Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QH6rDNIgupub2LuxoE/WZUtfG+6yym/mlfMODrOo7DU=
Subject key identifier: 6C:65:AD:7B:43:CC:1B:0D:AC:2C:E9:63:BD:69:C4:AC:BD:7B:08:43
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 088B3F5BB422C1575DE642226CB1BCDDEA3D0115
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20383334.roa
Signing time: Wed 03 Jul 2024 08:23:02 +0000
ROA not before: Wed 03 Jul 2024 08:18:02 +0000
ROA not after: Wed 02 Jul 2025 08:23:02 +0000
asID: 834
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 08:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8b:3f:5b:b4:22:c1:57:5d:e6:42:22:6c:b1:bc:dd:ea:3d:01:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 3 08:18:02 2024 GMT
Not After : Jul 2 08:23:02 2025 GMT
Subject: CN=6C65AD7B43CC1B0DAC2CE963BD69C4ACBD7B0843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:ed:10:ac:39:db:55:22:41:78:5c:ef:e7:
2c:81:46:a1:54:30:a0:2d:bd:52:8e:3e:37:59:e0:
0e:19:6f:c4:26:dc:30:18:76:1f:11:c8:e3:8f:7b:
3a:0f:85:ee:b4:59:17:e4:05:a6:a1:fa:4e:d1:5a:
a7:7d:4e:b6:37:a9:3b:af:7a:fa:96:f4:c5:f9:39:
1b:97:94:2c:c5:2e:82:85:22:a4:64:39:ff:61:4b:
8d:6d:fb:3d:8d:41:30:5d:2a:72:c5:29:45:43:46:
c1:cf:e2:15:98:59:db:ea:ab:a0:90:7a:d0:39:b2:
0c:f8:b8:0d:33:51:43:17:87:dc:75:01:63:c3:ff:
4b:65:c7:b2:bf:1d:fc:34:da:9e:dd:28:0f:f8:a3:
9d:ab:3f:92:ff:9e:20:fa:99:0c:9f:56:2d:67:d6:
cb:36:63:c3:72:ce:f3:b3:1b:8d:73:b2:e0:3d:35:
14:cf:5c:2e:57:96:d6:49:60:ef:28:82:80:32:ff:
89:3c:69:71:b7:62:1f:6a:f4:4e:ad:ae:8d:6b:ec:
29:87:84:83:86:f6:8f:5a:c8:5b:cc:5e:f5:0e:44:
50:eb:55:76:e9:0d:a7:1f:16:35:99:77:98:8c:38:
57:1f:8a:6e:2d:4c:9b:b1:ed:db:8f:bc:65:e6:bf:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:AD:7B:43:CC:1B:0D:AC:2C:E9:63:BD:69:C4:AC:BD:7B:08:43
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
65:80:06:9d:3e:74:09:bf:ba:f3:ed:a1:ef:8f:6f:20:22:db:
ae:62:2d:ae:8d:47:cc:34:3a:9a:a9:a6:ba:f2:94:f6:cd:07:
bd:a7:26:01:07:b5:7c:7b:86:a9:32:d7:fd:36:b5:9e:89:fb:
89:61:8a:61:fb:ae:8a:d2:77:89:c0:63:97:33:24:38:3a:4f:
2f:7e:bf:ef:ce:98:d1:ba:27:2e:f9:a4:a9:5b:c1:7d:b6:1e:
87:f9:b8:de:c1:23:ee:e6:13:88:95:99:cb:2f:40:91:32:b6:
9e:9b:bf:b8:82:5a:27:a8:3b:d6:ab:d9:f4:9d:15:aa:45:f1:
71:14:e9:6d:b9:f6:6d:1a:2a:a9:13:1c:90:12:07:72:3c:78:
13:38:33:c5:3f:24:7e:5b:17:b5:22:e6:4b:69:e4:0a:e1:88:
cb:1f:c2:3a:00:2f:16:f5:86:14:7c:ad:64:03:81:d3:27:d9:
a7:67:72:cb:cd:66:35:c0:97:ed:be:09:ae:a8:7d:86:16:6a:
12:99:a4:19:3c:2c:b2:6e:0b:b1:87:01:88:c4:d9:c6:7c:37:
c0:7b:8b:8b:5b:96:f3:c3:7e:14:e1:fb:cd:23:b6:aa:92:df:
f7:3a:f5:9e:9c:4b:fd:d0:54:fd:95:1c:80:08:0c:c0:09:78:
a5:09:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 10:25:22 2024 by rpki-client on console-ams.rpki-client.org