Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20333936393832.roa
File: 3130392e3131302e3138332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: KfcOxY21xp7/Isq4uEJ5AyU2RZSI8FyGWAVUGZSVzio=
Subject key identifier: 01:E6:A8:B1:CE:06:96:F9:54:4A:68:40:0A:4A:92:08:2C:8E:5A:A8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5F86D0EC22C26CC245D3F6D4187C15E5F084F8FA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20333936393832.roa
Signing time: Mon 11 Mar 2024 19:09:37 +0000
ROA not before: Mon 11 Mar 2024 19:04:37 +0000
ROA not after: Mon 10 Mar 2025 19:09:37 +0000
asID: 396982
IP address blocks: 109.110.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 17:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:86:d0:ec:22:c2:6c:c2:45:d3:f6:d4:18:7c:15:e5:f0:84:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 11 19:04:37 2024 GMT
Not After : Mar 10 19:09:37 2025 GMT
Subject: CN=01E6A8B1CE0696F9544A68400A4A92082C8E5AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:99:87:ee:ba:b8:6c:99:a2:47:6c:54:bd:
8f:01:de:88:54:b7:24:c6:01:1c:28:78:aa:14:5d:
8b:5c:97:67:db:8f:8a:50:d8:f0:e6:25:db:fc:c7:
b4:de:27:60:ad:48:0f:8b:69:cf:0d:17:1c:43:a0:
81:98:92:e2:19:1a:8c:03:af:fe:d6:6d:a9:2f:76:
f5:50:62:b5:5b:9c:cc:5c:f2:9b:5e:c5:ba:c3:e4:
e6:f3:ae:6a:9b:2c:c5:b6:28:f9:c0:c0:16:65:f6:
4a:5b:25:10:0f:f0:8b:91:9a:8a:e4:90:93:dd:05:
ad:b6:6d:7a:1c:cb:21:b1:27:d6:7d:49:42:bf:8d:
64:84:fd:37:75:c1:57:58:24:88:64:6c:0b:e3:18:
bd:2a:fa:7d:64:50:30:c3:33:25:2d:b7:98:13:eb:
8d:e9:db:8e:8c:1b:87:fc:e9:77:8c:87:19:b0:50:
8f:cc:ba:47:0d:9d:91:8b:01:eb:6b:b4:11:f9:e8:
1a:d0:34:89:8c:23:a8:23:88:cd:84:04:6a:3c:c5:
f2:8e:ff:48:32:34:a6:69:86:f5:6e:18:9c:3d:41:
e4:b6:d1:74:e5:1d:31:a5:2d:b7:8c:13:07:cb:4d:
85:4f:57:62:06:c7:09:a8:45:88:5b:7c:66:73:e5:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:A8:B1:CE:06:96:F9:54:4A:68:40:0A:4A:92:08:2C:8E:5A:A8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138332e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f7:9a:fc:1d:19:83:eb:2e:75:65:12:91:22:7f:c7:dc:bc:
5a:0c:17:26:65:36:28:21:4f:b2:b9:94:9c:b1:4c:59:ee:27:
79:b6:b5:c3:8a:0e:2f:24:10:77:e5:0d:3d:88:6f:6f:24:f6:
15:c2:de:e6:d8:3f:ae:d2:2f:f4:97:59:84:e9:44:4d:07:8e:
16:31:8d:47:17:2d:c9:7d:92:eb:8d:c3:9c:42:8b:c4:14:96:
c1:4e:2e:57:78:15:c3:33:99:df:62:fd:f1:c0:b4:97:bc:43:
a0:28:f3:56:84:30:2d:b9:b8:f5:79:05:c4:b7:8f:40:c8:56:
34:a9:0a:ff:17:97:46:84:f5:37:c2:7d:11:58:a5:76:1a:72:
b6:a8:72:31:23:87:ba:23:f1:b0:9f:78:ec:07:0c:3d:4a:f0:
9a:5c:a1:ea:32:58:71:9b:06:e4:23:3c:df:6e:d3:69:00:67:
5d:d8:d6:13:7d:14:19:70:96:1e:6d:2b:4b:1a:b2:ce:d4:60:
cc:73:c6:e8:35:3f:bb:ff:42:94:95:03:9c:20:f7:e7:cb:45:
18:ae:ec:06:ca:8d:3f:22:08:74:8a:68:67:2b:80:86:26:da:
48:b8:8b:23:6a:00:ff:51:03:b7:b9:50:ed:b6:08:15:fc:63:
cc:e2:62:22
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 4 22:56:39 2024 by rpki-client on console-ams.rpki-client.org