Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20343030383636.roa
File: 3130392e3131302e3138382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: ITm2adnnJCAuOV3VJVAlJCpFpzP7z73arpIDm8Eru34=
Subject key identifier: 64:2F:C9:FA:D4:C5:7F:BB:36:46:E4:2F:9E:9F:68:81:7A:85:60:DA
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1EFE8386A9619811F0E9BD4922AD6952117E3C47
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20343030383636.roa
Signing time: Tue 11 Jun 2024 09:54:33 +0000
ROA not before: Tue 11 Jun 2024 09:49:33 +0000
ROA not after: Tue 10 Jun 2025 09:54:33 +0000
asID: 400866
IP address blocks: 109.110.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fe:83:86:a9:61:98:11:f0:e9:bd:49:22:ad:69:52:11:7e:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 11 09:49:33 2024 GMT
Not After : Jun 10 09:54:33 2025 GMT
Subject: CN=642FC9FAD4C57FBB3646E42F9E9F68817A8560DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:54:0e:89:da:3d:7c:69:ff:09:75:f5:71:
a2:24:34:f6:7a:63:3d:f4:4f:05:a4:bb:5c:e3:4b:
b1:a1:90:5a:d9:74:8f:d8:9b:c0:03:ac:ac:38:8e:
76:fa:ff:38:69:13:e8:ed:eb:d4:2f:95:d9:b9:4c:
37:b2:e5:e4:a9:f5:09:c9:43:91:f2:29:68:3c:35:
aa:f1:ef:a0:38:a4:9e:4d:12:11:10:d5:45:34:89:
a8:25:19:49:ef:c2:e3:53:12:2a:7d:b3:c5:81:c7:
e8:91:0e:a5:12:a4:2f:e4:da:98:88:d8:13:a7:c0:
17:91:44:64:84:65:e9:2b:5d:af:82:6e:b9:0d:7c:
f9:aa:81:c3:43:53:1a:81:33:14:ec:a8:e3:f9:8c:
0d:41:c4:6d:8f:38:c4:ac:db:d1:c6:17:59:c7:58:
eb:a8:e2:33:96:6a:c3:f8:cd:9c:ac:03:33:cb:8d:
43:79:da:51:60:5d:5e:fb:68:08:c0:71:c9:98:69:
41:d4:de:f2:f4:17:0d:d2:29:8b:92:eb:a0:86:af:
33:80:7b:c2:0d:a0:1d:e8:a7:25:e7:16:a1:15:d9:
9f:b3:93:18:48:90:ea:58:ac:ab:98:f5:7b:dc:0f:
85:b1:cf:ac:10:76:c4:3a:be:88:52:27:71:15:81:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:C9:FA:D4:C5:7F:BB:36:46:E4:2F:9E:9F:68:81:7A:85:60:DA
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b0:6f:09:82:d0:4e:73:1c:b7:5c:2b:e0:fb:f5:71:8b:b0:
b5:22:98:1d:12:1c:a2:30:43:a6:43:16:a3:98:13:fb:3c:a8:
87:2e:51:30:13:c4:f4:cb:be:aa:2a:88:2c:93:7f:29:7b:f6:
45:21:91:23:a5:d0:7d:a2:94:43:b6:ce:ed:9e:3a:43:b7:41:
a2:a6:89:90:01:8b:49:76:11:1d:90:8c:69:74:68:61:75:08:
53:25:e2:0a:4e:41:07:25:56:24:8c:98:86:b7:fe:d4:b7:f2:
f7:de:26:4f:80:db:40:ef:dd:bd:c7:ea:ff:83:17:3c:c6:6c:
e1:b2:01:d0:fd:26:6c:08:e2:e0:28:db:be:c9:46:34:e1:f4:
93:1e:a0:06:25:de:5e:2a:2f:b8:e7:cc:f3:dd:21:c6:5c:60:
9f:fb:ae:77:11:5e:c8:9e:17:92:85:a8:bf:b5:29:d4:50:59:
95:48:c3:b8:46:6f:df:e9:ed:64:17:3e:f2:dd:c6:c3:3a:79:
b4:61:99:25:4f:0b:87:88:fc:54:88:63:84:cd:dd:ea:8a:e9:
14:b2:a2:a5:90:96:d6:be:51:6e:71:75:14:c8:61:7e:a6:33:
b6:b8:f5:f8:8e:a3:23:00:69:05:c3:0b:54:14:42:ff:9f:eb:
8a:70:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 01:30:08 2024 by rpki-client on console-ams.rpki-client.org