Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3232203d3e203632323430.roa
File: 3130392e3131302e3138382e302f32322d3232203d3e203632323430.roa (raw, json)
Hash identifier: 3pGT+/HbXpMIFOM4709HKenrAsM/vZ8oeaSfNd+wX+c=
Subject key identifier: E3:05:E0:03:56:0A:D8:47:79:07:C9:52:CB:F7:9B:B7:AC:73:6D:6C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 490CDFC55146E90F51F87E5EADCCC1C74E89CF44
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3232203d3e203632323430.roa
Signing time: Tue 09 Jan 2024 07:02:36 +0000
ROA not before: Tue 09 Jan 2024 06:57:36 +0000
ROA not after: Tue 07 Jan 2025 07:02:36 +0000
asID: 62240
IP address blocks: 109.110.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 Feb 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0c:df:c5:51:46:e9:0f:51:f8:7e:5e:ad:cc:c1:c7:4e:89:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 9 06:57:36 2024 GMT
Not After : Jan 7 07:02:36 2025 GMT
Subject: CN=E305E003560AD8477907C952CBF79BB7AC736D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:c4:af:96:cf:80:a5:d9:7e:45:5d:31:dd:
af:c8:4f:e6:a6:01:33:a4:b1:cf:7b:ba:be:94:7d:
74:c4:87:47:9b:a5:fb:08:d4:24:4f:69:39:49:bb:
9f:fc:21:04:ac:49:fc:8d:a1:01:b6:0e:59:87:e9:
02:de:75:b6:7a:4e:92:fb:32:7b:fe:b4:7b:8d:87:
e3:9b:50:d5:3f:74:ae:22:93:c8:7b:3f:34:97:ed:
d9:be:b0:e7:76:60:ab:81:bd:55:66:ac:84:6f:7c:
05:74:8b:d1:cd:14:af:6a:65:b9:b0:3d:70:01:cb:
19:ac:1e:a4:58:77:28:d1:f5:f6:8d:5c:c4:02:bd:
93:eb:e2:6d:80:fe:9d:bf:04:76:b5:1d:45:e3:b6:
fa:6e:e8:18:33:c8:0e:e8:a9:8a:31:20:d2:73:5c:
f4:de:00:1b:78:64:25:c0:49:11:8e:fa:57:ae:64:
84:f3:6e:49:55:4f:c2:8b:6f:c1:c6:74:df:28:62:
5a:c2:a8:7e:84:5b:36:1b:89:f4:05:38:8b:3a:0d:
a5:93:20:b7:19:e8:2d:8d:15:fc:76:90:2f:83:91:
84:fe:cf:ef:db:b2:69:de:48:bf:fe:76:0f:5e:98:
6d:67:de:15:7f:04:34:b1:e4:5a:64:df:79:4a:3b:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:E0:03:56:0A:D8:47:79:07:C9:52:CB:F7:9B:B7:AC:73:6D:6C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3232203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/22
Signature Algorithm: sha256WithRSAEncryption
13:61:c0:e3:c1:83:6c:2c:1d:93:cc:10:87:0e:89:cd:98:a5:
5c:96:f5:d7:f3:70:29:54:35:f5:04:29:72:c6:4f:13:64:65:
05:ba:5b:61:e3:1e:2c:79:1a:eb:c7:b6:8d:91:bd:8d:5e:eb:
7a:34:ba:f8:83:ee:24:64:55:cc:32:c5:04:33:bf:7e:06:ab:
87:c0:bb:19:fa:3f:dd:f4:1c:62:10:44:0c:7a:0a:69:67:a8:
a7:6f:86:9d:45:1d:1b:a4:6e:24:d9:27:59:98:88:bf:60:99:
3a:8d:03:01:ea:91:d9:37:4c:a3:cd:09:df:45:4b:f4:aa:2e:
0b:0c:15:92:bb:e8:6b:97:a6:ba:2e:34:6c:21:87:01:78:80:
bd:16:d0:db:2a:2f:f4:36:b4:3c:82:f4:e1:f0:d3:0c:95:de:
a0:b3:72:e1:a7:44:33:a8:d5:22:76:86:5c:17:f7:d8:e6:df:
be:45:1d:8d:50:6e:21:a4:84:95:ab:ec:6b:ae:d3:14:98:8f:
02:c7:5d:19:75:c5:ba:92:b2:16:f3:4c:b6:09:04:0d:81:49:
7b:99:c6:ef:d2:fa:87:a7:7c:4b:a2:65:cf:fe:7c:02:3d:11:
ad:c1:46:b5:92:c5:71:a5:44:5a:fa:49:bd:3f:37:47:66:05:
85:e8:e0:fe
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSQzfxVFG6Q9R+H5erczBx06Jz0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAxMDkwNjU3MzZaFw0yNTAxMDcwNzAyMzZaMDMxMTAvBgNV
BAMTKEUzMDVFMDAzNTYwQUQ4NDc3OTA3Qzk1MkNCRjc5QkI3QUM3MzZENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtD8Svls+Apdl+RV0x3a/IT+am
ATOksc97ur6UfXTEh0ebpfsI1CRPaTlJu5/8IQSsSfyNoQG2DlmH6QLedbZ6TpL7
Mnv+tHuNh+ObUNU/dK4ik8h7PzSX7dm+sOd2YKuBvVVmrIRvfAV0i9HNFK9qZbmw
PXAByxmsHqRYdyjR9faNXMQCvZPr4m2A/p2/BHa1HUXjtvpu6BgzyA7oqYoxINJz
XPTeABt4ZCXASRGO+leuZITzbklVT8KLb8HGdN8oYlrCqH6EWzYbifQFOIs6DaWT
ILcZ6C2NFfx2kC+DkYT+z+/bsmneSL/+dg9emG1n3hV/BDSx5Fpk33lKO3ODAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4wXgA1YK2Ed5B8lSy/ebt6xzbWwwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJtbrwwDQYJKoZIhvcNAQELBQADggEBABNhwOPBg2wsHZPMEIcOic2YpVyW9dfz
cClUNfUEKXLGTxNkZQW6W2HjHix5GuvHto2RvY1e63o0uviD7iRkVcwyxQQzv34G
q4fAuxn6P930HGIQRAx6CmlnqKdvhp1FHRukbiTZJ1mYiL9gmTqNAwHqkdk3TKPN
Cd9FS/SqLgsMFZK76GuXprouNGwhhwF4gL0W0NsqL/Q2tDyC9OHw0wyV3qCzcuGn
RDOo1SJ2hlwX99jm375FHY1QbiGkhJWr7Guu0xSYjwLHXRl1xbqSshbzTLYJBA2B
SXuZxu/S+oenfEuiZc/+fAI9Ea3BRrWSxXGlRFr6Sb0/N0dmBYXo4P4=
Generated at Fri Feb 9 03:28:09 2024 by rpki-client on console-ams.rpki-client.org