Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cEYqNPkpdbt+FgIA+eHykqeaXBTxXgIkSZpdZYZ1gF4=
Subject key identifier: 7C:39:5A:87:09:D1:C1:30:8D:C3:B8:E2:AE:1C:07:A8:8C:CD:BB:56
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2FF7D428B0217462606FB5BA668A76A34BA938BA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
Signing time: Fri 22 Mar 2024 10:05:22 +0000
ROA not before: Fri 22 Mar 2024 10:00:22 +0000
ROA not after: Fri 21 Mar 2025 10:05:22 +0000
asID: 834
IP address blocks: 109.110.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 17:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f7:d4:28:b0:21:74:62:60:6f:b5:ba:66:8a:76:a3:4b:a9:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 22 10:00:22 2024 GMT
Not After : Mar 21 10:05:22 2025 GMT
Subject: CN=7C395A8709D1C1308DC3B8E2AE1C07A88CCDBB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:44:24:8f:7c:bf:e9:69:1d:11:18:b6:ab:
a2:bc:38:9d:dc:98:76:55:d9:6d:53:ee:00:92:fd:
a4:5c:e3:c4:62:64:4a:aa:f5:7f:2d:04:03:07:f9:
14:b2:81:f3:80:22:74:df:26:f2:05:29:c2:db:29:
2c:70:a7:91:3d:80:0b:7d:5b:f2:7c:a3:24:78:87:
97:fb:b3:b3:a6:fb:31:54:7c:a2:67:cd:ae:f3:b2:
38:78:bf:bb:c1:2c:03:6b:b3:2c:2d:27:5a:f7:d1:
92:f7:11:fd:8a:e3:fd:90:31:ed:3b:04:87:e8:0f:
b5:a3:79:24:a8:ae:5d:59:91:f8:de:8e:f8:f6:5b:
24:d1:83:7d:dd:2e:51:ce:68:a5:ed:db:18:1e:24:
18:16:0e:28:c1:63:c1:9a:46:95:1a:77:27:74:3a:
de:96:6d:77:f9:ad:b6:0a:1b:b9:99:bb:81:78:02:
1d:06:0f:9b:6d:6a:06:a7:2f:84:e2:0b:d7:14:1d:
61:8f:98:d8:bd:b9:a3:25:df:a1:f6:06:c8:7d:87:
71:4d:4b:11:49:50:ac:eb:bd:0a:f5:51:63:25:fa:
f1:70:5c:0e:3e:3d:81:ec:aa:c0:91:ee:1b:6f:45:
41:4c:ed:54:89:ce:ab:92:71:de:bf:d9:bf:e3:58:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:5A:87:09:D1:C1:30:8D:C3:B8:E2:AE:1C:07:A8:8C:CD:BB:56
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:40:1a:20:2b:c6:14:b6:91:51:c1:25:85:68:77:27:ce:01:
4c:95:c4:6a:2b:3d:ca:c7:c7:b2:88:92:15:6a:0f:a7:78:02:
74:62:53:9a:17:ac:59:82:a0:18:21:2b:e7:ee:bf:eb:17:1c:
a3:57:80:30:7e:da:10:f3:f3:67:4c:04:11:74:a4:6d:3e:28:
24:8f:a8:a8:d8:f5:92:43:cb:2c:7a:3f:5e:7d:66:9b:98:8d:
8a:ff:7e:97:12:5b:9d:e4:72:8c:3d:ef:5d:05:aa:63:24:57:
25:6f:5b:6f:5b:68:af:f3:28:01:e0:54:5b:fb:80:8b:a7:b7:
ed:2d:b8:d9:0c:ce:b1:28:69:fa:7d:4c:d5:98:09:04:e1:00:
27:f6:48:1f:52:cf:8b:a4:36:14:67:c4:01:c4:e3:2f:d0:fb:
83:e0:5f:ed:da:4c:9f:19:9e:52:30:94:c8:d4:18:47:6c:31:
cf:8f:a8:f6:93:84:31:5b:14:42:f5:89:64:9d:7b:e3:0a:b1:
0f:7e:6e:1b:3f:d1:31:82:29:d3:a6:36:2b:02:b7:10:c0:4b:
ab:39:1a:0f:97:10:fe:ab:15:28:32:19:ef:c8:09:84:51:be:
18:a5:da:2e:25:d6:7c:5a:79:15:37:b8:a2:f7:3c:24:ce:e6:
49:03:6b:75
-----BEGIN CERTIFICATE-----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Generated at Wed Apr 3 22:21:55 2024 by rpki-client on console-ams.rpki-client.org