Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323035373333.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e20323035373333.roa (raw, json)
Hash identifier: RaXYBrbBbOovLXJlbBP93Ry1OtwujAdkB3+0t8zLQUg=
Subject key identifier: 6F:7D:E6:BD:23:05:8E:50:93:17:B8:03:0D:07:43:61:CE:3B:F5:7F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 43941F9007C9ADA22E02F82CE4D54BB0CECC6A43
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323035373333.roa
Signing time: Wed 22 May 2024 22:23:56 +0000
ROA not before: Wed 22 May 2024 22:18:56 +0000
ROA not after: Wed 21 May 2025 22:23:56 +0000
asID: 205733
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 00:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:94:1f:90:07:c9:ad:a2:2e:02:f8:2c:e4:d5:4b:b0:ce:cc:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 22 22:18:56 2024 GMT
Not After : May 21 22:23:56 2025 GMT
Subject: CN=6F7DE6BD23058E509317B8030D074361CE3BF57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:9f:5c:f9:c5:ba:3f:3b:79:be:42:d5:63:
98:f2:ce:60:7c:3b:62:49:19:df:ae:49:fa:a0:f9:
7f:8b:cd:88:a6:c2:ad:43:b0:55:26:59:f4:01:a5:
79:36:ff:2d:42:70:73:c9:29:23:73:a2:21:86:81:
d3:07:9d:7e:24:69:b3:d9:9b:75:6a:35:d6:56:a6:
ce:3a:63:d8:82:bf:2b:98:73:42:77:bc:99:3e:c3:
03:26:50:45:f3:84:ef:0b:9e:43:89:f3:cc:d0:0e:
2d:d3:08:b8:7c:76:ef:67:17:8e:08:46:40:c4:1f:
ee:10:d8:d0:3e:f7:89:f3:c6:67:ea:ae:03:83:db:
b9:e1:dc:fc:d3:40:9d:d0:79:3b:8a:05:0a:28:a9:
7f:c7:07:93:2a:de:38:93:eb:a6:c9:b3:bc:05:2c:
27:b8:9e:f9:93:37:af:1c:54:2a:c3:f9:32:4d:d1:
42:f4:3d:9f:96:01:32:02:d1:19:32:04:d3:be:bb:
51:a9:ae:3d:af:39:17:2b:59:96:e2:44:cd:e0:e7:
cc:dd:be:c6:cb:55:67:fb:eb:91:48:2c:5b:c6:f3:
fc:06:78:c2:30:01:57:5d:2f:ec:3f:1d:de:3e:00:
62:2b:3d:fc:58:26:11:6d:5b:f2:22:34:8c:bc:9d:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:E6:BD:23:05:8E:50:93:17:B8:03:0D:07:43:61:CE:3B:F5:7F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323035373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
54:63:59:14:7a:29:60:f1:56:4b:b1:0d:2d:a1:9d:ca:c0:1f:
2a:8e:7f:71:f9:ad:cd:19:e2:6a:f2:01:76:06:91:5d:11:68:
84:e8:82:44:20:24:0f:a9:54:6b:8c:ff:29:4c:26:62:59:bd:
e2:8f:57:52:b7:45:51:4e:f6:37:8f:43:f1:c6:d4:d7:ac:da:
b8:79:22:8f:c6:10:af:07:db:21:46:c5:5e:fa:62:12:cc:3b:
11:40:d7:be:d1:f0:ad:81:96:7a:fe:6f:c4:c9:03:7c:08:cb:
d6:f7:f3:6b:0e:03:5f:0f:b2:fd:99:0e:e3:e3:f0:30:52:00:
4a:d1:03:d8:2c:62:66:08:fe:a9:10:02:b4:ee:54:d0:ab:59:
25:78:26:d1:3d:5e:30:76:60:9d:c4:24:d5:63:09:c6:16:7a:
e8:82:64:74:d9:12:ec:4b:b0:ee:00:6b:11:5d:84:5f:0a:b1:
66:0f:4e:91:92:33:cd:7a:77:f3:57:18:b6:d4:ec:c9:bf:7d:
7b:a0:34:4e:50:44:d2:24:a3:d4:13:64:ab:86:7b:67:2d:45:
aa:bd:16:60:00:f4:87:41:1c:8a:1a:d0:c8:74:e6:bf:4c:47:
5a:11:52:28:c6:25:e6:f5:6d:d9:05:f3:ad:83:23:7c:f9:50:
ca:1a:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:02:48 2024 by rpki-client on console-fra.rpki-client.org