Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e2038313030.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: MLj6v7RbT5KWZgcHWlDDSm4yNM7oX+g4ismEOzMem14=
Subject key identifier: F5:CF:B9:5C:71:B1:CC:08:C6:19:9D:1D:E3:F5:3C:DD:64:DE:1F:4B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 10268E9D98A12B6D1B63188063754452E1BA2E17
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e2038313030.roa
Signing time: Fri 16 Feb 2024 14:59:40 +0000
ROA not before: Fri 16 Feb 2024 14:54:40 +0000
ROA not after: Fri 14 Feb 2025 14:59:40 +0000
asID: 8100
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:26:8e:9d:98:a1:2b:6d:1b:63:18:80:63:75:44:52:e1:ba:2e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 16 14:54:40 2024 GMT
Not After : Feb 14 14:59:40 2025 GMT
Subject: CN=F5CFB95C71B1CC08C6199D1DE3F53CDD64DE1F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:76:68:c0:9b:f5:c0:92:72:b9:a4:d0:fb:
07:7d:23:d7:6d:a5:fc:6a:7d:10:35:12:08:41:c5:
ad:c3:ff:42:00:2b:ca:91:b0:00:20:dc:59:98:89:
86:5f:9e:51:bb:95:61:7c:22:d0:e1:3e:f2:9e:58:
dc:90:59:8f:f5:f4:09:66:07:aa:9f:4e:89:26:f9:
69:e3:75:ea:39:0b:70:f0:a5:e3:94:89:e2:fc:b2:
87:aa:16:84:86:a8:b7:2c:05:fc:c7:47:de:24:6e:
ee:92:74:02:c9:c6:69:b9:d9:2a:76:bf:43:b0:5b:
63:a9:59:9e:6b:f1:66:96:9c:8c:87:35:9e:0e:fd:
ed:fb:b1:92:6f:49:41:f9:2d:55:d8:7e:0a:a1:23:
96:4b:0e:59:31:93:dc:63:be:d0:0a:dd:51:36:9a:
d6:09:d2:60:6f:ed:49:6e:50:17:ff:67:ad:e1:bf:
75:ed:c3:e6:0c:71:23:29:07:4a:e8:8d:fb:fd:7e:
81:50:de:d6:c6:df:b9:80:7f:ba:76:a8:72:d2:1e:
99:cb:3b:04:06:82:bf:40:81:c4:9d:70:68:5c:14:
75:19:56:11:58:1f:a7:82:78:45:b0:97:47:9f:1e:
64:f6:87:60:90:69:ea:54:65:02:30:fe:c9:93:7a:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:B9:5C:71:B1:CC:08:C6:19:9D:1D:E3:F5:3C:DD:64:DE:1F:4B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
41:95:b1:b6:18:bd:7d:19:94:06:98:c4:6b:09:aa:0f:91:86:
be:0d:50:fd:e9:38:06:cb:77:2a:31:79:a6:3d:1a:29:b3:24:
fc:e2:9f:62:50:8a:5e:b6:a2:b8:e0:35:bc:eb:8f:3c:7e:b9:
4b:6e:5d:7d:75:82:56:b6:f8:8f:66:b3:68:60:6f:72:5d:ea:
9e:ed:bc:bc:be:37:cc:a8:2a:26:76:52:4c:ed:25:b6:86:22:
93:36:4c:1b:eb:5f:c6:cc:93:34:c1:25:7c:e6:a7:20:d2:8b:
f7:b1:04:e9:a0:1d:1e:80:82:95:4c:03:21:fb:ea:37:8a:3d:
a3:e7:d4:6e:95:f6:99:fe:c3:2c:d7:4d:ca:cd:53:5b:d5:de:
93:20:42:96:db:19:49:cc:d0:da:77:e3:c7:d9:6c:7c:76:1d:
10:f8:fd:c9:fe:a8:24:9f:e2:85:9d:0f:cb:c1:c3:df:4f:f8:
8f:89:20:de:ec:d7:29:fc:58:f4:53:ba:fe:48:e4:84:0e:e6:
92:28:51:af:7f:af:87:b7:cd:4a:a1:3f:f3:50:53:ec:d2:d2:
cb:ea:a1:9d:75:54:f1:f3:43:a9:76:d7:cc:43:23:1a:9d:4b:
a4:5f:ef:f4:fb:ce:47:f1:9b:fd:61:5d:87:39:5a:d9:98:ca:
71:d2:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:54:53 2024 by rpki-client on console-fra.rpki-client.org