Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231313a3a2f34382d3438203d3e20323032323339.roa
File: 326130663a383563313a3231313a3a2f34382d3438203d3e20323032323339.roa (raw, json)
Hash identifier: 7FCZFycC9qBGf2v5BOwtUeoWeEV+N1hNhaba31N/VnI=
Subject key identifier: B1:DE:26:99:A8:32:27:FE:00:32:AC:D8:28:A0:D7:C9:36:C8:7F:1B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 29827A0998EF5B572FD5B8DAEFAA4E2C4E61586C
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231313a3a2f34382d3438203d3e20323032323339.roa
Signing time: Tue 10 Oct 2023 15:14:16 +0000
ROA not before: Tue 10 Oct 2023 15:09:16 +0000
ROA not after: Tue 08 Oct 2024 15:14:16 +0000
asID: 202239
IP address blocks: 2a0f:85c1:211::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:82:7a:09:98:ef:5b:57:2f:d5:b8:da:ef:aa:4e:2c:4e:61:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:09:16 2023 GMT
Not After : Oct 8 15:14:16 2024 GMT
Subject: CN=B1DE2699A83227FE0032ACD828A0D7C936C87F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:ed:0d:df:a9:99:9c:32:14:02:f6:e0:fb:
61:21:35:7a:78:88:a7:37:79:e6:13:2d:2a:08:9d:
09:3f:22:c1:81:9a:53:e6:60:7f:89:a9:2f:f2:c2:
e1:cd:07:ca:db:ee:32:c7:0c:7d:31:8d:f3:a5:bd:
2d:b5:bd:c7:fa:14:a6:e8:ea:f7:0e:63:4a:26:4b:
54:2f:e9:6a:7d:a0:29:d9:83:35:f5:d8:c5:95:56:
e2:41:bb:98:a7:95:79:82:e4:3e:7e:ec:84:17:a8:
de:01:2d:c1:ca:86:9e:c8:91:be:92:0a:33:83:4b:
61:e3:43:dd:9d:6a:32:f0:91:eb:05:cb:42:08:29:
be:e2:70:28:33:5a:aa:d8:e0:8a:2d:2d:12:c6:12:
0c:2c:a1:33:5e:51:2c:cd:5f:be:4c:03:28:63:8b:
76:60:6b:53:bb:c7:57:b3:e0:a8:ba:ce:f0:5c:68:
53:6c:0e:32:cc:b0:42:18:19:10:68:0f:8f:e7:b2:
a2:cc:33:2d:e9:4e:5a:bc:86:ad:2c:6e:5e:31:3d:
89:e7:b4:47:4a:40:51:1c:81:61:5f:75:19:71:bc:
b3:79:e2:71:ba:a4:66:fe:63:bc:01:0e:80:5a:b1:
08:48:ae:71:95:de:79:d6:92:3e:59:45:2e:79:f5:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:26:99:A8:32:27:FE:00:32:AC:D8:28:A0:D7:C9:36:C8:7F:1B
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3231313a3a2f34382d3438203d3e20323032323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:211::/48
Signature Algorithm: sha256WithRSAEncryption
66:db:d3:fa:ad:02:3d:c1:52:3a:98:55:60:87:d6:a2:99:16:
bb:ee:d9:1a:7f:9e:11:da:d4:be:bb:26:0c:bd:6b:e1:ec:b3:
49:4e:df:07:31:84:96:2f:d9:5d:98:43:be:a3:dc:d8:62:e6:
6c:53:d3:20:3a:65:9c:ec:4d:79:38:96:fe:9f:2b:b6:90:0a:
55:f9:62:08:19:60:0e:29:f9:4e:c2:2e:a6:55:6e:2a:77:e8:
5f:b1:9b:b3:76:40:4b:d6:dd:c5:6e:65:5c:d0:78:5f:cc:c4:
3b:4c:8e:44:95:00:c2:82:10:e8:5f:e8:5a:b7:89:43:f8:4f:
ea:da:50:86:63:f3:a4:4b:e7:e1:0b:bb:ec:79:d3:4c:cb:c3:
f7:f2:84:70:b6:ac:53:86:45:7c:85:d3:07:ab:4a:c2:12:96:
1f:09:d2:ba:0d:76:28:9a:25:1e:83:96:e2:54:44:46:28:ad:
ff:e2:ba:19:76:be:f6:dc:e3:7d:5d:48:39:66:49:c3:fe:67:
28:70:e3:a1:3e:4f:92:2b:6e:f9:0a:f3:27:f8:e9:47:28:fd:
f3:c0:a3:9e:e6:0b:c8:8a:13:d8:d2:37:29:4d:94:fa:b9:ed:
f6:6c:71:29:8b:9c:32:c2:58:50:c7:7b:94:50:08:09:32:7a:
1d:cb:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org