Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3138342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: tRZrLSFKmRao8Vh5JX1iVTeiPbDhffRdiLR8pCILhDs=
Subject key identifier: FC:0A:CD:B0:1F:BD:C1:DE:55:29:1D:B5:85:43:FE:9C:AA:E5:DC:B2
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1B47C7F122E9B423420F6272A60C56601DE16F1C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32332d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 00:01:24 +0000
ROA not before: Wed 21 Feb 2024 23:56:24 +0000
ROA not after: Thu 20 Feb 2025 00:01:24 +0000
asID: 834
IP address blocks: 109.110.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:47:c7:f1:22:e9:b4:23:42:0f:62:72:a6:0c:56:60:1d:e1:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 21 23:56:24 2024 GMT
Not After : Feb 20 00:01:24 2025 GMT
Subject: CN=FC0ACDB01FBDC1DE55291DB58543FE9CAAE5DCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:3b:90:c4:61:fd:db:ae:a6:c0:79:04:10:
bc:20:1b:36:d7:72:42:a1:96:f9:ae:80:33:a8:36:
f6:50:7a:ef:de:31:81:d3:07:61:e8:91:47:bb:51:
b2:14:ee:0f:eb:a3:67:74:05:c8:ee:cd:0b:50:02:
99:2b:14:ca:17:6e:5a:02:98:ac:f4:8b:01:09:f9:
76:db:e4:79:e1:19:59:a9:59:ee:b8:86:2f:5f:07:
ed:c4:cd:12:f1:fb:b2:61:c7:5c:94:fe:65:0c:fb:
6d:9f:58:4b:ca:a5:5c:c8:e2:89:17:37:d9:22:b7:
ef:6c:f4:03:48:b7:f3:db:d7:52:93:7b:94:2e:21:
ec:34:3c:ed:a5:8a:06:aa:ed:7a:82:78:7b:b3:63:
ed:74:75:6a:ea:89:4a:0f:88:ae:33:67:16:45:28:
10:b8:1d:25:35:48:79:b6:d7:7b:7c:b0:a5:48:39:
dd:f4:71:fc:c7:bf:db:c4:4d:7c:96:c6:e1:21:49:
a9:96:e3:6b:ec:ac:3f:72:f3:b0:e2:21:8f:c4:5f:
ab:be:83:c8:48:ed:58:b6:f1:13:5a:ed:c2:0d:5f:
60:e6:74:3f:d4:f8:37:f2:82:9e:e5:23:9e:07:50:
f2:c3:95:54:a5:fa:08:42:6b:4d:26:cc:2a:86:40:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:CD:B0:1F:BD:C1:DE:55:29:1D:B5:85:43:FE:9C:AA:E5:DC:B2
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.184.0/23
Signature Algorithm: sha256WithRSAEncryption
19:4e:5d:bf:c6:b0:84:93:fd:22:e8:a8:a7:74:45:c7:0b:a1:
2a:2a:98:6d:dd:0d:12:60:8f:07:7f:8f:22:83:d4:23:a4:05:
ea:f0:c6:3f:37:7e:50:09:eb:1c:fb:14:a1:3b:f0:24:4c:85:
03:9c:5d:1a:82:d1:e9:73:72:fd:31:1b:3a:b0:aa:9f:36:5d:
00:95:f5:cc:f2:b9:cc:6e:4a:fd:a8:de:31:8d:83:77:15:33:
62:22:c0:49:95:19:ab:2e:d6:a7:5f:7d:6d:8e:91:d9:f9:50:
66:2b:09:9d:a4:f9:a9:8b:ff:af:3d:13:47:08:f4:c0:d6:76:
96:47:7e:b6:44:9c:3d:9f:55:87:8f:83:7b:9e:df:89:08:5a:
06:b4:bd:c7:52:80:ed:a9:d3:03:66:4e:ed:cd:8a:37:a7:83:
ba:b1:b7:0f:1c:f4:85:4c:54:83:a2:17:58:96:92:aa:b8:aa:
5c:bd:33:c9:07:a3:37:30:6d:00:5c:aa:ad:69:d8:63:fb:44:
15:2d:8c:f6:af:5c:9c:d3:ea:3a:79:c3:35:02:cc:c4:a6:8d:
14:fa:9f:8e:7f:75:c9:f1:cb:8a:48:6f:0f:55:0c:77:09:68:
be:99:8a:d0:c3:55:9c:cf:ee:28:38:25:e4:5b:be:ed:00:f1:
9e:62:bf:3c
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 23 10:44:41 2024 by rpki-client on console-ams.rpki-client.org