Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33303a3a2f34382d3438203d3e20323036363238.roa
File: 326130663a383563313a33303a3a2f34382d3438203d3e20323036363238.roa (raw, json)
Hash identifier: ZPnoLLWi2IQ02p3j2ZF3hyPyKWlzPUvTz+B/KT4m/z4=
Subject key identifier: DB:3C:5E:05:6B:AC:E2:B5:26:3A:A8:26:93:1D:0F:2D:50:C4:F1:EC
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 55DBD708DED17277AE48F5013C9B79064411E3BB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33303a3a2f34382d3438203d3e20323036363238.roa
Signing time: Tue 10 Oct 2023 15:15:19 +0000
ROA not before: Tue 10 Oct 2023 15:10:19 +0000
ROA not after: Tue 08 Oct 2024 15:15:19 +0000
asID: 206628
IP address blocks: 2a0f:85c1:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:db:d7:08:de:d1:72:77:ae:48:f5:01:3c:9b:79:06:44:11:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:10:19 2023 GMT
Not After : Oct 8 15:15:19 2024 GMT
Subject: CN=DB3C5E056BACE2B5263AA826931D0F2D50C4F1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:a4:2e:84:d7:8c:1c:0d:21:0d:24:51:8b:
53:41:a0:a1:b6:1e:d7:b5:12:20:6e:47:9c:a8:18:
fd:16:22:f4:0e:a4:4c:c5:c9:2e:87:b3:76:70:3b:
67:42:ce:9d:b3:45:7d:12:0e:2e:3f:23:d8:17:70:
0c:5f:f1:fd:48:d7:af:a4:f3:1d:de:f5:e6:4c:1a:
98:a5:b3:0a:f8:cc:18:8a:8d:95:b7:4d:01:72:24:
9e:a4:ab:37:2c:0f:f4:4d:99:31:c9:fa:a4:86:15:
23:de:4c:15:27:c1:76:74:a4:cd:42:2b:f5:ca:89:
36:f2:e7:31:74:e5:bf:ce:2c:56:81:43:4c:28:e9:
2f:b5:b6:de:06:13:69:37:64:21:e1:88:d4:26:6f:
f9:6c:d3:68:d6:45:1c:2f:87:ac:4c:3e:0e:ae:aa:
01:07:e3:b8:0b:f7:cc:cf:dc:b0:6c:90:fa:7c:bf:
bf:58:a2:c5:6c:d6:28:e0:6f:f5:fc:1d:2d:c1:27:
0d:5f:c2:ec:c6:34:c9:39:2c:6f:fd:11:d1:52:b8:
64:23:bc:da:22:00:83:b0:2a:31:1f:79:9a:68:fe:
28:99:de:1a:8a:2c:a0:ca:ab:30:59:7d:8c:6f:98:
36:5c:e8:d4:07:de:12:cd:f4:17:96:11:40:88:e3:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3C:5E:05:6B:AC:E2:B5:26:3A:A8:26:93:1D:0F:2D:50:C4:F1:EC
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a33303a3a2f34382d3438203d3e20323036363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:30::/48
Signature Algorithm: sha256WithRSAEncryption
28:24:09:0b:0d:b1:3d:a8:9d:c9:3a:e4:2a:15:67:6a:eb:15:
25:a8:ea:b8:ab:32:d0:17:50:75:6f:78:9c:dc:3c:86:63:58:
2e:56:62:85:e3:c2:21:ac:99:ed:a9:cb:eb:88:16:14:81:95:
ab:86:da:a4:6d:8e:fc:d9:2c:a8:00:bc:00:7b:44:2e:99:b9:
07:de:b2:44:3f:e0:ee:04:ff:e0:65:c5:45:64:aa:2c:d0:37:
16:a8:68:81:9f:27:a8:f8:ce:35:e4:5e:6c:8d:94:79:97:05:
17:af:e5:78:82:f8:7f:e7:1f:a5:8f:b0:bc:3e:bf:2c:2e:17:
71:af:1f:55:ee:d7:37:63:34:f7:ce:d1:1d:5c:d3:85:cc:9a:
7e:b5:86:bf:85:dd:f8:be:96:34:5d:a1:e4:f4:d2:4c:96:25:
f2:18:6f:7c:a6:63:2c:90:b8:24:15:de:77:58:b0:52:68:72:
52:25:28:ba:7d:da:15:44:5a:0d:81:f8:f3:7a:7d:03:24:40:
0f:d7:0a:c2:f3:49:4b:6b:10:10:47:32:11:d0:cd:26:2f:71:
97:d9:71:d9:aa:51:d2:2a:e6:9a:b2:53:95:7b:41:54:f3:86:
b4:ce:3d:3f:cd:3a:f8:03:9d:fa:e6:f2:4d:ad:b0:5a:e1:ba:
47:33:b9:1c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUVdvXCN7RcneuSPUBPJt5BkQR47swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTEwMTlaFw0yNDEwMDgxNTE1MTlaMDMxMTAvBgNV
BAMTKERCM0M1RTA1NkJBQ0UyQjUyNjNBQTgyNjkzMUQwRjJENTBDNEYxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGqQuhNeMHA0hDSRRi1NBoKG2
Hte1EiBuR5yoGP0WIvQOpEzFyS6Hs3ZwO2dCzp2zRX0SDi4/I9gXcAxf8f1I16+k
8x3e9eZMGpilswr4zBiKjZW3TQFyJJ6kqzcsD/RNmTHJ+qSGFSPeTBUnwXZ0pM1C
K/XKiTby5zF05b/OLFaBQ0wo6S+1tt4GE2k3ZCHhiNQmb/ls02jWRRwvh6xMPg6u
qgEH47gL98zP3LBskPp8v79YosVs1ijgb/X8HS3BJw1fwuzGNMk5LG/9EdFSuGQj
vNoiAIOwKjEfeZpo/iiZ3hqKLKDKqzBZfYxvmDZc6NQH3hLN9BeWEUCI4071AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU2zxeBWus4rUmOqgmkx0PLVDE8ewwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM2MzYzMjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKg+FwQAwMA0GCSqGSIb3DQEBCwUAA4IBAQAoJAkLDbE9qJ3JOuQqFWdq
6xUlqOq4qzLQF1B1b3ic3DyGY1guVmKF48IhrJntqcvriBYUgZWrhtqkbY782Syo
ALwAe0QumbkH3rJEP+DuBP/gZcVFZKos0DcWqGiBnyeo+M415F5sjZR5lwUXr+V4
gvh/5x+lj7C8Pr8sLhdxrx9V7tc3YzT3ztEdXNOFzJp+tYa/hd34vpY0XaHk9NJM
liXyGG98pmMskLgkFd53WLBSaHJSJSi6fdoVRFoNgfjzen0DJEAP1wrC80lLaxAQ
RzIR0M0mL3GX2XHZqlHSKuaaslOVe0FU84a0zj0/zTr4A5365vJNrbBa4bpHM7kc
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org