Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333343a3a2f34382d3438203d3e20323135383939.roa
File: 326130663a383563313a3333343a3a2f34382d3438203d3e20323135383939.roa (raw, json)
Hash identifier: UGPN32myqHYTUd3JQsotNM2/CA+9hHgdx0SL/GHk7Vg=
Subject key identifier: 3B:69:39:DE:78:A0:22:E8:4A:AE:8D:1F:CA:9A:B3:97:2E:F2:37:75
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 417B5FDC8C37DEEA16195EB7768A4DEA16426A2E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333343a3a2f34382d3438203d3e20323135383939.roa
Signing time: Wed 21 Feb 2024 01:52:05 +0000
ROA not before: Wed 21 Feb 2024 01:47:05 +0000
ROA not after: Wed 19 Feb 2025 01:52:05 +0000
asID: 215899
IP address blocks: 2a0f:85c1:334::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7b:5f:dc:8c:37:de:ea:16:19:5e:b7:76:8a:4d:ea:16:42:6a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 21 01:47:05 2024 GMT
Not After : Feb 19 01:52:05 2025 GMT
Subject: CN=3B6939DE78A022E84AAE8D1FCA9AB3972EF23775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:76:77:f8:e1:25:c5:bd:fc:32:7f:5c:ec:
ea:d7:d5:57:76:21:a5:c1:a6:d8:01:96:ed:4c:0d:
45:0d:a6:4c:16:bd:27:de:76:de:21:2d:6e:31:0b:
d3:b7:68:20:06:78:2a:f8:4c:5f:a5:fb:0c:1d:9f:
e4:5e:02:95:ab:c6:a8:c2:c6:72:5c:83:e0:14:d6:
c8:31:69:f3:80:a9:43:a9:e2:e2:f6:7b:61:a1:a4:
d9:3f:53:bc:7b:22:98:b1:70:fe:87:e7:45:d3:db:
86:66:cd:62:87:5c:7f:8a:02:27:08:76:d9:20:b2:
0e:27:e3:5f:cf:59:29:02:57:ad:3b:80:1e:84:7a:
d2:7a:00:bd:c5:eb:be:39:ff:37:c2:d0:0d:61:8c:
0b:b8:fa:96:50:a6:b8:d7:eb:78:85:83:28:9b:cb:
5d:2d:cf:48:8e:ac:6e:35:a2:fe:15:81:f7:e3:b8:
38:f5:e6:04:7a:a5:0b:7f:f4:a5:b3:38:ea:3c:fb:
f0:64:2b:29:80:39:8d:f4:21:0c:7e:d2:4a:b9:9b:
ec:42:32:b2:9e:c8:c6:c3:43:30:12:06:06:c1:73:
c6:21:29:79:0a:b7:94:46:ba:36:52:b6:01:76:77:
da:bb:65:f9:f2:b5:6b:cc:f1:ba:fc:39:f4:45:c0:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:39:DE:78:A0:22:E8:4A:AE:8D:1F:CA:9A:B3:97:2E:F2:37:75
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333343a3a2f34382d3438203d3e20323135383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:334::/48
Signature Algorithm: sha256WithRSAEncryption
62:1e:36:41:ba:07:41:39:0a:1a:aa:6b:ca:4b:68:32:0d:1e:
88:0d:94:e8:ff:eb:8a:e3:80:7b:42:5a:f0:7b:57:93:9a:b4:
bb:99:9f:76:0f:a4:f1:29:08:19:21:85:2d:72:4c:ff:e4:ea:
11:6e:5c:ef:89:fb:fb:4d:80:d9:9c:a7:42:c2:6b:f7:70:10:
45:1a:e8:6e:6b:da:22:a5:93:dd:29:de:15:c6:77:25:d9:15:
95:c1:92:d0:c2:44:6f:95:f8:92:4b:72:cd:87:06:45:82:64:
dd:b4:a5:9e:f0:d4:3d:ae:14:cb:e8:cd:f6:65:c0:19:18:2f:
1f:b3:a3:bf:76:ed:44:e8:ee:c7:dc:8e:7e:4b:b7:ae:c6:16:
9a:5c:ec:4d:47:80:5c:39:1f:79:ce:eb:d7:18:81:74:9a:40:
ad:8c:d9:c5:bd:0d:d0:f3:e9:b8:33:a0:a5:3b:39:6d:0d:1c:
6b:df:d4:78:10:71:a5:ad:d9:81:a3:de:ae:75:0d:54:fd:d2:
3f:78:6d:a6:d9:25:c8:70:67:da:35:0d:2f:88:80:b1:be:63:
d1:dd:10:ef:5d:b8:46:07:16:eb:a4:7c:a5:1d:9e:bf:23:51:
a7:2d:2a:be:2e:a4:bb:51:c5:88:16:1e:91:2e:ae:32:40:81:
ee:00:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org