Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: SGG34r30nyessuvmWCvwIHq7jbqxspvLZZr0Zr5g9wk=
Subject key identifier: F4:6C:CF:A4:EA:F1:F3:32:52:5E:53:57:42:96:AB:65:11:BF:72:06
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 254F4E66510E9CB78CD1C2C41EC2337DBF9B6339
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
Signing time: Sat 20 Jul 2024 00:04:09 +0000
ROA not before: Fri 19 Jul 2024 23:59:09 +0000
ROA not after: Sat 19 Jul 2025 00:04:09 +0000
asID: 834
IP address blocks: 109.110.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 17:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4f:4e:66:51:0e:9c:b7:8c:d1:c2:c4:1e:c2:33:7d:bf:9b:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 19 23:59:09 2024 GMT
Not After : Jul 19 00:04:09 2025 GMT
Subject: CN=F46CCFA4EAF1F332525E53574296AB6511BF7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:42:58:de:ef:f3:64:3a:9c:b6:1c:08:6a:
9d:04:73:9a:e3:33:d1:c8:b7:1b:49:e1:8c:85:2b:
93:67:17:7a:04:aa:aa:df:08:ff:02:69:1d:e3:28:
76:29:ba:41:fa:61:7d:99:96:ab:79:4b:28:32:5d:
43:3d:dd:85:d3:dd:3f:d9:97:cc:00:77:b1:1d:91:
13:b8:bd:c2:c9:c4:35:99:f5:de:f6:5a:69:98:1b:
f3:66:27:9a:80:94:89:26:5b:ff:0c:88:38:10:d6:
97:83:b1:83:4e:26:cf:09:5c:e5:9d:f5:62:8c:1b:
ae:4f:cb:5b:7d:df:9e:74:92:f4:1e:47:53:e2:02:
a7:a8:49:00:c7:18:6e:58:b6:6d:66:58:46:ef:5e:
22:81:a6:d5:7f:a5:25:d0:23:67:ea:1b:4c:a9:9e:
aa:5d:57:78:b7:4c:05:c5:04:db:f9:d1:41:d1:a0:
9a:e8:f3:40:58:1f:89:68:e6:a1:87:74:49:cc:16:
d4:98:c1:b6:f0:4f:7e:22:6a:22:a5:9b:9d:42:dc:
2c:82:7b:9a:6f:ac:2e:1b:9e:21:ff:ef:5b:5e:f8:
9e:15:7d:05:91:12:08:ee:0b:80:93:1b:ad:24:45:
69:1c:9c:71:ea:8b:60:ea:6c:ab:92:19:b3:a6:01:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:CF:A4:EA:F1:F3:32:52:5E:53:57:42:96:AB:65:11:BF:72:06
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
62:da:d3:55:7d:42:6c:9b:93:6a:02:9a:38:a5:ba:ac:14:1a:
5b:68:c9:3d:2d:ea:5e:2e:a2:2e:6f:97:6c:35:51:0b:86:46:
32:2c:e7:7c:d2:5a:e4:a7:8c:3a:e6:bf:41:cc:72:02:51:70:
92:db:ee:37:53:b4:d1:26:a2:d0:ba:a0:51:84:6f:43:7e:66:
94:4c:3f:6c:b8:77:91:ec:10:92:c9:f9:34:f1:b8:ad:90:bb:
4c:b7:2b:3f:0a:25:f0:d8:8e:14:9c:4c:b9:7c:52:72:13:73:
c2:25:d6:27:6a:98:b9:7d:80:87:fd:eb:3b:cd:bf:f3:72:8b:
00:ae:39:c6:0a:42:09:85:b7:f5:65:12:72:e2:ca:4d:0f:40:
21:64:70:13:1d:e1:94:3e:2d:95:cc:17:eb:0f:27:2e:ee:7b:
ea:e5:4a:62:3b:16:5d:6c:2e:e9:67:e1:27:c7:bc:90:2b:2f:
e9:d0:1a:dd:73:97:3c:38:c6:34:b3:1a:32:70:03:5f:f5:c7:
94:b8:55:2e:22:f4:42:06:42:2b:84:64:00:f9:7c:4b:c7:eb:
f0:db:4f:83:19:6f:9d:4a:bf:50:39:9b:6b:db:72:af:b3:a9:
d8:e2:90:03:c6:6b:e6:bb:d6:b3:0c:f4:9e:98:46:5d:b5:7c:
fb:57:55:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJU9OZlEOnLeM0cLEHsIzfb+bYzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDA3MTkyMzU5MDlaFw0yNTA3MTkwMDA0MDlaMDMxMTAvBgNV
BAMTKEY0NkNDRkE0RUFGMUYzMzI1MjVFNTM1NzQyOTZBQjY1MTFCRjcyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYUJY3u/zZDqcthwIap0Ec5rj
M9HItxtJ4YyFK5NnF3oEqqrfCP8CaR3jKHYpukH6YX2Zlqt5SygyXUM93YXT3T/Z
l8wAd7EdkRO4vcLJxDWZ9d72WmmYG/NmJ5qAlIkmW/8MiDgQ1peDsYNOJs8JXOWd
9WKMG65Py1t93550kvQeR1PiAqeoSQDHGG5Ytm1mWEbvXiKBptV/pSXQI2fqG0yp
nqpdV3i3TAXFBNv50UHRoJro80BYH4lo5qGHdEnMFtSYwbbwT34iaiKlm51C3CyC
e5pvrC4bniH/71te+J4VfQWREgjuC4CTG60kRWkcnHHqi2DqbKuSGbOmAfgjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU9GzPpOrx8zJSXlNXQparZRG/cgYwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW1u
sjANBgkqhkiG9w0BAQsFAAOCAQEAYtrTVX1CbJuTagKaOKW6rBQaW2jJPS3qXi6i
Lm+XbDVRC4ZGMiznfNJa5KeMOua/QcxyAlFwktvuN1O00Sai0LqgUYRvQ35mlEw/
bLh3kewQksn5NPG4rZC7TLcrPwol8NiOFJxMuXxSchNzwiXWJ2qYuX2Ah/3rO82/
83KLAK45xgpCCYW39WUScuLKTQ9AIWRwEx3hlD4tlcwX6w8nLu576uVKYjsWXWwu
6WfhJ8e8kCsv6dAa3XOXPDjGNLMaMnADX/XHlLhVLiL0QgZCK4RkAPl8S8fr8NtP
gxlvnUq/UDmba9tyr7Op2OKQA8Zr5rvWswz0nphGXbV8+1dV0w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:57 2025 by rpki-client