Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3232303a3a2f34342d3438203d3e20323037383432.roa
File: 326130663a383563313a3232303a3a2f34342d3438203d3e20323037383432.roa (raw, json)
Hash identifier: ZlzO4h4w9cY0qZeFj4xQ48tNkjfu4u4RiiBH3TNQhe0=
Subject key identifier: C2:9D:DE:A4:6D:EB:C9:A7:B0:4D:EB:A1:53:AC:D7:BE:61:79:00:3C
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 62AE15507E52A56BA11C9221512BD694086B9DF9
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3232303a3a2f34342d3438203d3e20323037383432.roa
Signing time: Tue 10 Oct 2023 15:17:42 +0000
ROA not before: Tue 10 Oct 2023 15:12:42 +0000
ROA not after: Tue 08 Oct 2024 15:17:42 +0000
asID: 207842
IP address blocks: 2a0f:85c1:220::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ae:15:50:7e:52:a5:6b:a1:1c:92:21:51:2b:d6:94:08:6b:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:12:42 2023 GMT
Not After : Oct 8 15:17:42 2024 GMT
Subject: CN=C29DDEA46DEBC9A7B04DEBA153ACD7BE6179003C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:ff:31:6e:57:c2:50:8f:0e:75:fc:ed:bf:
3b:16:d7:58:05:11:7b:fd:90:b9:8f:2e:5a:7a:c5:
57:7d:ca:39:30:eb:e4:9c:4a:e5:5b:db:7c:f7:e0:
40:c7:90:69:1d:46:98:32:77:26:05:a2:d2:97:05:
45:07:cf:c3:fc:91:76:59:6f:33:09:a9:15:fb:39:
81:2e:4c:ce:5b:e4:2f:9b:c7:fa:91:11:4f:69:c8:
ba:cc:4d:98:d5:2a:ac:57:5b:2a:c2:ad:b9:79:56:
48:46:7e:4a:74:4a:95:e3:e3:f3:6f:7b:3f:9c:d4:
fa:db:2b:bf:74:19:43:c4:24:da:fa:aa:4d:fd:1a:
6e:4a:08:8e:7e:eb:5a:01:9b:d4:e6:65:08:cf:87:
e6:5d:77:99:3f:a6:55:44:00:22:e0:d2:3a:f6:99:
de:88:84:9e:48:3b:1b:8d:a3:be:8a:5b:b4:1c:31:
5a:95:09:ae:22:a9:02:03:60:c9:ac:ca:48:1b:c7:
78:7a:13:6a:f9:fd:f9:1a:f4:65:35:c6:26:f0:c0:
40:14:32:ff:bf:b6:af:cc:b7:e3:e8:ee:63:75:41:
ff:e0:dd:af:0e:63:05:8d:22:72:45:40:7b:68:1e:
d5:15:c5:2f:b6:c2:8f:a7:5e:f5:a1:b2:a1:e8:b0:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:DE:A4:6D:EB:C9:A7:B0:4D:EB:A1:53:AC:D7:BE:61:79:00:3C
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3232303a3a2f34342d3438203d3e20323037383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:220::/44
Signature Algorithm: sha256WithRSAEncryption
06:46:02:f2:70:e5:2d:a0:33:2a:91:b0:47:2b:6b:07:41:54:
75:83:dc:14:46:12:2c:5b:2f:49:19:5f:61:a3:38:2f:62:03:
ff:79:83:57:6d:cc:da:4f:bf:19:51:64:26:bf:37:4b:02:a1:
f0:d8:c1:f6:f7:ac:6d:16:f8:b8:43:f9:be:00:7e:69:cb:12:
7f:98:a0:c7:f9:d6:0e:37:b0:72:99:0b:62:fe:a4:c1:eb:8e:
5f:d9:07:04:a3:a2:25:ab:42:43:6b:16:10:0a:7d:ac:a1:5a:
b9:d6:24:20:6c:9a:80:4a:21:94:5c:7f:21:f8:79:e0:1f:56:
d2:d1:ab:cc:1c:55:a9:0b:34:1e:2b:50:ab:36:64:c2:92:9a:
69:82:4f:47:e6:3c:33:fb:88:57:f3:b5:a1:27:25:90:97:0a:
8e:10:eb:95:0c:46:f5:0a:1c:6f:47:b3:07:52:c0:ce:87:03:
b2:b6:b5:30:cc:ac:31:a7:78:fe:dc:e3:74:6d:b4:ad:b4:d0:
6b:3c:1c:70:6f:db:2a:14:df:19:8d:c9:89:45:9e:bb:f0:8e:
a4:3b:87:c9:75:b4:97:c4:9c:c6:41:2e:11:d0:77:ed:e7:14:
88:4c:4c:d3:1e:1b:09:ad:65:da:65:c2:59:8f:4d:cf:90:8d:
2f:23:34:89
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUYq4VUH5SpWuhHJIhUSvWlAhrnfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTEyNDJaFw0yNDEwMDgxNTE3NDJaMDMxMTAvBgNV
BAMTKEMyOURERUE0NkRFQkM5QTdCMDRERUJBMTUzQUNEN0JFNjE3OTAwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Of8xblfCUI8OdfztvzsW11gF
EXv9kLmPLlp6xVd9yjkw6+ScSuVb23z34EDHkGkdRpgydyYFotKXBUUHz8P8kXZZ
bzMJqRX7OYEuTM5b5C+bx/qREU9pyLrMTZjVKqxXWyrCrbl5VkhGfkp0SpXj4/Nv
ez+c1PrbK790GUPEJNr6qk39Gm5KCI5+61oBm9TmZQjPh+Zdd5k/plVEACLg0jr2
md6IhJ5IOxuNo76KW7QcMVqVCa4iqQIDYMmsykgbx3h6E2r5/fka9GU1xibwwEAU
Mv+/tq/Mt+Po7mN1Qf/g3a8OYwWNInJFQHtoHtUVxS+2wo+nXvWhsqHosJ0LAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUwp3epG3ryaewTeuhU6zXvmF5ADwwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMjMyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzczODM0MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqD4XBAiAwDQYJKoZIhvcNAQELBQADggEBAAZGAvJw5S2gMyqRsEcr
awdBVHWD3BRGEixbL0kZX2GjOC9iA/95g1dtzNpPvxlRZCa/N0sCofDYwfb3rG0W
+LhD+b4AfmnLEn+YoMf51g43sHKZC2L+pMHrjl/ZBwSjoiWrQkNrFhAKfayhWrnW
JCBsmoBKIZRcfyH4eeAfVtLRq8wcVakLNB4rUKs2ZMKSmmmCT0fmPDP7iFfztaEn
JZCXCo4Q65UMRvUKHG9HswdSwM6HA7K2tTDMrDGneP7c43RttK200Gs8HHBv2yoU
3xmNyYlFnrvwjqQ7h8l1tJfEnMZBLhHQd+3nFIhMTNMeGwmtZdplwlmPTc+QjS8j
NIk=
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org