Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335313a3a2f34382d3438203d3e20323135373239.roa
File: 326130663a383563313a3335313a3a2f34382d3438203d3e20323135373239.roa (raw, json)
Hash identifier: 7ThZiqgd9aMlVKu+TUa35FLOGEG29UfxI6sFkDWP0oI=
Subject key identifier: E6:B1:4D:9A:16:3A:72:67:A6:02:80:C2:7F:4B:F1:96:6E:BD:8A:B1
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 12306B853A973F7C431CF1377A57C353F695E231
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335313a3a2f34382d3438203d3e20323135373239.roa
Signing time: Mon 15 Jan 2024 23:22:06 +0000
ROA not before: Mon 15 Jan 2024 23:17:06 +0000
ROA not after: Mon 13 Jan 2025 23:22:06 +0000
asID: 215729
IP address blocks: 2a0f:85c1:351::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:30:6b:85:3a:97:3f:7c:43:1c:f1:37:7a:57:c3:53:f6:95:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jan 15 23:17:06 2024 GMT
Not After : Jan 13 23:22:06 2025 GMT
Subject: CN=E6B14D9A163A7267A60280C27F4BF1966EBD8AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:8b:97:a0:dd:c4:7a:a9:9d:f3:38:b1:d3:
4a:35:aa:5a:e0:81:17:0a:4a:b0:83:96:96:46:13:
c1:c1:a3:87:1d:ed:61:ba:7a:50:5a:08:fb:fe:3e:
80:e8:f9:ff:2b:9a:ed:7c:b7:57:31:9b:f4:f2:26:
e7:be:17:95:f2:2a:fa:05:59:4e:0e:f9:2e:75:94:
00:fe:e7:42:86:b9:a8:9c:8e:d2:54:6a:b2:66:85:
4d:88:1e:b8:3d:ac:c9:d2:ae:ff:8b:35:9f:b9:20:
fa:99:bc:a6:5f:a8:00:63:f0:50:6f:0d:7c:5c:09:
ea:f0:16:cc:c2:5a:28:85:42:98:80:1a:04:94:1f:
bb:f0:64:ad:2a:ff:83:7a:e2:40:62:9e:46:8e:50:
71:37:f8:96:cc:70:f6:06:05:1a:4e:58:5e:3e:1f:
4a:8d:aa:7e:eb:9a:0b:f5:74:3e:a6:32:53:3e:64:
9b:85:aa:57:76:53:b9:0a:ab:a8:24:02:b9:bd:55:
73:a7:47:d3:e6:54:11:44:19:17:b0:9f:c3:3f:c5:
7c:f4:da:8f:9f:07:13:fe:1d:30:4c:e0:26:ae:67:
98:ff:af:67:4c:84:16:53:e9:8f:31:04:55:4c:26:
95:2f:70:c6:3e:66:06:ad:cc:0e:62:b4:0b:ed:f9:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:4D:9A:16:3A:72:67:A6:02:80:C2:7F:4B:F1:96:6E:BD:8A:B1
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335313a3a2f34382d3438203d3e20323135373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:351::/48
Signature Algorithm: sha256WithRSAEncryption
71:e2:28:dd:cb:f8:ca:a9:dc:7d:61:0e:f3:d2:da:52:43:35:
ac:9d:d2:44:e4:22:b6:3d:c4:65:13:0c:14:fa:68:8c:8f:4d:
e0:a8:c4:fa:66:82:a6:29:70:db:14:e6:aa:17:2e:0b:84:c7:
8e:c8:81:bf:ca:33:70:1d:62:34:b7:0c:81:ef:a8:12:f8:0f:
3f:9e:cd:7f:ce:b9:4a:29:5d:0c:d9:5d:89:ca:6a:0c:5d:f2:
6a:7c:e0:82:f5:d6:70:46:1d:90:d8:ee:c5:aa:89:b8:a4:f9:
7e:60:57:28:5d:cc:3e:44:df:90:ff:f1:8c:2a:c4:65:01:67:
dc:c9:16:1c:54:df:e8:de:88:c8:88:63:f4:fc:9c:77:af:d8:
5b:a5:db:d0:ac:57:fb:54:d3:cc:4b:cf:13:19:6e:21:23:7c:
1e:68:fe:dc:46:71:54:2b:96:c4:e9:0b:f4:ec:a5:83:a1:2e:
a2:0b:f8:67:0a:8e:99:11:fc:5a:42:bf:32:c6:b8:ce:a9:85:
f8:56:87:d2:b0:34:41:27:69:99:2c:02:33:5b:e6:fc:df:1d:
ae:25:50:2b:92:da:bf:45:94:06:08:2f:1f:1d:11:ae:90:6e:
5d:c6:f4:41:c1:06:c9:52:51:ec:13:26:17:8f:c5:00:90:cd:
4d:3c:92:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org