Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3139302e302f32332d3233203d3e20323732393632.roa
File: 3130392e3131302e3139302e302f32332d3233203d3e20323732393632.roa (raw, json)
Hash identifier: R9O1SqeP3z2wV8s/cTC0dZJZm3pYONShV3BQ/xmW14U=
Subject key identifier: C4:BD:ED:8D:58:6C:E1:AE:8A:CD:DF:E6:7E:AF:5E:67:AC:44:E6:5C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 48C05B0E3E5A3179CD9219CE1299BE905CB25E44
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3139302e302f32332d3233203d3e20323732393632.roa
Signing time: Fri 23 Feb 2024 19:15:04 +0000
ROA not before: Fri 23 Feb 2024 19:10:04 +0000
ROA not after: Fri 21 Feb 2025 19:15:04 +0000
asID: 272962
IP address blocks: 109.110.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 14 Apr 2024 10:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:5b:0e:3e:5a:31:79:cd:92:19:ce:12:99:be:90:5c:b2:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 23 19:10:04 2024 GMT
Not After : Feb 21 19:15:04 2025 GMT
Subject: CN=C4BDED8D586CE1AE8ACDDFE67EAF5E67AC44E65C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:37:5b:55:62:73:cf:81:ba:fa:45:0f:e4:
b6:ac:a1:57:93:f8:ef:2a:3c:81:cd:72:94:29:21:
c2:44:8c:1d:1e:06:c9:9f:d4:e9:c7:61:ce:46:34:
68:e7:49:dc:8e:34:3a:1e:a5:e4:bb:36:bc:0d:ad:
78:d9:65:1d:6f:67:4d:92:a3:dd:ff:92:a8:31:18:
27:8e:48:5b:16:2b:2b:90:98:ef:51:25:51:43:17:
b9:cb:76:a8:26:28:17:35:27:eb:67:66:48:dd:95:
9a:62:0a:73:a8:82:82:37:7c:a7:1a:7a:ec:7a:c7:
44:10:f8:a6:ae:ae:e3:f1:58:d8:f5:85:7a:87:36:
05:e5:08:48:b9:e1:19:35:f5:26:5b:e9:36:7f:c4:
9e:83:eb:1d:78:ff:14:8f:11:2c:f8:6c:a1:dc:53:
ea:b2:6a:f1:70:dd:3f:dd:9c:ce:57:7c:ac:0c:ea:
df:62:ee:88:73:74:fe:58:a5:82:e1:c8:89:59:46:
12:91:82:a5:f0:30:1a:84:89:f2:fb:87:b6:50:04:
d4:b6:ab:ac:91:9c:ee:bb:be:55:59:78:8b:87:4d:
56:f5:1b:b2:86:6c:38:5d:ce:83:b8:da:00:af:aa:
e8:20:cf:9d:06:70:91:2b:58:01:a0:09:e9:09:64:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:ED:8D:58:6C:E1:AE:8A:CD:DF:E6:7E:AF:5E:67:AC:44:E6:5C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3139302e302f32332d3233203d3e20323732393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.190.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e3:dc:51:54:64:c0:77:8c:a0:6c:b5:e2:3c:a8:4e:eb:52:
fa:34:30:1b:a6:ba:20:fc:93:61:e4:4e:bb:81:ab:0e:96:06:
0c:de:87:45:d3:37:50:2f:d9:21:a7:6f:24:fd:04:c6:6a:e0:
78:3f:19:03:54:04:7e:16:f1:a1:05:9d:65:e1:32:80:59:f1:
0a:ba:05:93:78:70:40:36:56:a3:59:b1:c1:24:35:34:90:04:
2a:75:f5:dd:19:22:20:0a:18:57:69:c0:dd:f4:2f:f3:65:67:
8a:d1:50:95:c2:95:f4:a1:ef:00:6e:d6:71:1a:7f:29:2d:94:
90:f1:d7:46:0f:a7:d4:36:a2:94:3b:c1:10:04:0a:3a:f5:12:
e9:4f:57:bd:76:08:57:b7:2f:3a:cf:51:65:f1:b3:ef:38:0c:
8d:78:79:23:13:5d:96:04:83:3c:4d:dc:f1:c2:40:bf:a9:df:
f9:13:0b:15:eb:cc:a0:c6:62:a3:93:9b:95:8d:6b:72:01:b7:
29:5e:06:09:76:e5:d7:b6:33:16:33:92:19:08:60:49:73:3b:
bb:36:7c:d9:8d:45:ca:4c:74:b2:77:80:5e:9e:6e:90:5b:05:
38:3a:b6:46:91:41:7c:0c:c5:c7:53:14:5f:a9:1b:52:31:cb:
0d:5b:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:34 2025 by rpki-client