Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332343a3a2f34382d3438203d3e20323136303532.roa
File: 326130663a383563313a3332343a3a2f34382d3438203d3e20323136303532.roa (raw, json)
Hash identifier: XwRby2I8tI5wuzaSEHP3q/wY9iDqVyfPDQCB+cy7+ak=
Subject key identifier: EC:3B:B0:CE:3F:6B:67:39:49:F0:19:B2:85:6A:82:4A:C6:BB:F0:17
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 48CBFED0D9049FB91D680DA8CF99BF256069461A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332343a3a2f34382d3438203d3e20323136303532.roa
Signing time: Wed 22 Nov 2023 13:29:45 +0000
ROA not before: Wed 22 Nov 2023 13:24:45 +0000
ROA not after: Wed 20 Nov 2024 13:29:45 +0000
asID: 216052
IP address blocks: 2a0f:85c1:324::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cb:fe:d0:d9:04:9f:b9:1d:68:0d:a8:cf:99:bf:25:60:69:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Nov 22 13:24:45 2023 GMT
Not After : Nov 20 13:29:45 2024 GMT
Subject: CN=EC3BB0CE3F6B673949F019B2856A824AC6BBF017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:0a:33:21:e9:7c:2a:35:6c:a6:f8:80:a5:
8e:1d:ac:89:11:fc:1e:47:b4:3c:9e:f4:5e:c9:69:
62:7c:16:9e:27:f7:ca:d4:b9:3e:91:02:27:1d:2a:
53:b4:25:2b:7c:59:64:3f:ab:19:65:6b:bb:1c:fb:
64:64:91:f9:6f:29:97:83:99:71:28:65:16:40:51:
da:61:c5:6a:24:57:eb:d5:9f:78:45:11:f3:61:9d:
ae:c7:d5:85:f7:f9:6f:d0:bd:de:43:e9:8b:b6:88:
5f:b8:7f:c7:63:44:3c:8b:41:5e:b5:c8:ad:71:e3:
cf:5d:20:e6:da:ce:65:76:7e:95:9c:a7:3b:1e:20:
a4:34:8d:5b:7b:9a:f2:fc:25:09:94:3a:9c:3d:80:
96:9c:0f:de:8c:67:72:4b:d1:68:25:a5:f3:68:76:
6b:0d:25:9a:e7:5d:47:2f:01:68:0b:7c:82:87:7e:
8b:98:e4:47:bd:8f:c9:7d:56:bd:c8:2d:2e:62:b5:
48:ad:44:45:bb:83:38:2e:33:88:6e:f0:92:a6:81:
f1:94:0b:56:77:a7:4e:bc:1d:27:1e:29:a5:4d:d3:
92:09:cf:fc:97:bb:4b:06:60:d1:9e:75:55:41:e8:
60:ed:6a:38:60:a4:03:54:be:9c:af:90:5d:82:5b:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:B0:CE:3F:6B:67:39:49:F0:19:B2:85:6A:82:4A:C6:BB:F0:17
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332343a3a2f34382d3438203d3e20323136303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:324::/48
Signature Algorithm: sha256WithRSAEncryption
5b:16:f4:e0:f1:dd:2c:3a:7b:ef:17:22:fd:fa:9d:db:88:3b:
cf:ab:82:c3:11:70:f5:0a:8a:02:46:a7:8d:ee:9c:bc:49:15:
aa:fa:61:20:ff:6a:e5:71:fa:80:4d:9d:5d:e5:3f:b4:84:b5:
5a:a3:d0:b6:0a:08:ec:5f:bc:cc:6d:ee:75:2c:5c:89:bf:34:
78:86:7f:93:37:dd:85:f9:ee:a5:ba:2c:46:b1:ba:1d:96:19:
ad:e3:42:11:e9:83:da:6f:fa:56:3d:17:6d:21:f7:52:67:3f:
17:9b:92:4a:14:eb:54:09:c2:ae:80:8a:9c:6e:e1:a5:e3:34:
89:ca:af:5b:73:2f:be:7f:16:03:b9:9e:26:12:d9:5e:8c:fc:
84:1b:26:8a:92:30:05:48:f0:19:19:9e:7d:f6:5e:d5:e1:e8:
62:2d:76:f1:df:f3:25:b0:6c:59:3c:a1:59:8f:10:c2:6e:ad:
a5:c7:c4:ee:23:3b:69:bc:60:71:f9:94:33:6d:93:f5:d4:af:
b5:23:f5:e2:36:ad:dd:ca:6b:6e:89:22:9e:b5:05:c0:ea:b2:
c9:fc:f9:a0:71:b4:3e:63:04:c8:54:bc:6d:94:74:66:1c:65:
cc:84:6d:35:9b:56:29:45:27:9c:ad:3e:f6:a0:45:d9:fa:7a:
a1:05:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 21:03:47 2024 by rpki-client on console-ams.rpki-client.org