Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333383a3a2f34382d3438203d3e203434333534.roa
File: 326130663a383563313a3333383a3a2f34382d3438203d3e203434333534.roa (raw, json)
Hash identifier: +BYgqeOg+WT+0orMtmyZsJdxq1ZFr7GpAzJh2IGUVNk=
Subject key identifier: 58:C5:33:24:17:14:16:10:10:DC:46:9B:91:97:03:AA:51:8B:2C:6C
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3BEB84AEF1B71A47744649F7F0FD4DF45F2C1F8F
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333383a3a2f34382d3438203d3e203434333534.roa
Signing time: Tue 16 Jan 2024 02:04:55 +0000
ROA not before: Tue 16 Jan 2024 01:59:55 +0000
ROA not after: Tue 14 Jan 2025 02:04:55 +0000
asID: 44354
IP address blocks: 2a0f:85c1:338::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:eb:84:ae:f1:b7:1a:47:74:46:49:f7:f0:fd:4d:f4:5f:2c:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jan 16 01:59:55 2024 GMT
Not After : Jan 14 02:04:55 2025 GMT
Subject: CN=58C533241714161010DC469B919703AA518B2C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:da:e7:94:3f:0d:65:35:00:4c:43:4a:f3:
eb:62:98:8c:d0:83:e6:5e:2d:06:f1:8d:46:d8:b4:
e3:12:b0:c9:ed:2b:40:53:2e:a4:93:68:58:5f:02:
fe:20:68:40:de:61:17:d2:3e:23:e2:e1:6a:43:8b:
bd:c7:de:4a:10:62:b8:a6:1e:b0:b3:4e:33:37:78:
cd:41:66:6a:b2:cb:ef:92:f8:94:10:b7:f4:0f:7d:
47:36:43:3c:b2:ad:c0:fe:5e:66:93:3f:37:e2:cf:
b0:f2:ad:c5:d7:d9:87:49:43:2f:03:4c:ad:2c:37:
91:c3:08:cf:48:56:ab:6c:d5:5d:38:cc:9a:25:82:
49:04:8c:08:c8:29:19:4b:9a:40:ec:90:ef:07:52:
02:5c:8d:b8:69:76:b1:b5:c9:6e:ac:21:d9:a4:e7:
dc:7d:42:1d:b4:c3:7e:f2:de:f4:f8:34:f0:df:b5:
64:f2:91:13:c1:16:00:84:e8:41:2e:b8:d4:fb:6a:
4f:44:05:f2:cd:8b:eb:b4:fc:35:a4:a9:91:ef:9c:
7c:12:24:cd:dc:74:f9:83:91:63:6f:01:16:6c:fd:
9e:53:f6:57:b6:42:56:a9:cf:d2:3d:36:d5:b4:47:
e2:83:b6:45:32:18:d2:04:18:d0:c7:e4:c9:d5:11:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:33:24:17:14:16:10:10:DC:46:9B:91:97:03:AA:51:8B:2C:6C
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3333383a3a2f34382d3438203d3e203434333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:338::/48
Signature Algorithm: sha256WithRSAEncryption
08:ea:85:07:7b:02:46:af:f0:4c:77:68:8a:43:64:3d:13:06:
dd:30:9e:5e:71:b1:d5:80:fe:21:15:a0:68:05:84:4e:db:4b:
d0:8e:a4:92:4b:fd:03:86:c6:5b:6f:e3:c9:d6:ba:7d:d5:ad:
4d:18:9d:e3:ed:41:69:c9:7a:be:ab:56:f1:97:a3:29:04:96:
91:72:4a:71:b3:c1:e6:a2:99:ce:7b:62:65:ac:dc:5f:6d:3d:
ef:df:9b:d0:8d:4e:bf:eb:1d:a9:c3:be:8d:34:2a:cb:6b:c4:
f0:f6:65:64:fc:3f:b8:da:6a:f4:fc:53:f0:46:72:92:fe:38:
60:d4:76:ae:5f:60:fa:ba:19:08:e9:ff:91:71:c8:c6:91:54:
ba:97:eb:b8:9b:f5:73:87:33:34:83:52:85:76:a5:5f:49:18:
49:e0:ed:43:01:d5:f2:d9:32:c3:14:9b:d8:3d:e7:8a:21:a3:
28:d9:d0:7c:5b:4f:94:2e:60:00:19:da:50:76:25:eb:db:b8:
84:b1:f7:78:4c:61:5e:d2:af:a7:17:26:4f:04:4a:24:1b:4f:
96:27:b6:52:59:6f:da:42:62:fb:1a:be:81:8a:25:f7:e4:ba:
49:19:7a:c5:85:42:b5:3a:89:aa:d4:d8:f0:50:c1:82:1c:e9:
1c:ac:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 21:03:47 2024 by rpki-client on console-ams.rpki-client.org