Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Ud8Z0+w28skzGP7fkcIJPPpuidXWFvf70MUzL1BjsRI=
Subject key identifier: B3:3C:52:96:0F:7A:BB:45:2A:E8:DB:FF:20:DB:14:40:2B:FF:32:91
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6C4284E6CFACF3EF60B1B86F439A991E0D9E44B3
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
Signing time: Tue 16 Jan 2024 08:08:58 +0000
ROA not before: Tue 16 Jan 2024 08:03:58 +0000
ROA not after: Tue 14 Jan 2025 08:08:58 +0000
asID: 834
IP address blocks: 109.110.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 14:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:42:84:e6:cf:ac:f3:ef:60:b1:b8:6f:43:9a:99:1e:0d:9e:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 16 08:03:58 2024 GMT
Not After : Jan 14 08:08:58 2025 GMT
Subject: CN=B33C52960F7ABB452AE8DBFF20DB14402BFF3291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:3b:d1:29:f5:67:d9:ed:77:ba:d6:94:72:
86:4f:0b:b9:64:81:4a:72:33:aa:fb:02:57:71:9c:
17:ff:3b:bc:61:ca:41:2b:f5:25:f4:0d:e4:49:2d:
97:9d:69:a9:2d:2d:ce:e9:4e:d9:b4:35:0b:09:72:
91:ff:51:79:37:5c:12:f3:49:30:fc:41:97:68:4a:
c0:66:f8:1f:64:2c:7d:aa:e2:fc:01:d5:3c:ac:56:
3c:af:aa:41:22:06:5d:a9:f7:8a:ae:03:14:00:de:
fd:74:74:a2:9f:db:5d:c2:7a:42:2e:4d:7d:37:51:
be:ac:01:17:45:11:06:39:09:95:00:b1:a9:20:14:
05:b3:f0:23:21:d4:03:a9:98:87:03:42:33:d8:c9:
f9:de:39:59:27:ec:65:ea:86:e4:37:53:9a:a5:d5:
af:53:6b:45:fd:d6:bd:d5:b1:57:91:68:f1:44:ee:
30:ba:45:89:ec:17:1f:a6:9d:99:94:be:b9:46:d1:
e0:99:d5:a2:38:8a:2d:69:92:2c:fb:a4:e1:20:b2:
06:fe:d8:8e:fd:44:67:c5:07:3d:b6:b1:4d:21:ad:
03:cf:7f:8c:77:2a:da:29:ec:71:88:c9:cd:bf:2a:
e9:e4:14:de:8c:9f:3c:97:48:76:68:5d:44:7d:12:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:52:96:0F:7A:BB:45:2A:E8:DB:FF:20:DB:14:40:2B:FF:32:91
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:ff:b2:0b:74:db:59:7f:be:bb:84:a9:24:d6:fa:45:d6:5e:
4e:fc:33:0c:7c:72:84:d6:b7:38:36:3e:c1:37:74:45:9a:6e:
bf:05:76:da:76:76:62:e7:46:ed:af:73:82:1f:f8:5a:9e:be:
8a:42:fc:83:4e:b4:df:a9:10:4f:0c:6c:02:77:64:27:f9:dc:
3a:97:91:dd:84:43:a6:bd:7e:e8:70:fa:8f:8c:87:32:ed:34:
08:9b:12:31:08:16:e7:36:41:81:7b:36:b1:b6:0f:33:da:d4:
61:de:91:3d:a9:90:f9:cb:d6:96:12:c2:e4:7f:21:b6:8a:29:
2d:f1:54:d3:96:39:94:7f:cd:15:5c:ec:83:f1:20:7e:c4:fe:
46:2d:23:5b:46:97:20:b4:64:75:db:3d:be:5b:11:68:7e:fe:
95:6e:27:1f:4e:ff:9e:7b:24:4b:f2:ff:cf:07:ac:83:dd:ad:
92:fb:44:eb:f6:fb:2b:ca:ae:92:e5:5b:d6:ee:4d:06:d3:5e:
f8:c6:b0:2d:0f:78:40:81:d0:45:88:a3:ec:ed:30:fa:a8:7f:
20:82:f0:d8:0c:a8:db:b2:52:ee:07:2c:38:8c:e7:db:92:40:
cf:e2:74:1d:b7:ea:73:b9:4b:8b:14:ca:41:38:a2:40:7d:c1:
c9:33:09:82
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 20 18:27:18 2024 by rpki-client on console-ams.rpki-client.org