Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
File: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier: xNDJPGFPUh81aItf31vq2oTDfS2tdIycGpAuwAw4+QI=
Subject key identifier: 13:53:9F:0F:31:BA:38:B2:02:54:9F:67:ED:34:F5:D8:4E:1A:B7:78
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 11DD846B222E562A84AE16845FD4A3BF6141F71C
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
Signing time: Thu 15 Feb 2024 21:58:41 +0000
ROA not before: Thu 15 Feb 2024 21:53:41 +0000
ROA not after: Thu 13 Feb 2025 21:58:41 +0000
asID: 215617
IP address blocks: 2a0f:85c1:363::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dd:84:6b:22:2e:56:2a:84:ae:16:84:5f:d4:a3:bf:61:41:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 15 21:53:41 2024 GMT
Not After : Feb 13 21:58:41 2025 GMT
Subject: CN=13539F0F31BA38B202549F67ED34F5D84E1AB778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:2f:1d:4e:b4:fc:79:56:bf:e0:7a:8f:a1:
e1:2f:47:11:b3:e5:8a:a9:54:4d:f9:4e:dd:c5:d5:
21:09:a4:02:17:fa:67:96:2b:9f:b9:5e:79:5e:58:
69:26:a7:a8:0c:3e:3b:30:61:30:0e:9f:5c:27:6d:
e9:b9:55:d2:78:0c:90:39:3b:e4:ee:1d:75:3b:0c:
79:e5:b2:84:5c:12:c6:57:84:e8:83:3a:e8:3d:6f:
e8:48:cc:53:48:fe:5b:20:81:6c:d4:b4:50:64:ae:
63:f5:c5:27:ff:fb:12:fd:18:54:e2:bd:5e:6e:4d:
c5:ec:53:43:67:2b:0d:c5:b0:19:7f:d1:d2:fc:66:
b3:06:4e:ba:13:62:ac:68:ec:2c:f7:b4:7a:61:22:
ef:f2:71:83:fe:16:6a:e2:b3:4c:5f:b3:66:c4:0e:
05:c8:d1:05:5e:cb:d1:a5:9f:1d:4a:43:6b:25:20:
3d:9f:e6:3c:68:e1:9f:e2:07:04:27:be:73:05:4d:
bb:1d:67:49:5b:35:e5:9d:97:4c:4d:d4:23:cd:dd:
fb:09:bd:bd:2a:9f:14:f0:04:0c:4f:d0:2d:c9:a4:
cd:9b:02:1a:6f:1e:69:a9:66:6f:5c:57:75:03:60:
79:05:72:f4:c4:8c:16:90:58:87:a7:e3:f2:94:68:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:9F:0F:31:BA:38:B2:02:54:9F:67:ED:34:F5:D8:4E:1A:B7:78
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:363::/48
Signature Algorithm: sha256WithRSAEncryption
67:a7:6a:70:35:3a:f9:ef:6d:40:79:19:f7:6c:d6:b9:99:4b:
8a:49:b7:4b:27:fb:f1:a1:26:3f:c1:38:76:6b:50:6b:ef:68:
2d:01:d9:41:2e:e2:0d:1c:a5:38:12:ad:21:8d:a5:15:ae:7e:
05:d2:8a:f5:6c:af:6b:78:e5:e8:13:f7:39:10:9a:ce:0b:4e:
70:1b:52:4c:da:3b:40:16:a6:b8:7f:f1:f2:e0:e7:11:11:32:
01:6b:8f:80:7e:2f:64:7d:69:df:fd:e8:d1:6c:23:9a:f0:ce:
98:e7:1a:a6:3a:5f:38:56:4a:e4:e6:06:3b:47:39:7c:a2:0c:
f4:7b:fa:0e:a5:2c:50:24:6b:fb:3f:aa:45:51:28:ae:06:15:
48:16:e7:63:dc:76:4f:16:79:1b:e7:7b:28:e5:98:b3:3c:12:
bd:fb:dc:50:57:f2:4a:d1:ac:5f:cb:a2:c3:8b:af:24:22:9b:
bc:18:02:1f:e5:91:9d:03:a3:e6:2c:5f:7f:c8:09:21:29:86:
f3:5b:7e:7d:41:a4:76:35:01:2a:e8:57:d0:03:01:c0:ea:88:
ff:4b:df:6f:eb:ba:a8:20:ff:76:99:6a:57:e2:90:c2:a5:68:
06:f8:50:83:9f:00:df:9f:e6:28:dd:b8:9c:5f:6d:4e:f0:4b:
23:8e:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org