Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20343030383636.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: jpsV6o5G8IDyg3KIBiaJ81GO1TbJeTkZfQYu6JEhz48=
Subject key identifier: C3:43:A5:DD:83:1C:AE:A5:FD:ED:9F:9D:E8:D1:CC:16:83:BA:F7:70
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 53D8E0B176F264B351AFBD0819CC8F30F831685A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 17 Jun 2024 02:50:37 +0000
ROA not before: Mon 17 Jun 2024 02:45:37 +0000
ROA not after: Mon 16 Jun 2025 02:50:37 +0000
asID: 400866
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d8:e0:b1:76:f2:64:b3:51:af:bd:08:19:cc:8f:30:f8:31:68:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 17 02:45:37 2024 GMT
Not After : Jun 16 02:50:37 2025 GMT
Subject: CN=C343A5DD831CAEA5FDED9F9DE8D1CC1683BAF770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:a6:bb:ca:17:6a:92:f3:bf:a4:ca:67:b9:
e0:9b:b9:d8:e8:f9:62:1e:fd:b3:33:04:7b:d5:36:
60:7c:3b:d5:1d:b6:0c:50:6a:a4:7d:0c:83:f9:c3:
38:f2:6b:30:cd:e1:bb:61:6c:52:38:aa:85:12:61:
a5:74:89:ad:e0:6d:ea:f2:97:4a:55:2c:ab:6b:df:
92:eb:eb:2e:ba:74:7d:5a:0c:5d:33:c9:0b:8d:0f:
bf:e3:69:be:a1:ac:5f:6c:b8:cf:3e:4a:a9:9b:00:
09:b0:b8:90:3a:19:a1:b8:92:a6:d1:ff:cc:75:f1:
6e:bd:99:6c:10:e9:24:df:aa:e8:d5:9a:bd:27:d0:
90:20:5e:a6:8b:ec:b3:c8:c6:a9:65:c7:73:37:12:
90:8f:6c:e9:f2:f4:99:b9:fb:b0:3e:ee:2a:70:f0:
d5:54:ee:6a:0a:56:6e:a6:16:c1:e1:80:60:06:ca:
8d:82:d4:67:72:d7:05:52:5b:45:32:0b:1f:0c:9f:
29:dc:0a:3e:fd:40:da:37:c7:d0:71:a4:52:23:08:
2f:1e:fc:3f:b5:58:0e:99:40:d7:5b:a2:42:d0:fd:
52:4f:17:32:aa:4d:8f:b7:6b:93:23:0f:2f:9c:1e:
ef:34:c5:be:bc:0b:00:6b:1c:44:87:f6:b4:38:93:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:A5:DD:83:1C:AE:A5:FD:ED:9F:9D:E8:D1:CC:16:83:BA:F7:70
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:26:8a:d0:82:c4:ed:c0:80:e5:2a:9a:70:47:66:49:6d:fd:
3e:ea:aa:9f:af:3e:0c:26:52:d0:fc:70:7e:95:d0:af:ac:91:
f1:7e:f8:d9:c3:18:94:97:62:48:72:48:0e:43:66:86:bf:90:
4e:83:9b:e3:96:91:d5:71:27:6e:53:2b:a8:fa:2d:84:4c:7e:
a7:7d:31:f2:f4:fe:72:31:27:63:e7:08:cf:14:a1:55:41:c8:
0e:9b:ea:86:8e:70:9b:51:e8:4c:d3:39:dc:dd:2b:62:09:ba:
ed:f7:c2:2c:f9:db:78:03:2c:d9:a9:5c:95:57:48:b7:dd:0e:
0a:6f:3b:01:a8:db:bf:5d:2f:43:3d:f0:17:7b:cb:0c:16:97:
02:f7:ee:89:0a:e7:b1:9e:c1:fe:47:1e:48:c9:f5:f0:c5:0e:
08:d4:2c:d4:51:0d:a3:ae:19:e7:91:1b:02:07:c3:6a:4c:21:
40:6a:33:8a:84:70:25:a9:11:0e:17:38:cc:1a:bf:da:76:29:
2b:ea:4a:c4:ce:01:48:6a:15:ee:92:1f:ec:a0:1d:a7:b5:f0:
9b:47:c4:72:b6:dc:ea:7e:ef:40:8f:97:6c:d3:be:70:9c:5b:
53:80:bc:23:9c:65:9e:4e:19:12:3f:b8:df:91:dd:98:c2:02:
df:8e:92:ff
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 17 02:54:54 2024 by rpki-client on console-fra.rpki-client.org