Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203230383630.roa
File: 3130392e3131302e3138362e302f32342d3234203d3e203230383630.roa (raw, json)
Hash identifier: fUOz5Hzgr7NIpGW8iUSk/bhSw3bmt2rJfIghtbIpL7g=
Subject key identifier: 94:3B:F9:FB:72:DA:18:A2:78:72:DB:51:22:54:91:D1:15:2A:51:AC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7222CE5B4C7076D0552262D5B5F4984A0FD104FC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203230383630.roa
Signing time: Tue 20 Feb 2024 16:22:02 +0000
ROA not before: Tue 20 Feb 2024 16:17:02 +0000
ROA not after: Tue 18 Feb 2025 16:22:02 +0000
asID: 20860
IP address blocks: 109.110.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:22:ce:5b:4c:70:76:d0:55:22:62:d5:b5:f4:98:4a:0f:d1:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 20 16:17:02 2024 GMT
Not After : Feb 18 16:22:02 2025 GMT
Subject: CN=943BF9FB72DA18A27872DB51225491D1152A51AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:77:df:c1:33:66:a4:af:ed:64:7d:25:53:
20:d4:b0:9b:e5:a9:c6:75:b1:4b:aa:d7:e3:76:73:
5c:d1:06:78:a9:69:f0:eb:f7:ab:bc:66:d6:54:e7:
75:e6:4f:2b:7f:f6:c2:02:be:51:fd:95:2f:c8:3e:
75:51:ba:04:4f:81:de:3d:c3:67:8e:4a:81:4a:54:
47:b1:3b:0f:a8:00:42:7c:e3:54:48:17:ed:09:e6:
aa:fb:a3:3f:ed:5f:88:95:db:b0:dd:e3:0b:a4:41:
13:11:b3:19:de:5a:c1:38:87:70:6e:d2:0f:25:3b:
2f:0c:c8:a3:1e:a6:4a:0b:db:84:19:ae:98:38:4a:
60:04:51:54:c2:5f:39:3e:59:ee:6d:41:cc:66:81:
d1:2a:c3:50:5f:e5:e3:7d:1f:cf:7d:15:a6:be:dc:
59:b1:12:b9:f8:2c:1a:87:1d:5b:a3:0c:38:50:b0:
fc:12:51:a7:a3:c9:23:a9:93:e7:1e:84:ec:04:2b:
91:ad:0a:0e:d3:12:9f:e7:8b:07:c6:47:31:22:bf:
34:bc:ef:b9:ea:76:37:0d:c4:61:35:a8:4e:c0:3b:
96:c9:2b:6c:45:9f:47:5d:cc:64:00:54:3e:ae:3e:
35:ce:f1:4e:c0:3e:c5:79:ae:5b:de:eb:bb:1c:1c:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:F9:FB:72:DA:18:A2:78:72:DB:51:22:54:91:D1:15:2A:51:AC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203230383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.186.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:0c:e5:17:20:f2:d6:73:2c:ac:de:1c:e0:f8:bf:61:5d:
6d:6b:44:35:83:2e:d3:e0:ba:d3:51:1c:49:6d:26:6c:74:1d:
33:7b:80:3c:0d:59:04:1a:cd:1f:f8:6c:c8:81:56:07:40:06:
0c:0b:43:11:6e:96:ce:82:07:c4:7b:32:48:12:e2:cb:22:60:
0c:ce:0d:2c:c7:5e:c0:c4:3b:f7:4e:bd:26:1d:fc:de:5c:b1:
5f:91:43:f7:fb:d9:22:85:f5:64:86:44:a2:17:42:6c:d5:5a:
a0:6b:24:b5:21:05:cc:ee:87:09:d1:87:bc:07:31:f7:36:8d:
cc:28:64:34:31:ff:d6:86:cd:5e:92:50:8d:e4:03:4d:0c:54:
cb:75:6e:b9:ef:87:01:4e:05:65:2c:ac:d6:b1:b0:a1:cd:a7:
71:2c:48:5d:97:17:7c:f5:4c:30:e3:60:6d:f5:22:4b:10:1a:
8a:8e:f6:c9:95:93:a0:c3:07:1a:aa:97:66:15:cf:4a:a9:2a:
8e:e2:57:87:a3:2d:cb:75:df:a2:78:e3:a1:f3:65:99:b5:e2:
73:d8:29:89:47:27:06:f6:73:70:10:f2:e6:de:7d:3b:ab:68:
f1:71:0f:70:4e:b0:75:f5:88:d8:9d:da:f9:70:f6:b4:00:0d:
b8:5e:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 14:59:08 2024 by rpki-client on console-fra.rpki-client.org