Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203235393936.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e203235393936.roa (raw, json)
Hash identifier: N8tGxpSkShxBCNhqmglGHu8ICMkNL9eZSUqkk8Mbu+c=
Subject key identifier: 33:E6:A6:16:EA:67:89:42:EA:C5:67:C6:F9:A6:2E:AC:B7:3D:18:47
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2DFE313B461415E2FC908A9BBE10E52DD29946A3
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203235393936.roa
Signing time: Mon 01 Jul 2024 12:45:57 +0000
ROA not before: Mon 01 Jul 2024 12:40:57 +0000
ROA not after: Mon 30 Jun 2025 12:45:57 +0000
asID: 25996
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 07:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fe:31:3b:46:14:15:e2:fc:90:8a:9b:be:10:e5:2d:d2:99:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 1 12:40:57 2024 GMT
Not After : Jun 30 12:45:57 2025 GMT
Subject: CN=33E6A616EA678942EAC567C6F9A62EACB73D1847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:8c:63:2e:9c:15:9e:d3:34:21:7a:75:62:
23:61:96:5e:32:1a:b2:ff:f9:53:df:a4:1d:82:2c:
56:2c:c3:76:6c:e5:b1:7a:3a:5e:5a:f1:18:61:20:
a1:37:5f:c9:39:9a:4a:23:d6:d5:cb:df:48:b1:92:
e9:57:e0:13:f1:71:55:79:a7:75:62:55:12:e5:4e:
01:1e:88:bd:88:da:44:b5:7b:8a:21:23:a1:52:92:
24:cb:66:b9:5c:48:46:02:e2:91:ba:69:49:a9:1e:
64:a3:ac:f8:a9:ea:c8:49:f0:5f:f9:83:ba:ef:e1:
00:6a:9c:20:aa:e7:fe:e4:88:d9:62:5c:c3:db:8a:
c6:8d:81:a4:42:3d:5b:cd:f9:ac:a6:21:20:ef:c8:
94:d5:67:2e:1d:74:1b:f7:7c:ce:8e:be:bc:08:ea:
90:48:5e:87:4b:32:de:4c:23:24:e5:cf:6b:3c:55:
85:c2:0d:2c:94:49:58:f2:86:02:63:38:fb:fe:f8:
3f:d5:60:8f:25:c7:3c:b3:3a:e0:f5:67:be:c9:8e:
2c:c4:3c:a3:9a:b8:50:3c:f9:cd:e3:11:41:8c:4c:
e8:4c:6d:83:f6:3a:8a:e2:5b:f2:8f:b8:88:98:f9:
c6:c5:eb:c8:0d:10:04:c3:37:fe:9a:66:64:69:9f:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:A6:16:EA:67:89:42:EA:C5:67:C6:F9:A6:2E:AC:B7:3D:18:47
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e203235393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
85:42:96:dd:4f:43:4b:65:16:b4:bd:db:16:5f:c9:f7:26:94:
22:10:1e:08:9f:3c:ab:94:ff:16:47:2b:53:1e:41:34:1a:88:
98:fb:c4:55:d8:b8:03:5b:ef:15:a2:5b:e7:25:45:b5:5e:3f:
a4:df:f5:9e:01:aa:e9:30:b1:7b:5d:46:a7:a5:57:2d:74:6b:
e1:ee:90:be:32:0b:1c:ab:1d:3d:83:c5:b7:ee:8e:08:bb:31:
fa:85:af:bb:72:da:10:05:c4:75:57:e5:53:cc:61:c6:b9:c0:
fc:90:a7:5e:b0:45:f2:2f:33:4f:e8:2b:ec:19:6c:52:44:fc:
19:35:5c:fb:be:3f:dd:3e:c2:cb:f3:4f:db:bd:42:f7:dc:ac:
50:26:79:ac:be:63:dd:eb:c7:32:d3:46:1f:06:9c:e2:69:fe:
cf:94:e7:02:69:39:a5:e7:8d:86:dd:e6:fc:25:09:73:fa:fe:
a3:02:e2:05:10:83:57:1d:1a:83:b6:f3:7d:da:96:30:72:4e:
25:14:0c:a6:e6:d4:1d:cc:f7:ce:f6:89:ae:3c:5d:52:29:52:
2d:12:0c:93:0a:d8:2c:74:98:3f:32:c1:0a:18:8b:b2:5b:41:
a2:d7:45:a7:3b:f8:33:37:73:bd:1b:9a:f4:fc:56:96:26:db:
08:26:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:50 2025 by rpki-client