Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323136303538.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e20323136303538.roa (raw, json)
Hash identifier: IkRIIcfedeBBOcSIiNC9/ubYJEgPAv5ZX7UKxGpjK30=
Subject key identifier: 13:3F:71:85:FE:A2:80:9E:C4:6B:0F:04:F2:BA:46:31:C2:ED:98:E1
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6D39AA536D663BCB5D904E9F6D7CF6E0F7A6DE67
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323136303538.roa
Signing time: Sun 10 Mar 2024 10:47:59 +0000
ROA not before: Sun 10 Mar 2024 10:42:59 +0000
ROA not after: Sun 09 Mar 2025 10:47:59 +0000
asID: 216058
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:39:aa:53:6d:66:3b:cb:5d:90:4e:9f:6d:7c:f6:e0:f7:a6:de:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 10 10:42:59 2024 GMT
Not After : Mar 9 10:47:59 2025 GMT
Subject: CN=133F7185FEA2809EC46B0F04F2BA4631C2ED98E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:16:9e:43:dd:cb:f4:0e:8f:c2:5e:43:b0:
12:28:8f:02:3f:29:fb:3e:fc:59:b8:49:f7:28:45:
f5:27:7f:31:66:9d:8d:fa:09:d0:f7:00:4e:fc:ab:
e5:82:03:75:34:93:27:ac:5a:ea:7a:6b:e2:0a:f4:
7b:3a:1a:54:fa:27:b0:91:6d:7f:15:b2:0c:a4:cd:
ae:5e:ca:33:56:ff:fc:72:41:88:f6:40:43:23:34:
a1:39:3f:cd:03:8e:43:d2:56:14:a2:9b:b3:3c:61:
15:e9:ae:c3:fd:26:cb:76:7a:96:92:d5:5a:34:52:
c3:ae:9b:1b:85:13:1e:7e:10:10:a7:e6:fc:f9:a6:
00:24:ff:8e:6f:58:3f:1a:e8:42:97:c3:9d:d8:e9:
f9:dc:c8:0e:ad:31:a0:f6:97:bd:ff:02:20:12:4b:
d7:e1:7c:d0:94:ed:36:70:00:63:62:2c:8f:02:8b:
44:a9:a2:2c:b2:5b:f8:57:56:c2:e9:c3:4f:59:29:
27:13:a0:cc:93:0f:d9:b7:9d:0a:47:fc:ea:9c:03:
a0:d3:51:51:ce:59:36:40:f0:19:bb:4b:b9:93:62:
16:a7:2e:15:0b:0a:c1:48:f3:be:1d:cf:92:d0:e4:
9f:a4:e9:59:31:0d:74:19:0f:36:9a:1f:e6:8e:06:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:71:85:FE:A2:80:9E:C4:6B:0F:04:F2:BA:46:31:C2:ED:98:E1
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323136303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:04:5e:12:9e:e1:e8:e1:1f:fa:d8:8e:cd:7b:bc:47:33:49:
2c:1f:d3:cc:a7:13:e6:5e:87:f1:ae:87:b4:d1:45:f6:3f:89:
19:f5:43:a0:96:f2:7d:57:09:f6:99:a0:96:f6:7e:4a:f0:8a:
b3:f0:73:08:d8:a9:8b:1f:68:78:bd:a1:e3:c8:71:ec:ef:f9:
ba:c8:97:98:d7:2c:1c:50:52:bd:a0:b3:13:69:d3:d9:b7:f9:
0f:54:6f:06:87:de:21:3f:13:fa:08:c2:00:81:b7:af:1d:2a:
47:1d:c2:2e:03:1d:ed:88:8f:7d:68:f7:e0:d6:7a:74:47:5a:
a3:78:6e:79:cd:65:1a:fb:14:0c:87:46:6c:67:17:2f:d5:e5:
f8:22:a1:c9:ca:4a:17:a8:9d:22:a3:d0:65:6a:83:da:a0:7d:
da:a2:c0:b2:53:29:c2:d3:c6:b6:1d:78:21:16:a9:37:b2:13:
66:b2:86:67:20:8a:de:78:0f:a4:a7:56:25:8b:cc:2a:74:eb:
a4:a1:90:b1:c7:bc:ec:d5:5e:95:e9:14:af:93:27:9e:96:78:
f8:73:80:11:17:ce:2d:1f:c7:a7:95:a9:3a:79:25:29:a7:da:
61:b3:f3:9c:d3:9e:c7:ca:41:c7:6e:17:1b:8c:e6:2e:01:c7:
f1:85:66:8f
-----BEGIN CERTIFICATE-----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Generated at Mon May 20 12:33:11 2024 by rpki-client on console-fra.rpki-client.org