Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336363a3a2f34382d3438203d3e20323135353136.roa
File: 326130663a383563313a3336363a3a2f34382d3438203d3e20323135353136.roa (raw, json)
Hash identifier: jjNKP9CKMI3bayZ/q/xgM7QzgH8QgIneNA3NuUu5fIY=
Subject key identifier: 50:75:B8:19:97:1B:A3:1E:10:10:5B:74:3F:64:E9:F4:3D:C3:81:CB
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 483CBBA1257CB6A62750FF466BEF3F2050014414
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336363a3a2f34382d3438203d3e20323135353136.roa
Signing time: Sun 18 Feb 2024 16:35:48 +0000
ROA not before: Sun 18 Feb 2024 16:30:48 +0000
ROA not after: Sun 16 Feb 2025 16:35:48 +0000
asID: 215516
IP address blocks: 2a0f:85c1:366::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3c:bb:a1:25:7c:b6:a6:27:50:ff:46:6b:ef:3f:20:50:01:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 18 16:30:48 2024 GMT
Not After : Feb 16 16:35:48 2025 GMT
Subject: CN=5075B819971BA31E10105B743F64E9F43DC381CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:e9:ab:4e:ac:32:4e:64:49:eb:ee:12:6c:
40:a2:9a:66:b9:0d:db:e8:27:69:ab:6d:0a:37:08:
6a:23:cf:83:ca:53:d5:c3:db:30:66:c0:1f:47:bd:
dc:96:b4:84:74:fe:03:ba:e9:4e:1c:26:1a:ed:1f:
ad:4e:70:c6:cd:ce:6b:c0:b6:f2:df:13:0d:40:6f:
3c:87:6b:85:b1:e0:a8:c7:7a:b0:a9:0b:26:c1:02:
09:f8:de:4c:bd:bf:fa:2d:59:61:1b:8e:15:a5:db:
cb:a3:44:80:24:01:64:c1:b6:c9:c9:81:42:e9:a2:
8a:02:34:6d:b1:e7:af:ba:d6:48:c6:a7:77:6d:ad:
93:00:c8:80:3a:69:c6:27:bf:f9:1a:42:44:cb:9b:
41:a4:f6:a7:d5:27:f9:56:ca:a6:dc:b5:6b:1a:e9:
b4:99:d9:37:dc:e3:6b:c3:a7:c8:fc:99:e3:90:1a:
35:fb:5a:c3:b3:1a:08:63:fe:24:16:47:29:99:6e:
0b:da:bb:85:dc:45:14:88:1a:14:f5:ff:fe:70:70:
a6:c3:a4:ed:46:41:67:2d:28:d9:1f:fc:f5:23:b5:
3a:71:4b:9c:90:2d:c7:0d:b4:4a:19:13:a1:73:a3:
d1:e4:75:e1:50:3d:52:33:6c:15:c8:ee:a5:57:36:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:B8:19:97:1B:A3:1E:10:10:5B:74:3F:64:E9:F4:3D:C3:81:CB
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336363a3a2f34382d3438203d3e20323135353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:366::/48
Signature Algorithm: sha256WithRSAEncryption
b9:77:29:10:db:75:4e:01:dc:35:60:29:31:31:ce:b0:94:2d:
07:c3:a5:87:b2:80:c4:34:7e:61:fd:2d:0d:34:7a:52:14:54:
aa:e2:dc:3b:cd:ea:ce:c7:21:83:26:9c:c7:51:10:af:a3:55:
d8:32:60:60:53:a9:cb:4a:3d:dd:86:02:99:18:db:61:9a:34:
c3:76:24:68:a9:03:3c:54:cf:9c:4e:6e:42:c2:59:dd:69:96:
a7:e8:70:4b:53:72:e6:17:96:13:3b:09:a3:59:08:13:08:08:
b1:8e:7d:7f:cc:f7:6a:a7:99:50:6b:d2:83:a9:7c:51:2a:ac:
43:d2:57:05:29:e0:36:d8:f7:fa:eb:47:78:b0:de:45:d6:b4:
6f:2f:1f:1f:c7:79:19:8d:14:01:c9:56:4a:78:30:ad:66:56:
50:1c:b6:d6:db:a1:36:8b:fc:a1:80:e0:a4:25:b9:68:54:58:
a5:78:ab:dc:de:f9:90:f2:15:8a:7c:19:4b:4c:92:e8:7b:91:
b7:77:a0:c9:c7:af:87:ad:cb:31:5a:98:ca:0a:72:6d:e0:7a:
dc:b9:1d:5b:59:dd:76:ee:e8:78:a9:40:ce:77:0c:4e:8c:22:
65:f1:bb:d4:a2:ca:88:77:66:60:45:88:e2:cb:de:dc:1e:7b:
dd:ac:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org