Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: K5HSydUMD3g2MadghcwWMeGv9ojV9OLXbchZf0uyCRU=
Subject key identifier: E0:BF:7C:90:CF:07:3E:BD:C4:FA:94:AE:38:A9:22:4C:AC:9F:93:12
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 55F6911CD00D4800E065BA07BFB3B5CC18E13222
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
Signing time: Wed 14 Feb 2024 10:17:38 +0000
ROA not before: Wed 14 Feb 2024 10:12:38 +0000
ROA not after: Wed 12 Feb 2025 10:17:38 +0000
asID: 834
IP address blocks: 109.110.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 14:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f6:91:1c:d0:0d:48:00:e0:65:ba:07:bf:b3:b5:cc:18:e1:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 14 10:12:38 2024 GMT
Not After : Feb 12 10:17:38 2025 GMT
Subject: CN=E0BF7C90CF073EBDC4FA94AE38A9224CAC9F9312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:7f:5a:e3:b3:c9:79:79:e4:88:e0:32:d5:
2d:14:15:24:12:7f:a2:da:b1:4f:c5:b4:c7:ff:ac:
6e:28:3f:63:13:40:ac:e0:0d:97:49:48:fe:3c:f6:
b7:c2:3a:26:04:da:9e:41:19:87:f3:c7:d8:62:e5:
2a:90:eb:ac:7b:66:1c:ad:a3:60:0b:ff:cb:11:54:
70:05:73:22:fa:3b:71:85:fc:74:03:b1:f7:12:e2:
75:77:25:87:f7:63:b9:ec:15:14:d1:88:f3:4d:7c:
87:cd:c5:5d:8a:92:fd:59:45:aa:ed:39:06:91:01:
b6:9a:7e:fa:ee:62:94:3a:d7:e3:47:fb:fc:03:67:
e6:cb:9b:5e:37:5b:04:48:81:17:fb:4e:d0:ce:6a:
b5:e3:5a:18:71:74:db:50:b0:60:89:71:b9:14:02:
3e:b9:e4:5a:46:bc:62:74:1f:78:08:3d:d3:23:ef:
16:d3:5f:13:ea:b4:e3:44:76:59:77:8f:07:8e:e8:
68:fe:19:6a:60:c0:ee:24:49:c7:05:de:6f:1c:69:
90:57:17:17:6a:7e:b3:a6:c0:bd:aa:80:15:d5:09:
2e:be:d5:48:98:31:04:06:1e:82:73:ef:68:ff:f2:
6c:42:c7:f3:1f:d4:1a:e1:f7:60:8d:5c:b5:a6:6c:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BF:7C:90:CF:07:3E:BD:C4:FA:94:AE:38:A9:22:4C:AC:9F:93:12
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.177.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f4:64:25:70:17:54:71:c0:74:28:33:da:c5:eb:87:6d:a2:
ae:3c:4a:4d:e6:58:61:28:ce:a7:58:22:93:c5:bf:74:a5:e4:
4a:57:e9:54:ca:f4:8e:63:cc:ce:18:3d:26:20:f8:55:cf:85:
6a:e7:c4:c8:a3:b7:ed:ad:8f:ca:e3:3b:ee:3c:3f:6c:23:4a:
5b:9c:90:a2:c4:09:e4:cf:d2:f5:3f:70:5c:b7:c6:17:41:5e:
ec:07:77:76:fb:c3:05:b3:57:8b:9c:10:ac:75:74:28:4d:4a:
f6:c6:f4:eb:0f:27:43:3a:c3:f2:93:a0:55:17:08:06:73:97:
dd:a1:bd:04:8e:5d:5b:94:47:6c:1a:4b:42:91:36:06:39:e0:
f5:4b:4d:ac:18:a3:3a:38:0a:e3:de:97:55:8a:28:82:4c:3d:
b2:f9:2f:ff:f1:1b:37:42:5e:46:59:98:23:5e:21:28:70:77:
22:ae:1e:99:d4:8c:62:f7:82:44:56:cd:1c:92:15:42:10:43:
8d:7b:73:41:45:02:35:18:b2:cc:9e:a1:2e:f5:87:3f:3c:6d:
03:02:8c:97:ae:32:7b:d0:96:5f:bb:69:fd:28:25:c6:81:0a:
6e:22:a0:ea:38:f0:b6:be:34:74:09:c5:3c:13:a2:1b:0d:71:
f5:02:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:22 2024 by rpki-client on console-fra.rpki-client.org