Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20323136303538.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e20323136303538.roa (raw, json)
Hash identifier: BfZ6KuaGa3mQxt/f+Tgawl753JxapA4+/f/2GQX53EM=
Subject key identifier: 3E:A8:65:94:2C:6A:9D:06:EC:41:6A:46:3F:E9:2A:72:A4:60:87:1B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 687B8F04190B0101BCBCAACA2C85ED6F022BEB93
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20323136303538.roa
Signing time: Wed 21 Feb 2024 13:55:56 +0000
ROA not before: Wed 21 Feb 2024 13:50:56 +0000
ROA not after: Wed 19 Feb 2025 13:55:56 +0000
asID: 216058
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 15:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7b:8f:04:19:0b:01:01:bc:bc:aa:ca:2c:85:ed:6f:02:2b:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 21 13:50:56 2024 GMT
Not After : Feb 19 13:55:56 2025 GMT
Subject: CN=3EA865942C6A9D06EC416A463FE92A72A460871B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:58:83:40:6b:f2:f6:bb:b2:d1:a1:ab:ad:
58:2d:f8:f6:4a:a3:3c:fc:3c:83:9f:08:2d:6f:83:
76:39:d8:f4:77:1c:b7:23:c8:7a:6a:4e:a7:7b:18:
88:6d:8c:86:98:68:0d:70:77:11:e8:47:3c:c8:f7:
60:6b:95:77:53:55:d3:fb:7a:a7:b3:39:86:e3:1b:
e7:2c:e3:03:44:12:67:87:e5:7f:d4:46:2b:5e:9d:
3c:ea:e4:d6:05:d4:10:14:4d:c2:f6:8d:b5:b1:0d:
42:a7:27:d6:81:61:dc:46:ba:a1:f4:3a:6a:c9:eb:
8f:d0:0a:bc:36:a5:3d:a9:b3:27:23:29:54:46:16:
93:e9:e8:41:43:62:63:b0:ff:83:c6:2c:11:fe:5d:
69:b3:43:0f:13:b8:64:5b:53:d0:47:fe:96:0f:85:
15:61:2a:3c:8e:e2:68:ec:13:a3:b6:7e:09:0a:d9:
4a:25:5a:cb:ed:3a:17:d4:26:b4:bf:c8:ac:9a:65:
d2:9d:85:df:4d:7f:bd:74:ac:50:36:28:4d:f8:9e:
ee:52:c3:1a:da:a1:33:6a:76:b1:d2:9d:87:3a:c0:
ba:03:39:34:ae:06:a4:5b:04:c5:40:7a:d6:5e:34:
7b:25:38:e5:e2:8e:ef:a3:a7:4e:9d:33:b3:fe:0b:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:65:94:2C:6A:9D:06:EC:41:6A:46:3F:E9:2A:72:A4:60:87:1B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20323136303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
38:44:1c:fa:05:9f:58:5e:00:1c:6e:38:e4:ca:b2:36:43:6b:
72:3b:e8:c1:6e:98:28:34:d2:0c:5f:cb:30:c5:bc:9e:63:62:
af:88:e5:d4:9a:1e:cd:d6:b9:78:df:8f:f9:4f:c6:a0:01:cf:
19:3b:93:87:6c:89:90:5d:5e:08:9f:36:67:d3:de:25:17:57:
86:8e:27:51:09:f7:20:ae:9a:6a:df:1d:52:e0:f4:28:95:e4:
9c:03:e3:34:6e:ab:14:f1:2a:d1:bc:39:16:b0:e0:d3:91:2e:
4e:d3:86:73:0f:59:d1:5a:68:02:6f:23:41:d7:03:1b:fd:f6:
ee:f4:f4:3f:de:4c:86:3b:82:ea:14:a2:ac:ee:df:8d:15:ef:
9a:1d:83:87:b3:93:93:d2:10:64:f8:6e:75:6d:7e:3b:6a:bb:
3c:f9:c4:45:14:61:0f:28:6c:5c:17:8e:2c:80:69:d3:ab:fc:
1b:8a:2d:c7:f2:34:c7:33:d6:b1:fe:36:27:f3:72:2d:91:d4:
ae:ee:61:83:0a:e3:24:e0:5c:6e:bd:58:e2:f0:6a:68:0c:09:
e8:88:52:ca:1b:13:cf:32:07:3a:b7:53:cb:ba:d6:07:fd:60:
9f:92:55:e0:1b:52:42:fd:30:c8:df:5e:5a:06:2e:6f:5f:8d:
d9:80:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:53:09 2024 by rpki-client on console-ams.rpki-client.org