Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: q43hUx+fOS791+ENciHbtQMAkX6v4f8OhNbkjqJ2sFI=
Subject key identifier: 0D:A7:15:7E:E8:AF:CE:10:57:21:35:F9:94:5E:DA:C4:F1:CD:35:ED
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 609CB6D9592FFCC3F76141BA9116C80F2436C7FD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:26:53 +0000
ROA not before: Thu 11 Jul 2024 09:21:53 +0000
ROA not after: Thu 10 Jul 2025 09:26:53 +0000
asID: 834
IP address blocks: 109.110.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 14:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9c:b6:d9:59:2f:fc:c3:f7:61:41:ba:91:16:c8:0f:24:36:c7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 11 09:21:53 2024 GMT
Not After : Jul 10 09:26:53 2025 GMT
Subject: CN=0DA7157EE8AFCE10572135F9945EDAC4F1CD35ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:0f:28:5e:e5:b1:33:3b:be:7d:1d:14:85:
0f:ef:a3:2c:98:e5:91:bf:50:35:0f:f2:78:17:a3:
c7:0e:29:95:82:47:d2:a7:55:7c:60:38:99:9e:58:
ec:73:89:f5:ee:80:fe:0d:70:fb:d7:f2:36:fc:12:
d6:17:e5:57:d1:d5:d8:b7:46:8d:58:4d:fa:1e:3c:
9d:6d:84:ac:26:e7:b4:b0:82:de:a2:21:77:3f:b0:
97:ba:59:6f:2c:85:dc:c6:d0:d4:1f:dc:f1:b2:34:
a1:23:77:4e:cd:68:99:44:65:ce:ce:29:e5:42:e2:
0e:c4:d4:8c:2a:aa:1e:2d:21:7c:4f:8b:23:70:fd:
59:69:79:a1:f0:e5:10:73:48:43:ee:89:d9:15:77:
a1:30:19:d8:45:39:13:44:a6:cb:80:4c:e7:20:a4:
c9:5f:a7:bc:14:06:52:88:c0:db:3f:07:bb:a4:24:
35:64:61:66:c0:4e:69:a5:9a:b8:48:c6:74:aa:b7:
22:c5:f2:c4:92:16:d6:4b:5d:86:00:20:7b:33:7b:
77:f1:43:bb:f7:31:98:b8:f6:cc:a3:1f:72:ee:c2:
98:03:4b:6f:71:69:23:81:17:b3:6b:30:49:82:9b:
88:03:a3:b4:c6:46:b3:f4:92:49:60:90:5c:b8:1f:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:15:7E:E8:AF:CE:10:57:21:35:F9:94:5E:DA:C4:F1:CD:35:ED
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:36:6a:fa:6b:c1:81:25:06:32:8c:45:39:28:90:b9:ef:cf:
5a:89:3f:98:84:e4:42:10:e3:ac:45:c0:58:9f:04:ba:a6:31:
1d:0e:1e:b5:b9:70:3b:de:0c:d5:8d:6b:7b:bc:6f:15:78:8a:
5f:b3:5e:8c:f2:01:d8:e2:28:e4:75:b1:4a:7b:e7:88:a6:82:
fe:72:6d:66:a5:b6:fe:45:e6:2a:ac:da:70:1f:fe:a7:d4:6c:
71:22:07:4c:38:a2:d6:7c:b8:e3:35:06:53:70:95:db:33:98:
de:f1:fc:d9:cd:76:89:8a:06:89:0c:31:df:3c:9b:aa:d3:35:
95:d9:89:19:f6:a6:fa:9c:2a:e4:53:43:38:45:d5:ec:6b:11:
c7:cd:68:39:f6:68:f2:ec:b1:51:01:fc:f0:83:c3:91:ec:e0:
d1:ae:45:ce:9a:0b:12:0a:0d:ec:cc:cc:c5:9a:3c:3c:1d:b3:
70:06:5e:74:33:45:dd:88:1d:f3:e0:44:54:f7:52:5f:f9:10:
37:a4:6a:e3:3d:c1:6c:98:b8:a2:26:67:90:bf:41:ea:9f:1a:
34:8f:5d:d4:1f:af:7e:11:6e:67:87:df:65:83:27:fe:a2:18:
d1:57:40:24:b5:e3:d8:22:30:8a:8c:2f:69:cf:99:02:f7:8e:
13:58:a7:96
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 11 16:30:17 2024 by rpki-client on console-fra.rpki-client.org