Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nX8PyG10Oj/q02m+ESati6Z43dJbfzLLeMNWliMXaJ4=
Subject key identifier: 28:8B:E7:8C:48:76:0A:DC:D7:41:F7:1B:B1:CE:42:D2:82:43:EA:1C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 35767F4DAF9DBBCE8808E576CB63EE2B60BD51DD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
Signing time: Sun 18 Feb 2024 14:00:48 +0000
ROA not before: Sun 18 Feb 2024 13:55:48 +0000
ROA not after: Sun 16 Feb 2025 14:00:48 +0000
asID: 834
IP address blocks: 109.110.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:76:7f:4d:af:9d:bb:ce:88:08:e5:76:cb:63:ee:2b:60:bd:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 18 13:55:48 2024 GMT
Not After : Feb 16 14:00:48 2025 GMT
Subject: CN=288BE78C48760ADCD741F71BB1CE42D28243EA1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:05:29:d2:05:6e:16:4a:19:23:27:b4:45:
c1:92:ad:4b:25:bf:51:3e:90:45:29:81:68:9e:67:
fa:bd:28:f2:a2:be:cf:9b:6b:ac:c3:ad:11:20:98:
fd:1f:fe:71:0a:92:58:e8:f4:1d:43:bd:6a:6d:51:
85:43:27:ad:57:8d:c9:49:77:56:8e:33:d5:46:b2:
b6:61:fb:4c:61:48:78:a6:4d:c9:93:c4:e1:f5:08:
ce:b4:cd:99:20:f3:32:90:4f:10:55:96:0f:e1:3b:
da:0c:03:80:7a:85:30:55:fc:cb:fa:67:be:1a:44:
cb:93:4e:79:10:92:25:f3:c4:16:fa:e2:d4:2f:bd:
2f:2c:bc:62:df:33:6b:5c:6e:df:d5:42:16:29:64:
ad:57:4e:80:36:95:97:62:83:e3:21:b1:dc:aa:07:
eb:81:da:43:8c:03:09:d7:ac:e1:f9:d6:a2:cc:ba:
e7:d7:04:e8:1a:09:8c:70:8a:7b:f7:39:35:ac:16:
c0:2c:f5:9a:8f:d7:f7:d2:f4:0b:78:08:27:89:3d:
e9:a4:10:d0:0e:6e:2e:55:28:36:5b:66:b3:1e:6a:
d0:cb:98:8e:83:cc:9e:14:df:cd:47:36:1d:04:e0:
ec:fb:8d:d8:ca:7e:f7:5c:c7:05:14:7c:43:3e:fd:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:E7:8C:48:76:0A:DC:D7:41:F7:1B:B1:CE:42:D2:82:43:EA:1C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:62:03:6a:3a:9e:3e:50:93:89:63:58:a6:5d:26:61:d6:e1:
c0:9d:25:50:7a:78:83:80:60:89:ad:b0:7c:b4:d5:cd:e5:bb:
bf:e2:84:71:fb:de:5b:b6:78:d1:23:60:e7:a7:3c:5d:38:20:
2a:9d:01:3f:36:55:e2:00:c7:5c:67:d6:78:4c:39:6b:65:7c:
8e:03:fe:97:a9:42:5c:95:06:35:26:3c:58:8d:43:ff:d3:18:
46:78:06:cc:a5:e6:ec:e9:27:fc:d1:cf:de:07:ed:34:23:40:
dc:f3:8e:78:60:89:2f:ca:9e:4d:fd:5e:8d:e7:8a:cf:81:6f:
46:16:c9:eb:17:e9:6c:ee:f1:b7:80:23:38:17:8f:78:60:45:
a7:ba:bf:87:df:fb:23:19:f5:39:98:fb:4d:f6:3d:51:8c:de:
cf:a5:b2:b9:5e:fd:20:c8:e6:2a:6c:b8:46:91:4b:96:10:d6:
a1:ff:c4:ea:31:6f:46:e4:1e:72:8c:d1:6d:2c:a0:32:1f:82:
12:03:e5:9d:ee:40:16:da:3f:f6:f5:b5:ce:bb:da:0c:39:7d:
fa:2a:ae:b9:d8:1e:48:c2:b8:c5:f3:22:b5:ed:7a:eb:f6:fb:
e8:f4:74:b5:f7:27:91:96:14:36:ef:35:d2:4b:d1:67:31:00:
e6:1b:bf:84
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 20 15:08:30 2024 by rpki-client on console-ams.rpki-client.org