Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138312e302f32342d3234203d3e20323039323630.roa
File: 3130392e3131302e3138312e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: +LWR3lXz/T84FDafrQKlFnLyHjv0aYZhvFBcnQsDQLM=
Subject key identifier: 6A:BA:F3:42:56:2D:16:0A:23:19:4F:7B:CD:46:6A:08:D1:07:CE:A5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 283BF59CD3114C35EF278C6F44BAE6514540EA58
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138312e302f32342d3234203d3e20323039323630.roa
Signing time: Sun 18 Feb 2024 13:59:10 +0000
ROA not before: Sun 18 Feb 2024 13:54:10 +0000
ROA not after: Sun 16 Feb 2025 13:59:10 +0000
asID: 209260
IP address blocks: 109.110.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3b:f5:9c:d3:11:4c:35:ef:27:8c:6f:44:ba:e6:51:45:40:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 18 13:54:10 2024 GMT
Not After : Feb 16 13:59:10 2025 GMT
Subject: CN=6ABAF342562D160A23194F7BCD466A08D107CEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:f1:57:26:0e:36:86:44:d3:7c:d9:c2:29:
c3:b4:1e:24:58:f0:8a:06:fc:ae:11:83:a2:9d:75:
75:00:80:ed:cc:91:23:2a:de:5b:05:5a:d0:27:0d:
6e:96:27:76:50:68:7a:b3:65:c9:5c:15:08:b7:d3:
87:2b:8b:f6:6e:31:eb:dc:09:44:9f:2f:19:0b:7a:
cf:bb:29:0e:7b:68:aa:52:0e:fb:f0:0b:4e:46:06:
bc:49:85:fd:59:9b:0c:7c:97:30:33:46:d3:5e:f3:
37:ec:51:d6:65:cd:c2:dc:c0:ae:a2:d3:db:f5:ed:
b6:a3:39:b9:18:0d:43:fd:71:18:7c:13:4d:44:b2:
71:9d:b6:80:15:4d:38:8c:f0:bb:6f:02:84:6f:4e:
5f:61:27:43:d8:b7:57:5f:a6:56:fb:1a:56:54:c1:
01:c6:63:76:01:ce:85:1a:94:58:8b:a8:4f:1c:b2:
c8:86:a7:bc:cf:3b:4e:42:08:2d:97:42:5d:8d:5b:
62:2b:2c:3f:e9:d4:ff:e8:09:76:62:ca:33:4f:7b:
d7:0e:1f:47:c9:46:6e:13:b6:59:5c:f0:e1:eb:40:
92:05:54:19:ab:7e:af:1a:05:67:71:42:f7:41:a9:
b4:16:08:f6:ff:c1:1e:a4:35:5a:79:5b:13:6f:3b:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:F3:42:56:2D:16:0A:23:19:4F:7B:CD:46:6A:08:D1:07:CE:A5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138312e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.181.0/24
Signature Algorithm: sha256WithRSAEncryption
82:19:8a:00:02:3c:31:b2:aa:82:1c:9b:a2:7e:c4:e3:6f:6f:
ba:44:20:28:95:11:56:a6:14:ae:a2:9c:58:4d:7e:c3:de:79:
1f:74:67:7d:7f:9a:30:02:7e:e1:77:56:f9:3e:0c:59:be:91:
1d:41:39:1c:8a:63:bf:55:a2:8b:f4:17:b8:f6:ec:4b:4d:04:
f6:cb:ad:86:71:0b:c1:2c:ab:af:4f:5c:1b:da:23:8a:5b:85:
9a:90:93:1a:0f:d1:f6:74:ee:68:37:22:fe:6f:f2:2a:34:f8:
68:f1:e3:d6:d2:c6:6d:c6:9b:2c:53:41:8d:f6:24:dc:ee:07:
6d:8e:ad:df:f3:6d:81:09:2f:0a:1e:1e:f3:20:30:e4:5c:99:
1d:57:10:e6:53:ac:34:f3:44:4a:ba:3c:1a:cd:b3:aa:fe:2d:
5d:49:92:44:01:45:f6:92:0b:84:58:42:7d:67:da:34:89:e4:
1c:f5:98:06:07:e2:2e:77:c1:f6:22:59:30:bb:42:58:e6:5e:
34:27:00:84:39:e0:98:33:72:ed:52:cf:04:34:0b:4d:0f:48:
92:d8:41:ed:a0:bb:89:fc:a0:b3:ac:9f:e2:d4:fa:72:1f:51:
a0:d9:2c:b4:92:26:32:a8:4e:39:2b:dc:1c:b1:f4:27:67:f7:
c3:c8:92:dc
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKDv1nNMRTDXvJ4xvRLrmUUVA6lgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAyMTgxMzU0MTBaFw0yNTAyMTYxMzU5MTBaMDMxMTAvBgNV
BAMTKDZBQkFGMzQyNTYyRDE2MEEyMzE5NEY3QkNENDY2QTA4RDEwN0NFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCca/FXJg42hkTTfNnCKcO0HiRY
8IoG/K4Rg6KddXUAgO3MkSMq3lsFWtAnDW6WJ3ZQaHqzZclcFQi304cri/ZuMevc
CUSfLxkLes+7KQ57aKpSDvvwC05GBrxJhf1Zmwx8lzAzRtNe8zfsUdZlzcLcwK6i
09v17bajObkYDUP9cRh8E01EsnGdtoAVTTiM8LtvAoRvTl9hJ0PYt1dfplb7GlZU
wQHGY3YBzoUalFiLqE8cssiGp7zPO05CCC2XQl2NW2IrLD/p1P/oCXZiyjNPe9cO
H0fJRm4Ttllc8OHrQJIFVBmrfq8aBWdxQvdBqbQWCPb/wR6kNVp5WxNvOx07AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUarrzQlYtFgojGU97zUZqCNEHzqUwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMyMzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1utTANBgkqhkiG9w0BAQsFAAOCAQEAghmKAAI8MbKqghybon7E429vukQg
KJURVqYUrqKcWE1+w955H3RnfX+aMAJ+4XdW+T4MWb6RHUE5HIpjv1Wii/QXuPbs
S00E9suthnELwSyrr09cG9ojiluFmpCTGg/R9nTuaDci/m/yKjT4aPHj1tLGbcab
LFNBjfYk3O4HbY6t3/NtgQkvCh4e8yAw5FyZHVcQ5lOsNPNESro8Gs2zqv4tXUmS
RAFF9pILhFhCfWfaNInkHPWYBgfiLnfB9iJZMLtCWOZeNCcAhDngmDNy7VLPBDQL
TQ9IkthB7aC7ifygs6yf4tT6ch9RoNkstJImMqhOOSvcHLH0J2f3w8iS3A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:22 2025 by rpki-client