Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4fqd1CfNt5ntAheFBZ/X3s8gOgOb9aJq5L0690K5Ytg=
Subject key identifier: 1F:1C:D7:00:DC:C5:4E:5C:29:DC:2D:81:A5:20:01:29:DB:38:C2:DA
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0C747986C3D1FCAC9619B40A0B6D1F2D0286F54A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
Signing time: Tue 05 Mar 2024 15:10:38 +0000
ROA not before: Tue 05 Mar 2024 15:05:38 +0000
ROA not after: Tue 04 Mar 2025 15:10:38 +0000
asID: 834
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:74:79:86:c3:d1:fc:ac:96:19:b4:0a:0b:6d:1f:2d:02:86:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 5 15:05:38 2024 GMT
Not After : Mar 4 15:10:38 2025 GMT
Subject: CN=1F1CD700DCC54E5C29DC2D81A5200129DB38C2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:53:8d:ec:1c:f1:e1:23:a0:1a:3c:31:b4:
c6:13:46:77:f8:f5:42:dd:ad:51:7c:5c:f3:d5:82:
b1:e3:d0:bf:ce:ef:4b:cc:79:98:52:a9:1b:34:65:
be:06:c2:6b:56:29:3c:b7:55:09:1f:a1:4c:0b:6b:
ff:f8:a8:be:d8:bd:8d:96:51:8c:1b:cf:dd:dc:aa:
90:77:b6:9b:d3:ee:8a:d1:ea:34:c5:3e:4f:3b:a9:
3a:8e:f5:ba:8b:aa:22:1e:14:6e:1b:7b:40:e2:6d:
74:bb:b5:28:05:11:d1:95:d4:d3:b4:9a:fa:b9:ef:
03:5f:29:78:45:65:31:62:3d:25:bb:8c:3f:31:3c:
58:a7:fe:1d:9a:bf:70:84:ff:47:da:54:36:17:2c:
9a:1f:a0:bc:ee:fa:f4:ae:8c:34:d5:bb:78:5c:34:
ba:05:54:35:0d:61:70:96:83:13:6a:70:de:46:ce:
44:19:49:67:01:73:9e:e8:7d:80:6a:10:3b:e2:17:
47:5f:04:a0:97:09:31:f7:59:94:8a:68:8e:4d:d5:
99:3a:c1:45:8b:8e:22:29:ff:de:8c:05:5b:71:99:
85:fb:4b:c4:52:4d:cc:0f:16:a8:06:11:9f:4e:3d:
de:8c:c9:be:fb:be:59:67:0f:60:70:f0:50:95:fc:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:D7:00:DC:C5:4E:5C:29:DC:2D:81:A5:20:01:29:DB:38:C2:DA
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a5:f8:a8:9c:14:14:5a:ec:fd:67:04:76:42:81:98:01:ee:
5a:41:d0:24:70:8d:92:b6:21:2b:c9:28:38:32:36:58:2e:5c:
d2:2f:b8:fd:b5:dc:d0:7e:e5:54:8f:1c:d3:5c:a4:38:59:a6:
cd:5b:75:e9:03:4d:37:85:0d:1d:54:f9:37:d3:8a:2b:40:37:
54:27:c9:f7:66:60:a8:a8:d7:5b:44:6b:28:41:7e:24:f5:1f:
46:23:0b:e6:33:08:30:ff:39:40:1c:8a:60:d3:e8:e1:0c:04:
7a:d1:f1:4d:08:ef:2d:70:75:65:8f:03:c0:2b:fd:69:3b:df:
86:f9:c1:90:46:17:fb:aa:bd:6f:40:f9:57:f7:e8:76:fd:9a:
34:60:94:3b:27:e2:66:17:b7:18:85:43:2a:2d:73:fd:e9:2d:
92:42:47:92:38:fa:9c:3b:41:a6:38:b8:c8:e5:42:bf:45:fa:
23:48:80:63:b3:c5:6b:cc:12:b7:78:81:71:c2:1f:c8:f2:62:
ed:ae:12:95:1f:ea:6f:52:0e:ea:6d:b9:a5:21:95:dc:7f:56:
0f:a8:0a:de:b1:4d:d5:dd:fc:6b:65:f0:cf:00:9a:d8:41:6b:
cb:a4:e3:a6:b1:b0:cf:f9:0f:1a:c5:40:a7:ce:df:12:23:03:
ed:48:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 13:06:22 2024 by rpki-client on console-fra.rpki-client.org