Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32342d3234203d3e20323136313634.roa
File: 3130392e3131302e3138342e302f32342d3234203d3e20323136313634.roa (raw, json)
Hash identifier: FeBnyWFPCnM0Hzbcv7DWxwhSejoWaH7QjBrmiJ2WlWc=
Subject key identifier: 81:C1:39:75:A8:C3:15:0B:BC:D3:DE:AA:21:AA:57:97:0E:7A:E7:F8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6FCD937A0AA25A36A8FAABA297A8049E93FD592E
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32342d3234203d3e20323136313634.roa
Signing time: Mon 22 Jan 2024 09:42:40 +0000
ROA not before: Mon 22 Jan 2024 09:37:40 +0000
ROA not after: Mon 20 Jan 2025 09:42:40 +0000
asID: 216164
IP address blocks: 109.110.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cd:93:7a:0a:a2:5a:36:a8:fa:ab:a2:97:a8:04:9e:93:fd:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 22 09:37:40 2024 GMT
Not After : Jan 20 09:42:40 2025 GMT
Subject: CN=81C13975A8C3150BBCD3DEAA21AA57970E7AE7F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:17:eb:6f:ab:af:9a:24:d8:ff:36:20:fa:
69:90:27:19:a7:e1:0f:14:6c:5e:69:43:10:bb:14:
b6:6f:5d:a5:0e:d8:bf:08:ad:37:66:57:51:65:07:
45:7a:8d:ba:3e:cc:2e:1c:6e:70:a3:60:65:08:b0:
db:cb:85:88:24:64:e4:eb:cd:9c:f2:5f:a0:db:2c:
4d:cd:d2:79:d5:63:3a:ea:9e:5a:77:11:c2:50:92:
36:34:c0:e2:d9:9c:37:44:7d:f9:46:48:4a:61:a6:
62:5b:ae:9f:3a:29:ef:e9:96:3f:0c:f7:02:67:e7:
4f:b6:9f:12:44:7e:31:78:23:65:0e:d8:f1:48:b6:
ef:3c:78:87:5a:10:f1:02:4b:c5:be:f2:1d:e1:2a:
2b:7b:1f:3b:70:33:21:be:c3:5b:df:54:ef:ce:da:
8b:80:3c:5b:7a:39:b6:66:6a:21:92:cf:d0:28:b2:
5c:1e:29:11:c9:74:39:32:02:aa:7d:4f:6a:c9:da:
32:8a:4e:4d:68:99:7c:06:0b:c9:88:4b:b8:02:c5:
b6:c2:4b:56:7c:6e:4e:09:34:0d:c8:bd:94:49:11:
84:da:69:b7:60:ea:e2:c2:75:5a:a8:29:3e:9e:f0:
60:54:82:59:a8:b2:ab:03:63:9f:47:47:86:a4:f4:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:39:75:A8:C3:15:0B:BC:D3:DE:AA:21:AA:57:97:0E:7A:E7:F8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32342d3234203d3e20323136313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.184.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4d:3f:56:7f:a4:56:cd:72:77:7e:eb:bf:72:71:7d:98:f5:
3d:83:39:e8:ce:15:ca:ae:31:27:8b:20:5d:0f:76:46:66:cf:
14:7e:92:f6:58:5c:34:8c:84:36:2b:93:c6:1b:fa:69:83:35:
23:24:6e:d7:c5:ba:11:0a:23:ce:48:d9:7b:ac:fc:01:18:6a:
36:ff:a3:51:82:e7:81:18:8e:c4:1c:04:68:44:63:55:4d:f7:
b8:7a:9c:5a:6e:6b:e4:b3:bf:76:c7:7b:57:9c:ca:93:5b:1f:
e5:d3:3c:f3:b4:f3:42:9a:15:b3:09:ff:00:aa:cd:e8:97:d9:
8c:83:72:b5:b8:28:2e:1f:4b:86:1a:04:f6:a2:e2:f8:f3:29:
86:bc:ef:9c:1d:5f:06:3c:ff:29:63:d8:8f:28:02:af:c6:83:
15:a0:c6:32:e2:25:4e:8a:1b:1b:ed:84:79:15:a5:33:42:eb:
e3:ff:e9:b3:d4:5c:8a:b5:67:b7:17:98:71:5b:d9:dd:6e:b3:
94:fb:05:1d:75:8e:5e:16:2d:68:e4:4c:ee:4f:2f:f1:bf:9c:
ff:fe:6e:c8:2e:0a:15:2c:4e:e6:c9:9d:bc:56:f1:c5:50:bb:
45:db:69:05:b2:21:2b:b6:32:50:bd:f4:ef:75:d7:79:91:3c:
5c:2d:40:68
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 18 13:16:16 2024 by rpki-client on console-ams.rpki-client.org