Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
File: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier: jjCCAuJkDwpNlReqyZ273STV+OmZ10oJkD10k4uNSZQ=
Subject key identifier: FF:4B:1E:6E:62:CA:76:A4:46:77:B4:56:1D:1A:34:75:56:04:31:6E
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 64DEB5B66A28754563D2F7A1651FFB0E3DEEA400
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
Signing time: Thu 15 Feb 2024 21:58:34 +0000
ROA not before: Thu 15 Feb 2024 21:53:34 +0000
ROA not after: Thu 13 Feb 2025 21:58:34 +0000
asID: 215617
IP address blocks: 2a0f:85c1:357::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:b5:b6:6a:28:75:45:63:d2:f7:a1:65:1f:fb:0e:3d:ee:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 15 21:53:34 2024 GMT
Not After : Feb 13 21:58:34 2025 GMT
Subject: CN=FF4B1E6E62CA76A44677B4561D1A34755604316E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:32:3f:c5:e8:68:84:ea:a7:07:90:67:7e:
6a:38:75:9e:d8:22:f2:56:9c:39:f5:8a:48:44:1b:
c4:d9:de:19:da:4e:d3:af:d2:5b:bc:be:b7:3e:b7:
e2:1b:04:7e:de:3e:95:07:e3:7f:71:b3:39:68:f1:
71:b1:9b:6c:f9:48:85:03:44:85:b9:39:8f:1d:87:
41:26:70:20:49:3b:e6:8e:ae:5b:f2:34:b4:9d:7c:
13:91:1e:62:ae:19:a3:7b:fc:70:1c:ce:f1:4f:63:
6d:c2:25:50:b6:b6:8e:91:31:df:c9:70:66:9f:08:
d3:e6:8d:2b:9e:51:48:fd:89:67:b9:9c:31:3f:e2:
40:7a:1e:3f:33:67:a5:75:1a:f9:1f:03:d5:b2:93:
ed:5f:ea:8f:55:03:70:20:34:de:8a:a4:97:ce:4b:
f9:72:44:ae:fc:c8:00:f2:0d:fc:5c:c9:63:c5:27:
ad:5a:9b:fb:84:10:90:43:96:fd:b7:1a:97:11:a5:
17:db:64:31:d2:95:ca:7b:47:99:5b:71:f1:34:fc:
16:66:b3:ec:6a:55:0e:ee:ba:cf:76:65:94:40:f0:
8b:4c:9a:38:7b:9e:71:34:2f:c2:a9:59:bb:4b:c6:
ef:a4:7d:72:73:e4:ab:41:c5:7a:12:54:a0:0c:c3:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:1E:6E:62:CA:76:A4:46:77:B4:56:1D:1A:34:75:56:04:31:6E
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:357::/48
Signature Algorithm: sha256WithRSAEncryption
9a:2d:28:ef:49:c2:c4:e5:62:a7:f3:fd:95:64:b2:13:98:a9:
0b:ca:9f:ba:c4:20:cf:00:5c:96:db:0e:c1:95:d4:6c:ea:cf:
56:e9:0f:64:0e:6c:1c:b5:a1:09:54:07:5f:51:f3:16:1a:73:
56:4e:97:25:f1:18:da:65:f1:b6:8e:dd:e6:b3:ae:bc:3a:98:
2d:19:4b:b1:fa:bc:62:e6:f5:fc:83:ec:c2:a3:fb:24:e4:57:
18:44:bd:d9:48:b2:e6:11:81:bf:02:45:3f:c5:92:93:6e:9b:
c0:39:b4:84:fb:a4:94:6b:4f:fa:ca:05:f9:85:2a:73:e0:b3:
87:30:ac:9f:11:fa:2b:85:1f:8f:17:48:d4:05:0f:1f:51:ca:
89:05:4b:8d:74:81:61:92:f2:57:55:2e:5f:d5:b1:1a:2c:53:
6c:43:54:39:cc:62:0e:20:32:f9:66:ba:8e:38:61:a3:8f:3d:
38:2c:69:12:b8:67:3b:68:87:82:80:7b:ac:8d:59:8f:5c:02:
55:1d:49:e1:c9:6c:aa:d4:0d:99:b3:52:b0:c5:bb:4b:59:41:
6d:cd:25:ab:3d:0c:ce:60:35:54:55:35:4a:e7:49:b1:4d:76:
9d:9f:b0:cc:b7:6c:dc:e9:df:9d:8b:45:55:11:d4:1c:21:10:
11:7b:72:c7
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUZN61tmoodUVj0vehZR/7Dj3upAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDAyMTUyMTUzMzRaFw0yNTAyMTMyMTU4MzRaMDMxMTAvBgNV
BAMTKEZGNEIxRTZFNjJDQTc2QTQ0Njc3QjQ1NjFEMUEzNDc1NTYwNDMxNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdjI/xehohOqnB5Bnfmo4dZ7Y
IvJWnDn1ikhEG8TZ3hnaTtOv0lu8vrc+t+IbBH7ePpUH439xszlo8XGxm2z5SIUD
RIW5OY8dh0EmcCBJO+aOrlvyNLSdfBORHmKuGaN7/HAczvFPY23CJVC2to6RMd/J
cGafCNPmjSueUUj9iWe5nDE/4kB6Hj8zZ6V1GvkfA9Wyk+1f6o9VA3AgNN6KpJfO
S/lyRK78yADyDfxcyWPFJ61am/uEEJBDlv23GpcRpRfbZDHSlcp7R5lbcfE0/BZm
s+xqVQ7uus92ZZRA8ItMmjh7nnE0L8KpWbtLxu+kfXJz5KtBxXoSVKAMwwXDAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU/0sebmLKdqRGd7RWHRo0dVYEMW4wHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzM1MzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNjMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA1cwDQYJKoZIhvcNAQELBQADggEBAJotKO9JwsTlYqfz/ZVk
shOYqQvKn7rEIM8AXJbbDsGV1Gzqz1bpD2QObBy1oQlUB19R8xYac1ZOlyXxGNpl
8baO3eazrrw6mC0ZS7H6vGLm9fyD7MKj+yTkVxhEvdlIsuYRgb8CRT/FkpNum8A5
tIT7pJRrT/rKBfmFKnPgs4cwrJ8R+iuFH48XSNQFDx9RyokFS410gWGS8ldVLl/V
sRosU2xDVDnMYg4gMvlmuo44YaOPPTgsaRK4Zztoh4KAe6yNWY9cAlUdSeHJbKrU
DZmzUrDFu0tZQW3NJas9DM5gNVRVNUrnSbFNdp2fsMy3bNzp352LRVUR1BwhEBF7
csc=
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org