Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3239383a3a2f34382d3438203d3e20323135393933.roa
File: 326130663a383563313a3239383a3a2f34382d3438203d3e20323135393933.roa (raw, json)
Hash identifier: QSr91T3+A5sFDhWOIaG9VMqimG7AqeQQXiKpSRMjNGY=
Subject key identifier: 20:5A:4D:36:4A:3C:3A:7A:D0:4D:1F:A6:1E:1F:D5:0A:54:FD:3E:DD
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2002B2AC493F0A07D31D3AD12E081158895E59DB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3239383a3a2f34382d3438203d3e20323135393933.roa
Signing time: Tue 23 Jan 2024 18:19:15 +0000
ROA not before: Tue 23 Jan 2024 18:14:15 +0000
ROA not after: Tue 21 Jan 2025 18:19:15 +0000
asID: 215993
IP address blocks: 2a0f:85c1:298::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:02:b2:ac:49:3f:0a:07:d3:1d:3a:d1:2e:08:11:58:89:5e:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jan 23 18:14:15 2024 GMT
Not After : Jan 21 18:19:15 2025 GMT
Subject: CN=205A4D364A3C3A7AD04D1FA61E1FD50A54FD3EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:02:8d:7f:6f:2f:ad:d0:e5:90:57:de:ee:
d7:3c:c0:94:d3:10:88:a3:77:79:24:2a:14:4c:29:
a9:e4:83:dd:1e:1b:de:85:04:6d:53:19:24:1c:71:
a6:52:2c:b0:b6:d3:31:e2:f3:10:98:10:63:bb:9d:
8a:8e:05:3a:1c:b5:c4:a7:a6:24:e9:f2:df:80:56:
ac:a5:60:73:71:e9:ff:bf:70:9f:46:db:bf:57:e3:
d7:f5:60:1c:6d:99:0a:ab:81:35:57:3c:dc:24:89:
76:ba:cc:2a:54:02:64:7c:c2:a5:1c:26:c4:15:2e:
83:0d:a9:95:29:cc:24:0e:f5:ef:45:28:40:dd:7e:
c2:63:14:0c:e2:5d:d3:99:0f:73:78:61:22:59:74:
f7:44:58:c3:6d:9f:89:b6:e7:09:7b:10:6f:43:e9:
bc:27:9b:63:ac:55:4f:f1:57:3c:9b:1e:1b:46:6d:
83:85:48:2b:56:a7:2c:6d:29:f1:6e:d2:cd:83:d3:
5b:58:5c:e8:82:7d:07:52:85:b6:5d:38:45:6c:8d:
bb:d9:02:f6:c9:58:0a:ad:68:41:63:7c:ee:29:df:
b1:6b:5b:18:4b:46:0a:88:a3:9f:af:c2:1c:5d:cb:
74:07:10:29:aa:b8:f0:8c:b3:e8:47:54:2c:e6:fa:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:4D:36:4A:3C:3A:7A:D0:4D:1F:A6:1E:1F:D5:0A:54:FD:3E:DD
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3239383a3a2f34382d3438203d3e20323135393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:298::/48
Signature Algorithm: sha256WithRSAEncryption
11:75:04:de:92:5b:c2:92:fa:f2:81:01:3e:dd:ab:a6:7b:f8:
ba:9c:09:0a:d6:08:61:94:97:c8:3e:a2:7a:33:56:da:7a:1f:
0b:d8:df:7e:92:e4:d5:d9:80:f6:c0:b7:c9:ba:a9:8f:a4:8a:
c2:71:4b:2d:a8:86:a3:c4:56:08:08:90:53:27:db:9e:10:79:
d8:a7:8b:f5:ad:c7:d6:d0:a3:da:2e:52:0a:27:11:82:15:d7:
08:7a:02:aa:39:4d:fe:6d:e3:4b:9b:fe:9a:41:23:72:c9:bd:
84:98:0d:ea:73:05:ce:57:ea:11:59:bf:fe:56:7a:e4:7e:01:
55:d4:6e:c6:9b:e4:dc:57:a0:67:28:ec:2d:13:d1:cc:b3:05:
c0:5d:f6:24:31:d7:6c:0c:5f:bf:70:24:c9:cc:5c:d7:12:c6:
84:77:de:8d:b5:15:61:bf:a8:b2:81:da:1e:bf:cb:ef:d5:be:
6c:25:7c:31:48:f3:06:2f:f9:b5:b3:f7:b0:04:bc:33:98:8b:
00:11:5d:1f:fe:f3:75:25:dd:b2:61:44:0a:90:3e:f9:de:36:
e7:d6:a9:3c:de:86:5c:8a:48:4e:7f:5b:81:d4:48:67:39:a8:
5c:83:02:38:cd:95:53:99:d7:da:2e:d4:c4:d0:a7:a8:71:c2:
6a:9d:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 21:03:47 2024 by rpki-client on console-ams.rpki-client.org