Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FpLFdIJSoQe/IMn4zRPHmMlTd7ZiaPkc5ZxOBHKetpk=
Subject key identifier: 1E:65:30:EC:B5:2E:75:5D:8D:C5:1D:72:05:15:6F:5F:36:63:A1:F5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 364D14E1BDA2829EDF005C840F63C68CA003022B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
Signing time: Fri 15 Nov 2024 10:57:43 +0000
ROA not before: Fri 15 Nov 2024 10:52:43 +0000
ROA not after: Fri 14 Nov 2025 10:57:43 +0000
asID: 834
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 21:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4d:14:e1:bd:a2:82:9e:df:00:5c:84:0f:63:c6:8c:a0:03:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 15 10:52:43 2024 GMT
Not After : Nov 14 10:57:43 2025 GMT
Subject: CN=1E6530ECB52E755D8DC51D7205156F5F3663A1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:4c:4d:60:a7:88:0c:e6:3a:63:d4:ff:50:
2b:8a:5e:b0:3f:8a:2d:b4:f3:d1:7a:00:3e:01:47:
18:95:8f:d1:87:a2:32:fc:c9:05:a7:af:7d:da:5c:
9e:12:eb:f4:23:3a:80:27:e0:39:f2:c8:80:2d:87:
e9:fb:d2:c9:b5:fe:e5:50:6f:a5:2a:e1:4b:9b:16:
12:be:21:6a:4b:80:ef:54:12:a8:87:45:98:7e:29:
ca:61:3d:4f:17:a1:24:2c:66:95:06:e0:cc:7f:cd:
f6:e2:f5:8c:fc:f1:6a:59:09:3c:7d:42:9a:a7:fa:
d6:4d:91:4f:e5:e1:15:f5:16:64:50:cd:53:b3:fe:
c6:87:52:cb:b0:b8:7b:77:39:d1:9d:5d:09:43:b7:
2a:ae:33:9c:3e:f1:ed:9b:2d:de:bc:d9:d5:fa:a1:
fb:ce:9d:f9:59:97:e5:e3:19:de:7a:10:43:16:6d:
53:49:ca:e8:c3:86:02:83:d2:c6:e2:d6:6f:76:1d:
78:bc:f8:87:07:59:06:17:a5:36:9c:0d:b0:4f:10:
ec:51:8d:ee:c2:ae:46:28:bf:7c:d9:f6:6a:90:71:
23:49:ea:d7:f6:f0:32:63:14:57:07:b6:64:70:fa:
1f:99:37:9d:ba:c8:41:54:bc:0e:db:ff:8a:7e:9e:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:30:EC:B5:2E:75:5D:8D:C5:1D:72:05:15:6F:5F:36:63:A1:F5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:c0:36:3a:39:45:a4:54:94:3a:2f:ef:f1:78:e5:55:8a:
e2:fc:8c:58:b7:5c:cb:54:32:a8:d2:3e:26:e7:ab:51:5a:74:
e8:b5:4c:1d:8e:2f:df:a2:6b:01:2c:9f:0d:a1:9e:06:f3:ee:
bd:d6:52:78:32:1b:8c:f8:07:aa:3b:52:01:de:40:bd:bd:7b:
e6:7a:06:dd:1c:16:bf:e9:89:6d:46:a4:1a:b8:87:71:8b:6e:
d7:1d:38:8f:0e:a9:04:4a:e0:c9:12:1f:67:d0:d4:40:27:77:
b1:98:e9:5a:e2:f9:22:21:88:01:1b:22:d5:e1:76:9c:69:87:
f3:1c:85:80:04:8b:7a:5f:db:67:7a:62:c0:5d:6a:c4:60:5c:
86:18:ab:83:ce:4e:25:87:14:a9:bd:84:89:af:7c:d5:f0:07:
d1:7c:a0:78:b9:fb:dc:5a:c9:64:bf:88:a0:0a:73:c8:7e:cd:
64:c8:11:21:a0:63:71:d0:c6:77:b2:f6:6f:f7:f0:1a:c0:3b:
e3:b4:07:33:3e:6e:55:61:a1:94:fd:aa:bc:a1:36:57:a8:47:
ba:d5:78:c5:6c:23:ec:15:91:b4:de:b1:59:66:3b:cf:c6:2d:
fb:da:5b:e4:e1:55:70:ec:59:05:dc:db:6f:0a:e8:74:24:f3:
53:2d:98:20
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 19 00:19:23 2024 by rpki-client on console-ams.rpki-client.org