Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334373a3a2f34382d3438203d3e20323135373433.roa
File: 326130663a383563313a3334373a3a2f34382d3438203d3e20323135373433.roa (raw, json)
Hash identifier: 3+V3sFAWTYr7EHjm7BaJDacYtYTIZapcPZl6zXBsaGo=
Subject key identifier: C1:3F:D0:3C:FE:0C:AF:01:F8:9B:65:B5:B1:A2:CF:40:07:7A:F3:A0
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1FC52B69C3C6945D5205F56308DEFA389CD4A75A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334373a3a2f34382d3438203d3e20323135373433.roa
Signing time: Fri 09 Feb 2024 23:30:11 +0000
ROA not before: Fri 09 Feb 2024 23:25:11 +0000
ROA not after: Fri 07 Feb 2025 23:30:11 +0000
asID: 215743
IP address blocks: 2a0f:85c1:347::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c5:2b:69:c3:c6:94:5d:52:05:f5:63:08:de:fa:38:9c:d4:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 9 23:25:11 2024 GMT
Not After : Feb 7 23:30:11 2025 GMT
Subject: CN=C13FD03CFE0CAF01F89B65B5B1A2CF40077AF3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:5c:60:66:32:73:37:40:54:dd:73:cd:08:
4e:55:2d:89:52:3f:af:1b:37:2f:b6:23:8f:42:dd:
66:41:b2:aa:9c:b6:a7:32:26:a2:77:87:36:ba:9f:
2c:3d:4b:e2:94:fe:cb:79:cc:08:63:4e:87:ec:90:
2c:83:b0:cf:5e:e0:9a:ff:53:9d:87:36:61:ce:a6:
47:56:27:ab:ed:5d:46:c4:7a:30:24:80:5b:28:bd:
a2:18:1b:9f:79:f4:e1:fc:ec:45:97:0e:f8:d9:89:
ae:54:60:87:34:c0:2f:75:94:02:1e:ce:78:c0:d3:
e1:07:60:c6:d7:af:18:f2:27:1e:1f:e7:12:17:19:
68:d7:16:dc:66:a4:37:7d:12:12:41:79:a5:5e:99:
a6:61:dd:1d:bf:ec:62:38:f2:35:6e:0d:41:70:fd:
c7:15:01:ee:b0:fb:ba:28:6c:a0:60:0b:aa:d2:3e:
66:24:c6:29:a2:79:2b:f4:1b:20:a6:1a:a1:54:f8:
44:71:1a:ec:4f:ec:f2:ef:ba:99:59:60:b8:24:84:
03:2a:74:40:d4:54:1d:58:ce:fc:2b:9c:53:0d:a9:
be:60:de:54:0e:03:19:81:02:b3:94:2c:b4:d8:59:
c7:1f:69:6b:fd:fa:a0:cc:d2:5b:e2:22:af:97:5e:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:D0:3C:FE:0C:AF:01:F8:9B:65:B5:B1:A2:CF:40:07:7A:F3:A0
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334373a3a2f34382d3438203d3e20323135373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:347::/48
Signature Algorithm: sha256WithRSAEncryption
59:ac:16:a9:d4:1d:91:93:6c:9a:30:71:75:a3:9a:9c:4f:68:
1f:2f:0c:78:6d:5c:36:f6:13:5e:b5:ae:cc:2d:49:80:e5:ec:
cf:a1:7f:26:b7:2f:a1:07:13:24:32:e8:9c:33:56:9f:93:a4:
5b:b6:28:99:c1:bc:49:cd:f1:dc:a7:e7:27:8d:31:23:d7:e6:
3c:59:f8:ff:6c:05:5e:51:7e:ac:c6:6c:63:e1:97:e7:0a:f1:
0e:87:d5:ed:8d:2d:72:bf:2f:f7:1c:c3:43:90:21:9a:8e:44:
8d:12:4c:37:ac:7e:98:3a:16:ad:de:bb:ea:9b:92:02:25:1c:
c2:31:a3:0c:7d:99:a0:74:92:cc:cb:8d:b3:9c:f1:f5:dc:84:
69:46:09:d2:14:df:0c:79:a1:c5:a7:57:34:30:c9:8b:1c:0d:
01:3c:20:39:3b:53:28:3b:14:93:b1:64:22:2e:86:90:a1:ca:
5e:db:9b:c4:21:c2:67:21:e8:1c:d0:27:41:82:91:15:16:fd:
df:ed:64:51:ab:cd:d7:55:77:17:4d:d2:d0:4f:5c:6c:e3:2c:
f2:08:87:4e:98:10:a7:2c:3d:a1:88:36:00:35:59:f4:1b:b5:
b4:f7:63:74:c6:0b:75:b5:4b:04:f3:1d:85:a8:6c:fb:8f:a6:
fb:c2:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org