Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32322d3234203d3e20383334.roa
File: 3130392e3131302e3138302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: QxmLhVLiikZJOQB1mq1TuPKBYdLR0irJRrDNqyV/LCo=
Subject key identifier: B2:5F:86:57:EE:CB:0F:3C:A6:C5:A8:56:3C:DC:93:DA:2C:EE:D3:8E
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 18070A9328E479809B4A33D1DAA35B898B97B1C5
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32322d3234203d3e20383334.roa
Signing time: Sat 10 Feb 2024 00:04:28 +0000
ROA not before: Fri 09 Feb 2024 23:59:28 +0000
ROA not after: Sat 08 Feb 2025 00:04:28 +0000
asID: 834
IP address blocks: 109.110.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 13:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:07:0a:93:28:e4:79:80:9b:4a:33:d1:da:a3:5b:89:8b:97:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 9 23:59:28 2024 GMT
Not After : Feb 8 00:04:28 2025 GMT
Subject: CN=B25F8657EECB0F3CA6C5A8563CDC93DA2CEED38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:06:8d:74:8e:03:79:75:36:11:33:b9:bd:
d4:fb:8a:2e:bd:29:29:18:81:cc:91:15:f6:fb:f6:
c3:73:65:e6:84:86:05:48:5d:5b:50:3b:c5:3b:fb:
11:8e:bb:22:74:5d:79:37:73:a6:f6:27:03:c6:65:
72:cf:38:88:39:36:b3:6f:b6:d3:c4:09:ca:23:86:
e4:aa:b9:ff:35:ff:12:a3:2a:0d:83:60:39:5b:17:
28:ce:eb:be:22:16:71:c1:2f:d3:0b:23:7b:1b:51:
07:77:92:4e:66:b9:2b:dc:5f:ba:5a:a8:bd:11:0d:
77:50:23:64:c2:5c:c3:0b:34:bf:0a:04:5b:e2:d8:
0f:4f:c8:3f:70:ef:15:44:ea:80:9c:0c:15:8a:1e:
bc:28:6d:d9:2d:48:9a:76:23:16:d3:77:97:4d:de:
df:82:55:a5:d4:e0:d7:81:66:ea:09:1f:d9:da:e1:
af:58:6f:2a:e6:8b:ce:94:f9:dc:6a:6b:f8:cc:29:
61:1e:96:c6:7c:5b:21:ba:fb:af:f0:66:8f:75:50:
a1:93:42:4a:90:48:b6:c2:02:45:18:63:ec:7b:50:
f9:97:07:4c:fc:20:b5:02:6a:e8:d2:b9:0d:9c:9b:
7c:f5:11:17:7b:4d:fe:19:29:c5:bd:91:cf:21:df:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:86:57:EE:CB:0F:3C:A6:C5:A8:56:3C:DC:93:DA:2C:EE:D3:8E
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f1:d2:83:20:63:9f:86:5d:ef:bd:f3:a5:30:98:78:c3:bc:
4c:8f:df:88:b6:0e:9a:5b:7c:93:ae:00:41:62:56:9f:52:19:
2d:c4:06:be:74:af:34:04:dd:1c:45:29:10:43:2c:a8:15:76:
37:1b:8e:82:3a:35:d7:b2:2d:ab:62:1a:92:c3:dd:e4:c3:a1:
52:36:1c:3e:c9:7e:ca:e0:99:57:42:92:a8:81:d6:bf:82:0b:
2d:d1:0e:cc:5f:78:9d:08:a0:b5:77:e5:7f:b7:3d:2d:c7:f1:
a9:68:7f:72:36:71:00:d7:75:fe:40:f8:75:4f:37:a0:a7:8b:
34:0c:43:11:02:28:30:22:01:33:e0:40:d3:4e:a6:57:97:cd:
4c:d7:87:73:2b:57:63:0c:c5:21:1f:55:fd:98:be:61:4c:6f:
7a:de:45:98:b9:14:72:07:42:11:71:62:4a:35:7d:50:bc:14:
bf:23:58:34:8e:6e:73:c5:fb:5e:7b:26:c3:05:14:b8:e7:dc:
b4:f1:f7:b5:79:d6:b9:58:91:e8:e6:95:ae:00:d1:52:2e:08:
b4:ce:10:b0:1b:02:ff:ed:a5:97:f5:83:ff:d2:4f:b6:a0:b0:
3e:4c:a5:b0:b9:d5:49:d1:ea:07:bd:18:3c:c7:bb:52:92:1f:
39:29:7d:75
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGAcKkyjkeYCbSjPR2qNbiYuXscUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAyMDkyMzU5MjhaFw0yNTAyMDgwMDA0MjhaMDMxMTAvBgNV
BAMTKEIyNUY4NjU3RUVDQjBGM0NBNkM1QTg1NjNDREM5M0RBMkNFRUQzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcgaNdI4DeXU2ETO5vdT7ii69
KSkYgcyRFfb79sNzZeaEhgVIXVtQO8U7+xGOuyJ0XXk3c6b2JwPGZXLPOIg5NrNv
ttPECcojhuSquf81/xKjKg2DYDlbFyjO674iFnHBL9MLI3sbUQd3kk5muSvcX7pa
qL0RDXdQI2TCXMMLNL8KBFvi2A9PyD9w7xVE6oCcDBWKHrwobdktSJp2IxbTd5dN
3t+CVaXU4NeBZuoJH9na4a9Ybyrmi86U+dxqa/jMKWEelsZ8WyG6+6/wZo91UKGT
QkqQSLbCAkUYY+x7UPmXB0z8ILUCaujSuQ2cm3z1ERd7Tf4ZKcW9kc8h31LTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUsl+GV+7LDzymxahWPNyT2izu044wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm1u
tDANBgkqhkiG9w0BAQsFAAOCAQEAYPHSgyBjn4Zd773zpTCYeMO8TI/fiLYOmlt8
k64AQWJWn1IZLcQGvnSvNATdHEUpEEMsqBV2NxuOgjo117Itq2IaksPd5MOhUjYc
Psl+yuCZV0KSqIHWv4ILLdEOzF94nQigtXflf7c9LcfxqWh/cjZxANd1/kD4dU83
oKeLNAxDEQIoMCIBM+BA006mV5fNTNeHcytXYwzFIR9V/Zi+YUxvet5FmLkUcgdC
EXFiSjV9ULwUvyNYNI5uc8X7XnsmwwUUuOfctPH3tXnWuViR6OaVrgDRUi4ItM4Q
sBsC/+2ll/WD/9JPtqCwPkylsLnVSdHqB70YPMe7UpIfOSl9dQ==
Generated at Sun Feb 18 15:12:35 2024 by rpki-client on console-ams.rpki-client.org