Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203233343730.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: e4hfJIaF+w7rM93Gwt/KYB16tjyfxEvAyC1r31rIvJk=
Subject key identifier: 2A:0E:7D:F5:0B:B8:9C:25:59:EA:0A:19:0F:FA:A8:F1:A6:FD:5D:F5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 40619EF4C170D432CE82A7F18F6B0FA7F9D6665A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203233343730.roa
Signing time: Mon 08 Jan 2024 09:21:29 +0000
ROA not before: Mon 08 Jan 2024 09:16:29 +0000
ROA not after: Mon 06 Jan 2025 09:21:29 +0000
asID: 23470
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:61:9e:f4:c1:70:d4:32:ce:82:a7:f1:8f:6b:0f:a7:f9:d6:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 8 09:16:29 2024 GMT
Not After : Jan 6 09:21:29 2025 GMT
Subject: CN=2A0E7DF50BB89C2559EA0A190FFAA8F1A6FD5DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:dd:6c:ca:df:d8:1d:6c:74:32:dd:ff:8e:
af:dc:db:60:53:5d:60:b8:9f:62:2c:77:ce:d3:c6:
3a:ac:ae:e0:96:7f:52:67:e8:1b:75:48:f9:86:7c:
93:61:9d:b4:b9:ab:81:d8:a0:c8:82:72:9f:d8:a4:
3f:87:0a:81:3f:48:79:c5:2e:f7:dd:90:32:f3:27:
90:27:80:77:1f:01:b9:ad:bb:bc:3e:4c:8b:07:76:
61:7d:f5:9d:0a:46:46:77:df:42:c9:24:ff:52:c2:
30:2a:d9:16:07:f5:6c:2c:9f:f1:38:1d:57:aa:ff:
61:53:22:b5:e2:0c:aa:03:10:c6:cb:70:3e:da:ca:
d2:56:4f:c3:6f:a9:5f:0e:46:07:64:0e:67:87:c2:
0f:68:34:dd:b0:00:ee:b6:7b:b4:f6:74:7c:0c:ff:
a4:81:04:7d:4e:bc:ff:7a:34:3c:c9:0a:af:ba:64:
94:8a:e6:9a:24:a9:05:7e:f8:ce:be:30:b2:e9:66:
11:ad:39:38:6f:2b:15:1c:03:76:56:be:06:c3:87:
cb:f2:04:92:72:1f:75:7a:dd:96:84:72:fa:ec:b9:
13:9b:09:26:7c:29:86:bb:51:98:6c:02:b0:e6:cd:
19:13:3f:50:94:5b:37:6c:06:b0:d6:ae:e1:52:e4:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:7D:F5:0B:B8:9C:25:59:EA:0A:19:0F:FA:A8:F1:A6:FD:5D:F5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3d:e9:4f:72:29:09:7b:6a:95:11:a3:f9:20:a3:29:81:1c:
c1:93:e5:8b:83:e9:81:73:e7:5a:ed:0a:b1:c5:fe:bf:3e:84:
b8:61:94:bc:b2:98:4d:59:93:59:19:b6:37:4e:89:b7:37:c2:
65:aa:a3:d0:bf:d9:85:95:d5:ad:b7:ad:8a:28:ed:57:9a:c9:
1e:f2:95:4b:4c:0a:77:6e:0e:98:71:5e:13:c9:34:77:b5:a6:
a3:43:6c:aa:75:98:e4:53:48:7b:11:3a:a6:b4:f4:b3:b5:60:
de:4f:7c:0f:65:ad:a8:d9:04:87:ae:1a:3f:95:fb:fe:02:fe:
4b:81:c5:58:17:88:ff:e3:98:ae:9d:e3:f3:18:9a:b4:dd:77:
47:d9:35:5a:39:0b:b7:20:e8:fb:23:a3:dc:69:de:1e:14:4b:
7b:5c:65:69:8e:54:8a:84:f6:22:c4:ca:4e:82:55:cc:ec:f0:
34:c1:19:4a:5c:6c:4b:ee:51:7c:48:24:f8:a7:aa:01:cb:78:
88:58:6c:ae:93:b6:eb:45:6d:df:08:b3:59:97:c7:38:bc:5e:
53:e8:00:bd:51:5b:80:c1:31:e5:84:ca:e8:7b:41:92:cd:93:
f7:9e:68:a2:6b:4c:b9:b7:ce:78:34:93:9a:91:3f:db:62:38:
6c:b8:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:18:12 2024 by rpki-client on console-fra.rpki-client.org