Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20323135353339.roa
File: 3130392e3131302e3138382e302f32342d3234203d3e20323135353339.roa (raw, json)
Hash identifier: 1e4xzvHmyedngZh9snW2hAbILHrxZeuy5fx1SzjCT58=
Subject key identifier: FD:F8:C8:F2:57:80:DD:4C:A7:90:6D:67:44:D0:04:1F:80:3C:1D:50
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 68DEF6D796C4A4786E682ACC8C53D54431DC8994
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20323135353339.roa
Signing time: Wed 21 Feb 2024 09:32:39 +0000
ROA not before: Wed 21 Feb 2024 09:27:39 +0000
ROA not after: Wed 19 Feb 2025 09:32:39 +0000
asID: 215539
IP address blocks: 109.110.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:de:f6:d7:96:c4:a4:78:6e:68:2a:cc:8c:53:d5:44:31:dc:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 21 09:27:39 2024 GMT
Not After : Feb 19 09:32:39 2025 GMT
Subject: CN=FDF8C8F25780DD4CA7906D6744D0041F803C1D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:c9:d0:a2:24:aa:73:a4:f9:8f:3f:39:d1:
2e:ed:22:ba:4e:ae:74:7e:54:cd:b2:79:28:33:b2:
dc:04:bf:2b:75:31:7e:e9:1b:e6:ef:d8:cd:f3:b3:
e5:86:31:d0:d8:60:68:03:8c:45:d1:07:18:9f:97:
33:8b:88:d3:8c:bc:e2:c0:a2:bf:d4:60:ae:01:89:
0f:84:97:44:ed:e4:e4:e7:8d:7f:f7:25:9a:52:d7:
c7:fb:70:0c:d7:94:6d:b2:57:39:77:d3:27:0f:ea:
7d:c0:56:ee:6a:25:a8:e9:44:a7:1f:20:2c:96:f3:
eb:88:1f:8a:6d:af:fc:f5:7a:89:38:7a:52:02:87:
7d:f2:30:d3:92:7a:7d:0e:8a:c7:6a:4a:86:f2:75:
54:75:77:15:d1:c2:ef:40:75:2b:ed:17:af:2d:d1:
82:f5:52:f1:1b:f4:1d:dc:ff:76:66:08:5c:09:0d:
19:e6:42:58:72:83:02:04:ff:11:97:3e:86:32:ee:
23:d3:77:99:ce:16:da:c6:63:49:45:76:fb:2f:65:
5b:95:d0:57:de:1f:93:7a:34:86:e5:57:8e:29:9f:
3f:3e:eb:f3:66:08:dc:2a:11:0e:2a:bc:19:87:e3:
3e:33:19:e2:6b:78:21:b5:21:08:9c:ca:48:1b:f2:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:C8:F2:57:80:DD:4C:A7:90:6D:67:44:D0:04:1F:80:3C:1D:50
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20323135353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ea:58:7a:b0:92:58:f2:1c:b7:e9:56:51:6c:bc:e6:0e:06:
89:a4:29:10:d3:46:46:05:0a:90:41:2f:f7:9c:4e:07:cd:15:
c8:08:b4:74:a3:de:23:04:e1:5a:10:fa:e1:ff:41:e1:fe:b1:
12:cb:7f:11:c1:1d:69:ab:22:be:50:c1:16:5b:aa:e2:82:c8:
0f:7d:1e:32:3f:a1:e7:7d:fc:98:11:17:d2:0f:5a:7d:11:3d:
01:d1:41:9b:95:32:e2:1c:3a:c8:11:3e:a5:9b:62:90:20:5e:
a2:37:41:23:ec:33:ee:13:88:50:96:bb:d1:24:f3:8d:80:20:
f8:96:d8:33:de:a0:96:18:5d:89:21:0e:da:a1:d0:ad:49:6b:
10:53:85:d0:f5:83:29:6c:f0:6e:62:08:b7:c0:cb:ee:e5:6e:
93:e9:75:3a:8d:7d:2e:32:5e:aa:17:c0:f6:db:61:0d:d7:ab:
d7:76:76:1b:00:c3:fc:7e:5c:6a:61:0c:57:e3:a7:59:0d:34:
8e:df:39:24:b5:fd:87:e1:bc:ad:6c:80:bf:f1:e8:70:6a:62:
64:12:df:51:f2:c5:31:f5:bf:f0:96:b0:1b:e1:6c:88:0a:43:
b1:f2:44:fb:02:54:22:7c:9a:7f:f4:be:dc:f5:9d:8d:24:dc:
2b:ba:f3:3a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUaN7215bEpHhuaCrMjFPVRDHciZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDAyMjEwOTI3MzlaFw0yNTAyMTkwOTMyMzlaMDMxMTAvBgNV
BAMTKEZERjhDOEYyNTc4MERENENBNzkwNkQ2NzQ0RDAwNDFGODAzQzFENTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnMnQoiSqc6T5jz850S7tIrpO
rnR+VM2yeSgzstwEvyt1MX7pG+bv2M3zs+WGMdDYYGgDjEXRBxiflzOLiNOMvOLA
or/UYK4BiQ+El0Tt5OTnjX/3JZpS18f7cAzXlG2yVzl30ycP6n3AVu5qJajpRKcf
ICyW8+uIH4ptr/z1eok4elICh33yMNOSen0OisdqSobydVR1dxXRwu9AdSvtF68t
0YL1UvEb9B3c/3ZmCFwJDRnmQlhygwIE/xGXPoYy7iPTd5nOFtrGY0lFdvsvZVuV
0FfeH5N6NIblV44pnz8+6/NmCNwqEQ4qvBmH4z4zGeJreCG1IQicykgb8p27AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU/fjI8leA3UynkG1nRNAEH4A8HVAwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM1MzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1uvDANBgkqhkiG9w0BAQsFAAOCAQEAG+pYerCSWPIct+lWUWy85g4GiaQp
ENNGRgUKkEEv95xOB80VyAi0dKPeIwThWhD64f9B4f6xEst/EcEdaasivlDBFluq
4oLID30eMj+h5338mBEX0g9afRE9AdFBm5Uy4hw6yBE+pZtikCBeojdBI+wz7hOI
UJa70STzjYAg+JbYM96glhhdiSEO2qHQrUlrEFOF0PWDKWzwbmIIt8DL7uVuk+l1
Oo19LjJeqhfA9tthDder13Z2GwDD/H5camEMV+OnWQ00jt85JLX9h+G8rWyAv/Ho
cGpiZBLfUfLFMfW/8JawG+FsiApDsfJE+wJUInyaf/S+3PWdjSTcK7rzOg==
Generated at Fri Mar 22 11:20:17 2024 by rpki-client on console-fra.rpki-client.org