Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e2032393134.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: bf7nKqOL7QJ/speLJUW/BYoZs1xczVrxnexJYwOu5eo=
Subject key identifier: 42:93:F6:4D:FB:96:18:3C:7E:71:17:9A:31:C9:29:EF:6B:82:FF:42
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 767A6EF60722A7A7F9BD8B598DBFD4498D537E1C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e2032393134.roa
Signing time: Wed 12 Feb 2025 12:53:55 +0000
ROA not before: Wed 12 Feb 2025 12:48:55 +0000
ROA not after: Wed 11 Feb 2026 12:53:55 +0000
asID: 2914
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7a:6e:f6:07:22:a7:a7:f9:bd:8b:59:8d:bf:d4:49:8d:53:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 12 12:48:55 2025 GMT
Not After : Feb 11 12:53:55 2026 GMT
Subject: CN=4293F64DFB96183C7E71179A31C929EF6B82FF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:ed:d0:e8:54:fb:26:06:54:30:f1:b5:47:
5f:2e:df:81:b3:05:79:6a:73:85:08:cd:0f:f2:9a:
29:01:8b:c2:c4:ef:21:99:53:e2:46:3d:98:49:a0:
35:be:fa:5f:8c:5e:08:5b:41:8e:e0:26:d2:3b:38:
9f:6c:ee:e1:fe:73:65:d5:c4:2d:c3:08:b4:0e:ec:
78:a5:90:8f:d7:f7:bf:ae:26:b4:40:0c:9a:aa:21:
76:24:01:b4:b4:7e:59:fc:a4:2b:68:0d:4b:45:ac:
ac:6c:6e:7c:ed:c6:62:6b:49:f2:54:92:e9:a7:78:
a9:fd:94:86:ba:d2:91:d3:08:01:28:bb:8f:49:ff:
f3:bb:86:08:a0:9d:22:c5:64:75:c3:cc:4a:93:eb:
bf:b6:5a:f0:6a:9e:e7:e4:55:41:f1:30:28:e5:11:
07:1e:ba:90:1c:2d:da:11:c9:f9:d7:53:e1:41:ee:
fd:da:42:24:a9:36:e1:56:d6:a2:b3:36:b0:32:a8:
39:a2:52:bb:ea:af:ed:a9:45:44:3b:1a:c7:88:bd:
7f:70:0b:b8:f4:77:35:40:55:4c:08:7e:c7:c4:e6:
7a:7e:a9:9d:03:0d:3a:32:10:fb:c0:a6:24:38:9d:
5e:8a:e7:7c:95:91:24:d0:12:38:c1:d0:c2:67:46:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:F6:4D:FB:96:18:3C:7E:71:17:9A:31:C9:29:EF:6B:82:FF:42
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1c:f3:cf:b2:93:03:5e:7f:2a:2b:7c:63:2c:04:ef:ce:75:
29:d6:9b:0d:1c:16:95:dd:1f:ce:e2:fe:d5:b5:e1:c1:fc:8c:
bf:a7:88:2d:33:c0:e5:2f:06:31:30:df:47:ac:46:77:a7:42:
be:25:ee:8b:a2:8f:75:f8:af:46:3d:3d:0e:ba:8e:a7:b1:de:
c6:83:01:1f:bc:06:86:28:22:f0:34:87:40:19:d0:83:73:78:
4f:aa:5d:1e:cc:fa:7c:b1:f7:27:ac:1d:2f:08:7a:d2:de:74:
d2:5c:8e:a6:47:e8:ff:8d:29:0e:77:f4:1c:71:a6:22:56:06:
c3:a8:d0:a4:27:d6:d2:57:7c:04:23:c4:be:19:b2:16:3e:43:
df:84:20:60:d7:62:34:7e:f6:c2:52:56:71:4f:aa:a4:bf:d6:
fd:c4:30:b0:32:41:40:22:83:a3:a8:93:e6:f1:c9:27:2c:80:
86:1a:64:fd:86:db:5c:eb:ff:b7:4d:18:bc:c0:42:0b:47:84:
6a:98:4d:20:5d:43:d5:c0:33:71:e6:24:ff:3f:3d:7a:d3:c9:
6a:2a:91:f4:e4:c3:ff:70:f5:73:2d:a1:d1:09:2b:c4:ee:ee:
0a:ce:ce:d9:28:bb:ef:25:d1:33:aa:75:5e:ea:6c:40:93:07:
d4:9d:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:22 2025 by rpki-client