Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3138322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 11MqznKwQQZyuFJ789HnGOiKDoLKsjGzWd40Go/WRQ8=
Subject key identifier: 74:62:52:A1:75:99:19:68:34:05:AB:38:B9:17:BF:71:23:01:79:66
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 31E741AB8FA989B6DD21D1613CA7E6B6AF87AE7F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32332d3234203d3e20383334.roa
Signing time: Tue 05 Mar 2024 15:10:38 +0000
ROA not before: Tue 05 Mar 2024 15:05:38 +0000
ROA not after: Tue 04 Mar 2025 15:10:38 +0000
asID: 834
IP address blocks: 109.110.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 18:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e7:41:ab:8f:a9:89:b6:dd:21:d1:61:3c:a7:e6:b6:af:87:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 5 15:05:38 2024 GMT
Not After : Mar 4 15:10:38 2025 GMT
Subject: CN=746252A1759919683405AB38B917BF7123017966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:48:b2:cc:e7:9d:97:4e:3f:3d:43:09:52:
48:48:6b:03:f1:d7:be:e7:70:d3:bd:5a:ca:6f:ce:
e7:16:2e:b3:67:ff:e8:f0:96:59:26:78:b9:31:91:
6c:01:48:aa:b9:65:37:12:c5:a4:ba:dc:8d:25:46:
76:3d:a0:1b:0b:4d:af:ec:3f:b2:79:21:ea:bf:50:
65:da:39:b7:8d:a0:b0:5b:eb:35:0e:50:a4:96:63:
0f:03:f6:5a:91:d0:ce:67:60:78:37:c2:5d:1b:f7:
af:02:d2:5c:8d:62:72:ea:2f:b8:56:59:4a:02:58:
ae:83:4d:0d:67:c5:5e:42:69:d8:82:5f:27:f0:ab:
5b:16:6e:73:36:1e:d6:7e:cc:f0:08:94:f5:f4:b9:
0b:2b:f5:c2:42:47:e9:c2:65:42:84:31:3b:5a:dc:
00:f4:99:47:d3:48:4d:4a:54:4b:24:fb:bf:9b:e7:
3f:e6:ce:ae:d6:93:a7:df:59:d3:23:61:98:dc:96:
50:c6:f2:ed:89:58:bf:b4:73:d8:3d:bd:05:50:51:
e4:51:c0:c9:ce:26:63:c8:8f:81:4c:8f:11:0d:a9:
14:1f:05:c1:11:83:1e:c1:c0:97:4d:2c:f8:03:0c:
98:ea:4b:59:d5:e4:61:ae:7a:d1:05:b8:49:da:fc:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:52:A1:75:99:19:68:34:05:AB:38:B9:17:BF:71:23:01:79:66
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.182.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d1:50:6f:7f:29:c8:2d:f4:da:1f:ee:eb:33:ff:6e:7c:0d:
4e:0b:2f:27:15:2e:b7:39:8b:15:40:b4:7a:b3:43:0e:dc:4b:
ee:28:d4:65:72:04:76:44:e1:55:55:73:91:94:60:0e:0b:5d:
96:c9:05:00:46:64:63:db:2c:bf:b2:84:fb:37:87:54:75:4f:
db:aa:49:e6:61:07:39:67:e0:c0:58:77:5b:8a:26:3f:65:ec:
b4:60:76:f7:2e:cb:a7:cf:ce:da:b7:82:0b:c4:d8:a4:83:d3:
ce:60:39:9e:12:f6:32:df:7c:6d:1d:ee:6f:87:d1:40:9a:bf:
aa:42:a8:2c:96:fe:5a:84:bb:ad:db:ce:4e:29:2e:91:fd:29:
ba:a0:45:3f:02:3a:d4:08:9e:08:b7:49:7e:a4:52:e4:92:64:
d0:c0:ff:87:17:47:26:c6:e0:27:5b:f8:02:70:16:14:a6:39:
43:6b:bf:b9:af:4b:87:30:1c:77:6b:73:76:16:d6:c1:58:ef:
eb:23:8e:b3:12:45:3e:22:7d:fe:b2:c7:99:66:fc:8a:24:5c:
9e:e0:97:ab:b9:f3:95:ee:b3:61:04:f3:4e:7e:de:09:59:81:
77:6b:12:bb:56:b7:28:71:33:a6:c2:c0:15:71:b2:b3:2f:90:
ff:7f:56:19
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 11 20:50:33 2024 by rpki-client on console-ams.rpki-client.org