Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203231383539.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: UspEXeY5gGCsfmNOx3atCS1YjrwW5K5hc3wnT132Xz4=
Subject key identifier: 45:74:66:5A:58:C6:8D:4D:71:FC:40:98:76:FC:D1:2D:32:41:99:D4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 219BF9268B32BBE450A7059366BAFAA6086EDAC4
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203231383539.roa
Signing time: Mon 22 Jan 2024 14:35:20 +0000
ROA not before: Mon 22 Jan 2024 14:30:20 +0000
ROA not after: Mon 20 Jan 2025 14:35:20 +0000
asID: 21859
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9b:f9:26:8b:32:bb:e4:50:a7:05:93:66:ba:fa:a6:08:6e:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 22 14:30:20 2024 GMT
Not After : Jan 20 14:35:20 2025 GMT
Subject: CN=4574665A58C68D4D71FC409876FCD12D324199D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:bc:b9:d9:0f:05:83:a2:69:b5:a4:a0:50:
c2:46:ba:6c:79:83:28:26:d3:37:28:74:63:64:dd:
36:6d:aa:cb:cd:95:68:1a:24:df:c0:ae:fb:9e:93:
0e:8f:fe:c5:77:9f:49:49:1c:c8:25:5c:c2:3c:dc:
93:e4:d2:74:13:a8:5c:bd:64:b4:f5:eb:02:2c:89:
24:9a:83:15:8f:03:50:c0:a3:df:a7:73:47:ca:69:
f1:d0:fe:45:a4:80:49:93:2c:d2:b8:38:88:87:9b:
bc:e6:e1:15:31:6a:37:78:04:e0:53:29:23:ec:c4:
34:fa:a5:39:b6:cf:c0:75:c0:d1:fe:0e:2a:5f:a9:
33:c6:08:4b:29:cf:5e:8c:86:9e:ff:c3:37:b5:cc:
c5:4d:60:51:e9:60:66:09:8f:46:2b:39:78:42:45:
51:f0:9c:f3:77:52:9d:69:01:9b:32:54:14:11:92:
60:22:65:51:c7:05:1d:b9:ce:f0:dc:d2:a1:af:11:
fb:8a:71:18:bb:63:6b:e8:9f:e3:c6:16:46:19:8f:
f2:c6:62:e2:fb:45:1f:6b:21:7d:01:db:e7:35:79:
62:5d:98:83:ce:8e:5e:93:b3:1f:74:47:6d:80:79:
1d:de:7f:03:e4:8e:b9:97:27:ab:d4:a0:a3:6c:ea:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:66:5A:58:C6:8D:4D:71:FC:40:98:76:FC:D1:2D:32:41:99:D4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8f:b9:2c:cb:13:90:ec:f3:92:e4:1a:70:2a:33:e5:3d:ea:
cd:b9:17:ac:f6:21:14:f7:04:d8:50:9c:d5:88:00:b7:a9:9e:
26:58:6b:3e:6e:0f:a3:12:b3:d9:a1:bd:b3:83:b2:f0:fe:8e:
da:fc:37:93:f9:9c:a4:35:38:5a:e5:86:4f:52:7b:bc:bf:19:
5f:d8:49:d1:59:9a:3a:68:26:47:00:6b:26:ad:85:20:aa:a9:
a2:d4:94:73:c0:95:d5:a1:77:1e:d8:dd:99:a4:16:fa:12:ea:
20:e9:56:c3:b5:26:15:c5:df:5a:a8:ac:fa:a6:2d:92:d4:f0:
4c:c8:22:43:ae:b7:c1:24:e4:be:11:d5:dc:29:c7:4d:a8:5b:
17:a5:c1:41:06:85:97:8f:5e:d4:50:a6:c5:ca:f2:01:90:9c:
77:e9:2b:2e:b0:24:98:b2:89:b4:32:69:da:bb:7c:ec:04:af:
90:5c:ba:b8:cb:78:19:0d:5e:65:5d:90:f4:12:6c:4a:80:37:
fd:e7:ca:5c:26:0b:34:bb:8c:73:67:ec:08:59:54:a4:ce:3c:
64:42:82:22:6d:32:1b:72:af:a4:89:1f:e1:13:9b:48:dd:1f:
04:b7:2c:69:c8:17:7c:ff:bd:d2:f3:81:81:d3:cf:cc:a6:a1:
c4:b3:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:38 2024 by rpki-client on console-fra.rpki-client.org