Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323136303539.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20323136303539.roa (raw, json)
Hash identifier: L5sODHiXvGCkUqy3VBkYnT56V6tGZZtEvsl1WW1osAA=
Subject key identifier: 6E:CA:50:67:85:37:5F:3E:9E:69:46:2E:E2:52:8B:2E:6B:42:4C:F3
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 429A2D8E931C16A184D45E16D9584F7623390192
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323136303539.roa
Signing time: Fri 23 Feb 2024 06:58:00 +0000
ROA not before: Fri 23 Feb 2024 06:53:00 +0000
ROA not after: Fri 21 Feb 2025 06:58:00 +0000
asID: 216059
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 15:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9a:2d:8e:93:1c:16:a1:84:d4:5e:16:d9:58:4f:76:23:39:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 23 06:53:00 2024 GMT
Not After : Feb 21 06:58:00 2025 GMT
Subject: CN=6ECA506785375F3E9E69462EE2528B2E6B424CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:8c:61:29:17:ff:75:a4:93:e6:69:dc:31:
7c:88:bb:19:db:3f:8d:2d:2d:0c:3b:ab:f6:be:d3:
bd:f9:72:96:0a:ba:e1:57:16:b3:e3:41:67:12:99:
d8:f3:d6:07:67:4c:aa:4c:f2:d8:e5:54:c4:f4:11:
2b:14:1b:9b:81:85:f5:72:6a:e8:c5:34:cf:6d:21:
eb:ae:be:50:96:50:f0:dc:c9:8a:d2:20:54:c3:6b:
d2:b4:39:a8:b1:16:e5:bc:f4:ec:21:60:1f:c9:08:
ab:64:30:6c:4e:3c:51:0f:e7:bd:ba:78:d0:e1:2a:
2d:73:78:69:84:ff:73:59:2c:d5:28:95:68:97:cf:
62:af:74:7d:e0:6a:a5:20:1f:84:79:32:25:36:76:
89:e7:be:d7:c7:7d:02:fa:22:f8:00:6d:f6:e9:a8:
ef:1c:6e:e1:44:59:26:88:9c:a5:f9:08:80:47:ac:
9c:26:0e:65:b2:f7:8f:2a:e4:9a:65:de:d9:f2:98:
5c:03:a0:ae:3e:e7:ee:42:ca:27:dd:98:25:81:f4:
d9:d5:6e:5a:23:f4:b4:b9:be:32:ea:77:e5:9d:7e:
40:74:ce:33:9c:b0:c3:8c:c6:0b:13:c1:c4:39:75:
07:03:26:9c:75:f3:57:4e:aa:5e:a2:0d:9e:f2:d7:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:50:67:85:37:5F:3E:9E:69:46:2E:E2:52:8B:2E:6B:42:4C:F3
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323136303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
39:de:e8:4b:63:11:35:a3:02:ba:88:86:3b:7b:df:7a:8f:9c:
0f:2d:47:98:78:37:ce:dc:67:fe:39:ac:6c:58:29:2f:0e:a1:
ea:c2:e8:5d:0c:ad:40:38:9c:0c:42:de:bf:5f:5d:b3:df:db:
e8:e0:9f:76:2b:15:b9:50:16:1a:05:38:2b:1c:e1:73:57:48:
47:d9:2c:1a:f9:ba:ac:14:97:c9:46:ae:b3:b1:47:2a:8a:27:
c8:bb:66:90:84:96:5b:48:23:a5:5d:9f:04:65:77:4f:21:0c:
9d:77:d4:dd:d9:9b:57:08:24:eb:69:20:c4:58:e1:ed:65:71:
9c:52:1d:7d:8f:69:29:0d:57:16:20:44:de:7e:9e:51:b5:f3:
2e:a7:ac:64:f1:f3:10:3d:91:42:0a:de:ef:2a:cc:6b:5e:7f:
26:88:35:0e:3c:42:4f:f5:9a:2d:aa:a7:5e:c7:65:02:f9:5d:
c8:f9:b0:bf:ab:f7:04:8e:4b:a8:d5:66:98:a3:7b:e2:18:04:
00:85:64:fd:22:bc:99:0d:69:5d:e3:83:bd:29:6c:ff:c7:fc:
8f:1a:1e:08:bc:7b:13:c0:af:9a:e9:e6:a2:38:65:f0:46:73:
4e:2b:d1:46:29:a8:b3:de:46:d6:e2:84:be:b1:bf:99:d3:73:
46:59:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:49 2025 by rpki-client