Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334393a3a2f34382d3438203d3e20323135373331.roa
File: 326130663a383563313a3334393a3a2f34382d3438203d3e20323135373331.roa (raw, json)
Hash identifier: Afrd12oA4Zkod1768mbhhGUtGF4NI+8d51S3kxUs1TM=
Subject key identifier: 1A:99:34:90:86:DC:19:6A:73:03:6D:C4:45:7C:53:B9:8D:D1:B9:97
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: A6501F80B2ABAA346948F30478C87D6130887A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334393a3a2f34382d3438203d3e20323135373331.roa
Signing time: Fri 12 Jan 2024 20:54:40 +0000
ROA not before: Fri 12 Jan 2024 20:49:40 +0000
ROA not after: Fri 10 Jan 2025 20:54:40 +0000
asID: 215731
IP address blocks: 2a0f:85c1:349::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a6:50:1f:80:b2:ab:aa:34:69:48:f3:04:78:c8:7d:61:30:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jan 12 20:49:40 2024 GMT
Not After : Jan 10 20:54:40 2025 GMT
Subject: CN=1A99349086DC196A73036DC4457C53B98DD1B997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:49:ab:89:c1:77:c2:36:f1:39:7d:63:25:
ec:91:4d:f0:78:22:5d:86:ec:44:37:09:f2:8d:39:
79:9d:c6:b3:c6:0e:5d:14:43:85:62:1f:ec:e5:37:
dd:03:20:f4:84:fe:4f:d6:6d:a8:b5:fc:9a:97:70:
c9:ec:3c:6a:d4:28:9d:dc:49:e5:f5:79:e2:99:f5:
a3:52:c4:07:1c:13:df:7d:ca:06:0a:95:6a:58:bb:
ba:7d:b9:da:07:d3:99:cb:2a:1f:8a:74:f3:6f:b1:
05:1f:96:d6:1c:5b:6d:8f:cd:3c:9d:72:9f:6a:c8:
9c:f3:6c:dc:60:b6:b0:36:ec:1a:13:b6:38:db:ff:
a8:a9:78:6b:ea:91:99:f9:f1:e0:12:6a:22:26:0a:
f1:61:5c:ef:25:28:7d:67:67:5a:92:ff:27:09:7a:
e4:63:7f:f9:cb:a3:42:ab:d2:46:31:b9:29:f4:16:
b2:93:8b:ee:51:78:ef:ac:07:ae:c1:f8:67:20:35:
49:08:08:20:8e:7c:3e:79:35:e4:c9:21:60:1c:db:
9e:58:03:4f:92:c5:94:66:c3:78:e7:8e:f1:c6:b5:
a1:8a:f2:27:45:00:97:1d:cd:5b:a2:3a:ca:8c:8a:
80:3c:b1:0a:44:4f:41:ed:67:8a:3d:65:b0:6c:c1:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:34:90:86:DC:19:6A:73:03:6D:C4:45:7C:53:B9:8D:D1:B9:97
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3334393a3a2f34382d3438203d3e20323135373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:349::/48
Signature Algorithm: sha256WithRSAEncryption
2a:9d:2a:d9:01:41:e0:02:83:3c:7b:d6:2c:50:3f:80:18:36:
e5:6e:38:7d:f3:14:88:e9:5a:d3:22:04:ab:b1:39:f7:05:e2:
cb:f2:4e:d9:4d:2d:cf:43:29:02:32:d6:19:e8:44:4d:7a:2d:
dc:c9:1d:27:d0:69:cb:c8:eb:2f:29:b4:ba:76:35:57:fc:28:
76:ac:f6:9f:0f:a4:c5:64:40:ac:c0:e8:42:c1:8a:de:61:ec:
73:84:6a:ec:91:bf:bf:9f:be:45:e6:33:2d:1f:ad:16:d6:82:
69:25:ba:71:1b:56:4f:ac:e9:04:cf:39:da:cc:e9:eb:0a:b1:
6d:98:71:21:0e:c4:c6:4e:e8:2d:ac:cb:4a:4d:2b:33:33:7f:
be:c4:3e:68:d8:08:07:e7:e2:8f:30:92:0a:bf:1a:78:b2:c6:
ae:04:fe:0f:ad:b6:60:38:a1:43:0a:2d:d7:42:cf:5a:5c:b2:
1f:26:10:a3:b5:89:01:2e:49:a0:c4:83:b0:ac:ae:9c:cd:03:
f4:cf:b4:97:ff:97:ca:a4:68:2a:da:22:a4:d7:f0:f9:8f:cc:
22:f9:d2:ec:96:c6:da:37:11:31:f3:c0:e2:c4:c6:6b:a3:06:
f4:2d:b2:06:ad:ec:ea:ba:e7:56:1e:e4:44:02:9d:20:17:c5:
8c:01:9e:ec
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUAKZQH4Cyq6o0aUjzBHjIfWEwiHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDAxMTIyMDQ5NDBaFw0yNTAxMTAyMDU0NDBaMDMxMTAvBgNV
BAMTKDFBOTkzNDkwODZEQzE5NkE3MzAzNkRDNDQ1N0M1M0I5OEREMUI5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZ0mricF3wjbxOX1jJeyRTfB4
Il2G7EQ3CfKNOXmdxrPGDl0UQ4ViH+zlN90DIPSE/k/Wbai1/JqXcMnsPGrUKJ3c
SeX1eeKZ9aNSxAccE999ygYKlWpYu7p9udoH05nLKh+KdPNvsQUfltYcW22PzTyd
cp9qyJzzbNxgtrA27BoTtjjb/6ipeGvqkZn58eASaiImCvFhXO8lKH1nZ1qS/ycJ
euRjf/nLo0Kr0kYxuSn0FrKTi+5ReO+sB67B+GcgNUkICCCOfD55NeTJIWAc255Y
A0+SxZRmw3jnjvHGtaGK8idFAJcdzVuiOsqMioA8sQpET0HtZ4o9ZbBswf8NAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUGpk0kIbcGWpzA23ERXxTuY3RuZcwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzM0MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNzMzMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA0kwDQYJKoZIhvcNAQELBQADggEBACqdKtkBQeACgzx71ixQ
P4AYNuVuOH3zFIjpWtMiBKuxOfcF4svyTtlNLc9DKQIy1hnoRE16LdzJHSfQacvI
6y8ptLp2NVf8KHas9p8PpMVkQKzA6ELBit5h7HOEauyRv7+fvkXmMy0frRbWgmkl
unEbVk+s6QTPOdrM6esKsW2YcSEOxMZO6C2sy0pNKzMzf77EPmjYCAfn4o8wkgq/
Gniyxq4E/g+ttmA4oUMKLddCz1pcsh8mEKO1iQEuSaDEg7CsrpzNA/TPtJf/l8qk
aCraIqTX8PmPzCL50uyWxto3ETHzwOLExmujBvQtsgat7Oq651Ye5EQCnSAXxYwB
nuw=
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org