Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20323136303538.roa
File: 3130392e3131302e3138322e302f32342d3234203d3e20323136303538.roa (raw, json)
Hash identifier: yvTNAuut+LdHpWPwgvfHIR8W8QKwB41OFsFx/cnZvCc=
Subject key identifier: 7C:06:85:2C:2B:B0:25:2D:41:19:D4:99:10:54:1E:C0:20:7D:51:47
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7739A92F57FAC29DF63453AC5B390E8090A6CB1E
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20323136303538.roa
Signing time: Thu 22 Feb 2024 08:44:17 +0000
ROA not before: Thu 22 Feb 2024 08:39:17 +0000
ROA not after: Thu 20 Feb 2025 08:44:17 +0000
asID: 216058
IP address blocks: 109.110.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 15:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:39:a9:2f:57:fa:c2:9d:f6:34:53:ac:5b:39:0e:80:90:a6:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 22 08:39:17 2024 GMT
Not After : Feb 20 08:44:17 2025 GMT
Subject: CN=7C06852C2BB0252D4119D49910541EC0207D5147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:80:e8:6c:b6:b9:8d:8e:dc:e1:08:94:49:
88:5d:b0:6a:d9:bc:56:ae:74:ee:d5:98:ba:58:49:
8d:17:e2:d0:ec:54:78:83:73:82:2f:64:5d:d5:9d:
00:84:5a:78:08:89:34:5f:73:7a:6d:d1:ce:c1:b6:
d3:18:5f:17:f3:4e:ed:0c:15:8d:a7:e8:c7:53:86:
ad:be:a3:58:15:06:b6:49:8c:84:0f:4a:90:5c:0a:
ae:72:9c:65:5c:7b:b4:24:aa:77:a0:ea:e2:a2:44:
1d:9b:17:96:ce:ea:fb:4a:11:72:8a:c1:8b:18:aa:
d1:f5:51:07:d3:b2:e7:08:1c:b8:c2:67:5f:9c:63:
40:7b:07:7c:96:f9:bb:ac:da:fc:b4:77:df:78:0d:
f6:70:7c:5c:f2:7d:a9:cc:8a:a0:c0:7d:f1:d3:80:
4d:70:48:33:ec:b0:a4:fc:1b:08:c3:7a:2c:98:b6:
69:31:c5:30:80:3c:49:76:c9:a7:58:80:23:28:79:
5d:be:37:f4:27:d8:78:55:63:bc:5c:17:19:c5:dd:
bb:50:ac:33:85:d9:b6:44:a1:db:77:44:ac:23:6a:
a8:af:30:40:c0:8a:b9:4f:a7:e8:cd:a0:c9:d5:b7:
cc:b5:b1:33:a8:b1:fc:07:12:ee:88:4d:ef:f2:d4:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:06:85:2C:2B:B0:25:2D:41:19:D4:99:10:54:1E:C0:20:7D:51:47
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20323136303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e4:f4:ce:be:d4:85:83:a9:00:68:be:ef:c3:ca:15:10:2d:
c7:0c:35:80:c9:99:ca:80:1d:8d:8a:e9:4e:87:d9:67:c3:6c:
48:8e:dd:59:9e:b7:ba:2a:c1:ea:9e:3d:72:26:f0:4f:08:94:
d0:75:97:ff:e5:92:51:cc:6c:b3:fb:57:a8:6d:ea:47:13:d8:
ec:93:89:55:30:01:04:43:ec:9b:f3:bf:d6:9c:9f:c4:2a:e9:
5f:b8:ef:83:06:8e:9e:aa:3e:49:04:45:38:80:e4:2d:bd:bf:
c4:eb:94:82:0f:0f:ad:53:50:4d:7a:6f:68:b4:06:10:1a:8a:
ff:8c:ea:17:b4:d4:a2:30:7c:ff:16:7a:18:32:cc:46:9f:f3:
14:b5:16:33:eb:92:d4:ed:f0:90:20:2c:9d:59:99:a7:4b:d6:
6f:2c:35:55:22:56:3a:79:a1:8b:4d:bd:59:50:e7:37:b6:fd:
20:f6:cd:59:b3:c5:5c:af:6d:cb:ef:d6:90:a2:b7:91:73:52:
2b:bf:bc:88:23:46:63:21:a4:63:a6:b3:8d:b7:5c:3e:8f:19:
77:dd:b0:a2:10:af:fa:3f:00:95:21:0d:84:7c:d4:c6:66:1c:
f4:57:55:a9:96:0f:f6:b2:8c:96:6e:63:05:80:7f:3f:47:91:
d8:2e:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:44:38 2024 by rpki-client on console-fra.rpki-client.org