsCdyY1aGnoCPfjY3g=
Subject key identifier: 8E:5A:91:59:47:F1:E0:1C:6D:4E:0D:11:4E:15:91:AD:2D:F6:C4:53
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5909FD5D7012D610D7EF9102681F4F83A5746D9B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313430323038.roa
Signing time: Mon 12 Feb 2024 05:24:43 +0000
ROA not before: Mon 12 Feb 2024 05:19:43 +0000
ROA not after: Mon 10 Feb 2025 05:24:43 +0000
asID: 140208
IP address blocks: 109.110.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 09:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:09:fd:5d:70:12:d6:10:d7:ef:91:02:68:1f:4f:83:a5:74:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 12 05:19:43 2024 GMT
Not After : Feb 10 05:24:43 2025 GMT
Subject: CN=8E5A915947F1E01C6D4E0D114E1591AD2DF6C453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:cd:68:53:60:c9:07:23:1b:f8:11:5d:eb:
33:e5:f6:ed:d8:4d:5b:24:f3:0d:70:56:0c:b8:c4:
a1:7a:cb:b0:d0:99:61:bf:14:bf:79:f1:97:ff:dc:
c3:75:6f:71:1b:57:4c:34:1f:23:d8:a0:47:35:63:
80:2c:3b:05:c7:cd:3b:a6:41:97:f1:32:31:cf:4a:
6f:b8:91:9b:28:aa:06:5e:83:a5:ce:1e:82:1d:e8:
d1:a3:09:b0:e3:77:d1:b2:d8:b5:ad:eb:2c:b2:49:
88:fd:da:ee:97:8d:ad:c4:8e:c7:31:05:d3:9e:29:
6c:24:4a:1c:d8:2c:f2:f6:dc:a8:da:b5:2b:34:b8:
c4:2b:f7:1c:cb:38:c0:8b:2a:27:5c:9e:4e:31:a3:
60:61:27:15:4b:ac:30:09:e6:9b:c0:c6:bd:72:67:
87:63:e1:cd:33:1f:93:b3:e7:b4:0a:57:55:f2:12:
b6:da:aa:71:84:f9:99:59:e9:3d:94:39:b6:54:fe:
57:e7:00:e3:a5:51:e9:32:e8:10:c9:21:4d:3d:d9:
a5:7a:58:8d:84:af:93:a9:aa:4e:53:a6:90:b2:1a:
f9:57:58:65:1e:72:fd:d9:08:37:db:f0:a5:3e:fb:
94:c9:4b:50:2a:45:7c:18:c7:b4:b8:71:87:07:17:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:91:59:47:F1:E0:1C:6D:4E:0D:11:4E:15:91:AD:2D:F6:C4:53
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e20313430323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
01:35:b3:d4:39:98:15:50:0f:e4:5f:a0:38:f9:8b:64:0d:13:
8a:d8:6f:2b:ed:cd:f4:33:9a:fe:78:d1:ac:93:5b:92:e6:aa:
40:99:08:b6:66:0d:af:6f:6b:b6:2b:93:35:f7:f9:8c:fd:cb:
1b:7a:07:05:e2:ec:f7:ae:83:1d:d0:00:43:c6:40:65:1c:8c:
b9:c7:d2:ad:b0:f9:8a:91:f7:23:df:c6:d7:62:55:9e:54:0c:
98:fc:ac:3d:07:50:61:7b:0d:02:fe:94:e9:7c:6d:10:40:ac:
48:00:46:84:ca:37:ea:71:73:00:c9:e6:93:47:e3:1d:2c:bb:
21:4b:f6:8f:40:88:90:ad:96:23:52:17:00:bc:f5:fb:c0:59:
13:6d:2a:42:31:90:1a:e2:e8:40:cd:ef:67:2a:fe:e5:5e:7c:
f9:dd:da:26:39:67:a6:9e:e9:90:05:5e:eb:e3:db:18:43:3d:
21:78:9a:91:67:17:ec:b5:32:fd:3d:4a:cb:42:b6:bf:38:b5:
13:85:2d:5b:ec:e4:8b:b8:e4:53:92:aa:93:40:65:ff:58:53:
af:d2:38:65:2b:d1:c2:f0:21:cb:d8:27:dc:b0:34:97:a8:9d:
02:2d:f1:e0:07:11:fe:62:57:73:63:4a:15:7b:3d:c4:30:43:
96:94:42:42
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 10 11:30:38 2024 by rpki-client on console-ams.rpki-client.org