Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203231383539.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: HhdO0wW5L4UeSs94Y2mGSmSnAbKdUEJv7LGBRzNEFWg=
Subject key identifier: 2B:8E:F7:0B:24:C2:2F:C3:7D:BB:62:A9:D1:18:84:0E:38:F4:6B:75
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 54BBACA4249880849743D713BF09E47BC1E735BC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203231383539.roa
Signing time: Mon 22 Jan 2024 14:35:19 +0000
ROA not before: Mon 22 Jan 2024 14:30:19 +0000
ROA not after: Mon 20 Jan 2025 14:35:19 +0000
asID: 21859
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:bb:ac:a4:24:98:80:84:97:43:d7:13:bf:09:e4:7b:c1:e7:35:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 22 14:30:19 2024 GMT
Not After : Jan 20 14:35:19 2025 GMT
Subject: CN=2B8EF70B24C22FC37DBB62A9D118840E38F46B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:1f:bb:df:22:19:35:71:f6:64:7a:5b:a2:
f8:05:77:b3:6f:f9:bc:a6:e9:47:13:47:02:5b:27:
61:20:d0:35:a1:33:34:00:bc:2f:9c:a7:a4:20:27:
da:8b:1b:92:a9:0d:ef:e7:87:c4:ce:e0:25:5d:19:
dd:5b:78:98:08:be:e9:bc:c4:f5:9d:f3:c2:cd:78:
06:90:bc:77:ae:df:fd:e9:aa:6a:89:38:ac:3a:2a:
e0:25:a4:88:19:9a:eb:e4:c1:75:78:c1:c9:d1:0f:
33:ae:89:11:1d:a4:2e:0e:35:1f:54:d9:9c:0f:55:
78:18:54:d0:dd:b7:7d:2d:b7:18:36:89:ac:6d:77:
b5:b6:1c:93:71:d7:23:d5:23:88:09:b6:53:48:64:
75:95:5a:28:72:35:c6:b1:7d:7a:7a:42:31:46:06:
bb:b9:55:dd:5e:49:77:03:a5:a4:86:36:9e:ec:c9:
17:e8:6c:5e:02:c3:00:2a:50:3a:2d:20:fa:bb:26:
89:b1:e1:f5:2c:8f:c1:ac:61:be:56:85:ef:21:eb:
22:45:5e:d3:0e:9e:1c:28:ef:3a:16:c4:e5:9a:f4:
83:84:25:32:ef:8b:68:dd:f3:c0:e2:55:99:33:74:
f1:87:bc:58:a3:c3:1c:47:49:4f:a3:88:f5:b4:61:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:F7:0B:24:C2:2F:C3:7D:BB:62:A9:D1:18:84:0E:38:F4:6B:75
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
11:af:67:7f:fd:85:d2:24:b3:1c:28:5b:9c:08:21:7a:d0:28:
cb:2c:33:7c:cf:8e:f4:0c:83:cf:6c:04:3d:e3:5b:57:dc:5d:
c3:07:bd:7c:4b:79:f7:f1:ed:8a:54:bc:65:20:9b:85:ea:b9:
df:79:28:1c:7f:9a:f4:75:b0:b9:a7:3f:23:8e:80:56:da:6b:
90:9b:34:43:a8:79:53:08:0f:d9:a4:5c:cf:03:e4:3f:c5:23:
88:a0:11:bf:e8:68:64:a1:12:7d:31:36:f3:ad:e3:ad:fb:75:
d7:32:04:71:7d:a1:5e:fe:22:4b:c5:72:fa:d3:3e:81:69:15:
a4:55:23:50:bc:15:16:59:0d:90:fe:03:5f:1d:21:d6:c8:fb:
b6:cc:70:58:c0:28:84:34:a6:49:6d:a8:0b:79:b5:68:cc:7a:
16:91:69:02:61:bb:5b:09:0d:ed:67:2b:c5:f2:a9:ea:54:01:
16:58:0c:fc:2c:f7:d1:6e:89:7c:97:7f:4d:04:53:72:f7:5d:
57:68:38:48:29:2c:ac:34:3b:e1:6a:14:5d:90:dd:b7:ba:80:
2d:f2:63:96:3a:e9:c9:9b:e1:d5:c1:6a:7a:a4:39:ae:68:39:
df:8f:36:ee:69:d2:73:38:c1:e3:88:60:1f:14:d2:6b:a8:32:
53:04:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:38 2024 by rpki-client on console-fra.rpki-client.org