Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3234203d3e20383334.roa
File: 3130392e3131302e3138382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: +o+gQNb4VYifTzSXTXNLAmSTS1+ZBzjWoEbD+KoKPxg=
Subject key identifier: 77:6F:07:A6:61:C9:1F:4B:CB:83:6A:BE:E7:77:9E:A1:81:5B:A3:F8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 09CC42D9A8F7C406B297148C5AD97FEFE44CF90F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3234203d3e20383334.roa
Signing time: Fri 09 Feb 2024 00:03:16 +0000
ROA not before: Thu 08 Feb 2024 23:58:16 +0000
ROA not after: Fri 07 Feb 2025 00:03:16 +0000
asID: 834
IP address blocks: 109.110.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 01:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cc:42:d9:a8:f7:c4:06:b2:97:14:8c:5a:d9:7f:ef:e4:4c:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 8 23:58:16 2024 GMT
Not After : Feb 7 00:03:16 2025 GMT
Subject: CN=776F07A661C91F4BCB836ABEE7779EA1815BA3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:f6:f0:0b:dc:11:21:44:4e:4a:23:b0:0d:
46:c1:5f:0f:7f:3c:3f:6f:fa:ed:52:05:bc:3b:3e:
42:36:f3:92:3d:fc:1a:6d:4f:45:78:77:2f:c2:aa:
df:6d:91:0f:8e:0c:cd:cb:bd:07:43:6c:cd:14:87:
f7:7a:b3:d1:a4:8e:8e:ca:d2:f1:e1:cd:49:c6:9f:
2b:4e:20:12:2d:e6:98:42:d3:7b:37:b6:7e:c3:38:
14:3d:0b:65:2b:87:a5:4a:93:85:86:c5:38:6c:52:
72:82:e9:06:4d:81:02:60:79:04:98:24:46:78:e3:
7d:06:ba:69:ff:bb:2c:91:f0:be:85:c8:f5:44:13:
a8:57:49:8e:6b:5a:ab:82:32:3a:49:f7:8d:24:75:
5b:1e:ed:2f:8a:35:69:13:f5:ff:40:09:53:6d:45:
63:07:08:3e:c2:ea:ab:f4:6a:d4:b2:22:b3:8f:cb:
8b:07:22:b2:08:62:a7:e9:fb:29:bf:e8:39:bf:c4:
44:de:95:b5:86:76:7f:fe:5f:27:ba:46:f9:78:fb:
a2:02:06:04:94:17:f3:bf:9d:09:5d:f4:25:71:61:
e8:3b:91:e3:47:f0:a5:e8:1c:c1:7b:6d:81:a4:68:
cd:b1:a4:c9:a1:25:6b:f6:b9:da:99:44:c3:2d:44:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:07:A6:61:C9:1F:4B:CB:83:6A:BE:E7:77:9E:A1:81:5B:A3:F8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:cd:a4:b1:06:6a:dc:12:45:9f:15:1f:44:ed:2e:a1:51:82:
4d:16:ae:67:b2:53:08:e4:4c:da:cb:18:53:04:c4:60:c7:76:
68:54:ce:31:69:11:71:4a:b1:f4:36:89:3e:53:6f:08:09:9d:
85:16:5a:f6:8f:78:cf:51:18:bb:70:e0:49:94:53:7a:95:71:
1b:6b:e6:f9:21:c3:b0:af:24:a3:ca:0b:97:c7:29:0c:d1:2a:
d2:b6:5f:82:7a:bc:8b:e7:ba:76:44:09:10:48:a6:2d:81:e5:
29:8a:ad:33:09:28:5f:11:8d:db:a0:b5:dd:2a:db:a7:4d:d0:
b4:61:86:00:2b:6c:34:1f:33:b1:6e:6b:11:c3:70:21:7e:84:
8c:35:1f:b9:18:a9:6e:98:d3:02:8a:6c:a6:0c:1d:12:e5:03:
fa:52:dc:10:f1:3f:f8:aa:b6:03:ea:e1:89:a2:1c:c1:3f:24:
b7:1d:5f:a5:4f:3c:d8:52:79:7d:1e:b2:6f:ef:eb:03:91:66:
ff:fd:72:3b:07:47:9e:eb:89:f2:f3:9a:3b:26:e1:70:26:8a:
fe:58:4a:df:86:32:df:63:ec:9e:f2:9b:90:a5:e5:f5:9c:0c:
fb:b4:40:e0:11:2b:57:29:a3:f1:4e:20:9d:44:fc:00:c1:a3:
2e:3e:b5:3a
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 13 04:42:53 2024 by rpki-client on console-ams.rpki-client.org