Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hPe1TcEikV0ccDtd8Qvd1MnyvJ+G6f32TUY+Y7fM7kU=
Subject key identifier: 29:C9:5B:83:F2:ED:F4:17:C4:AD:57:45:7F:D6:C9:97:8F:BA:A4:D2
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1BF8D16E0C2EE4169D69E1B8AC34FD1C07C193C0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
Signing time: Sat 21 Sep 2024 10:39:18 +0000
ROA not before: Sat 21 Sep 2024 10:34:18 +0000
ROA not after: Sat 20 Sep 2025 10:39:18 +0000
asID: 834
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f8:d1:6e:0c:2e:e4:16:9d:69:e1:b8:ac:34:fd:1c:07:c1:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 21 10:34:18 2024 GMT
Not After : Sep 20 10:39:18 2025 GMT
Subject: CN=29C95B83F2EDF417C4AD57457FD6C9978FBAA4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:90:78:fc:ec:55:16:87:33:99:ef:8f:58:
fc:a6:68:3b:f9:dd:56:e1:3d:7a:47:99:a9:27:18:
b0:7e:81:a6:f6:b8:df:b9:6d:88:42:ff:29:44:25:
09:47:fe:d4:02:b1:9a:99:eb:17:22:4a:d2:0d:57:
4e:11:c8:79:21:76:6b:39:4f:d9:a5:21:57:15:99:
3e:9b:0a:d0:d9:6a:0f:6e:01:d1:69:3f:d2:45:36:
8b:5d:23:5b:cb:dd:54:79:c1:6c:37:d6:a3:7e:93:
6f:00:33:85:3f:20:5f:e5:71:ff:97:6f:00:01:c5:
6b:2a:b4:23:3d:ea:5f:0d:13:40:a0:03:68:65:7a:
73:50:53:22:bc:d9:68:fd:3c:71:11:44:55:57:a6:
42:32:4b:b6:cc:e5:f5:8a:66:65:61:4c:a5:2f:4e:
79:4f:90:f4:da:1c:f0:bf:89:5c:34:2f:a3:da:b5:
e8:7d:19:3a:85:ba:25:3a:51:a6:5f:82:6c:c1:84:
b0:75:6e:64:4c:5f:54:f2:a9:be:b0:64:3f:47:88:
3e:10:d0:01:69:3d:74:54:97:10:c5:eb:a8:24:c1:
83:9c:19:34:da:fb:b8:df:1e:13:c4:ab:74:f9:08:
ff:c0:7d:dd:d1:5a:1c:f8:12:6a:9a:86:04:95:1e:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:5B:83:F2:ED:F4:17:C4:AD:57:45:7F:D6:C9:97:8F:BA:A4:D2
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:eb:da:0a:27:d5:fe:70:f1:d7:cf:97:10:c1:ad:16:5f:
63:90:87:ed:f0:ab:0a:d6:87:b2:ff:b9:bd:5c:19:3e:0d:4d:
38:ef:45:3c:90:dd:ba:51:8d:24:c1:d0:e6:22:37:a5:38:37:
4c:d7:3b:80:de:a7:8d:d4:b9:2e:bf:8b:c4:71:fa:b0:1e:5c:
63:35:86:f9:1c:ac:4e:6e:e4:d0:31:ff:b8:00:98:3c:fc:13:
94:2e:07:ee:73:cf:1e:0a:e4:7c:ed:d3:84:5f:0f:9f:48:16:
f9:9b:7c:f2:a5:f3:83:77:16:56:aa:eb:9e:ab:48:b8:64:5d:
fd:fc:82:5f:57:74:e1:a5:6f:b4:0d:6c:0f:23:fd:5b:64:fc:
de:c5:29:51:98:d9:4f:28:fc:d8:5f:89:9f:1c:03:46:24:af:
e5:bf:a2:db:c4:64:33:7a:f6:56:72:3d:32:b1:55:c7:d0:60:
5e:b8:79:6c:05:4a:47:a8:02:03:99:ad:a0:1a:9a:8e:b0:fe:
42:31:67:57:09:cc:15:60:66:e9:9e:b5:ab:61:c4:15:7f:da:
7a:43:b3:af:23:73:5d:18:e2:31:65:41:2c:99:d4:99:fa:4a:
da:44:27:a6:31:ce:6d:ad:cd:fc:66:0a:99:3e:02:25:39:5e:
c2:c4:ee:0a
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 24 06:07:46 2024 by rpki-client on console-fra.rpki-client.org