Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336383a3a2f34382d3438203d3e20323135353230.roa
File: 326130663a383563313a3336383a3a2f34382d3438203d3e20323135353230.roa (raw, json)
Hash identifier: UQXtAR1L3JokkUDEwpqP1pSHUf3DPGO44Zo0RcnBK50=
Subject key identifier: 1B:6B:17:FB:3E:8E:24:2F:3E:FC:4D:78:1C:B0:7A:EF:99:38:3B:9B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1F4771E86FAC0339FFB95916D08E0A9EFC9D2B28
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336383a3a2f34382d3438203d3e20323135353230.roa
Signing time: Mon 19 Feb 2024 00:45:53 +0000
ROA not before: Mon 19 Feb 2024 00:40:53 +0000
ROA not after: Mon 17 Feb 2025 00:45:53 +0000
asID: 215520
IP address blocks: 2a0f:85c1:368::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:47:71:e8:6f:ac:03:39:ff:b9:59:16:d0:8e:0a:9e:fc:9d:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 19 00:40:53 2024 GMT
Not After : Feb 17 00:45:53 2025 GMT
Subject: CN=1B6B17FB3E8E242F3EFC4D781CB07AEF99383B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:7c:eb:c6:dd:12:d0:c2:be:1f:1f:f6:51:
e2:d8:bf:6d:c0:30:9b:6f:f2:88:68:6f:8a:d9:6d:
7e:28:7e:b1:a3:c1:4d:bd:68:c9:09:e3:85:6e:f6:
5b:48:fb:60:23:d1:e8:3c:69:d0:ee:b1:5d:ee:22:
0b:66:44:08:31:a0:ae:bf:5c:c5:2a:87:fa:13:42:
ba:fa:cc:50:75:fd:88:09:f6:ee:0e:2b:7b:00:53:
5f:b3:c1:4b:68:4f:21:5e:f7:3d:e9:72:cd:56:1a:
1e:86:e4:c5:9f:38:44:f7:51:a7:e8:f5:cd:c9:73:
cc:dc:11:36:80:34:3e:0a:45:a4:ef:98:31:1b:29:
46:91:68:15:17:cf:f7:cf:32:46:92:ec:52:d0:48:
b1:29:c0:0f:0b:33:b0:a5:05:1d:66:68:3a:a4:98:
ca:d3:1c:8f:0a:7f:b1:2b:29:46:6a:0d:da:b0:23:
31:d4:00:95:34:f6:a4:16:3e:e8:4a:cb:7c:4e:c4:
1e:7d:11:e7:ef:b0:77:6b:a0:4d:36:3d:76:f9:aa:
da:64:64:cd:21:af:34:df:af:66:6d:ec:ea:b9:de:
94:63:36:29:e8:27:98:15:52:1e:b9:21:93:c4:f8:
38:03:92:52:eb:7a:67:7e:62:ca:52:b4:ac:b3:a1:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:17:FB:3E:8E:24:2F:3E:FC:4D:78:1C:B0:7A:EF:99:38:3B:9B
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336383a3a2f34382d3438203d3e20323135353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:368::/48
Signature Algorithm: sha256WithRSAEncryption
19:b4:63:db:3a:65:ca:25:6b:0f:1b:06:e9:3f:d9:de:6d:f8:
5d:41:bf:db:b8:c4:ca:0b:a6:b9:7c:28:21:96:96:05:8d:b0:
24:d8:9c:5c:c5:e8:ac:35:3a:4a:26:db:17:e3:d3:10:8e:57:
d0:8c:d6:e6:45:37:dd:0c:8b:e8:85:81:f5:b3:72:71:ec:ed:
39:cd:d6:67:39:02:ba:af:48:f5:df:3b:35:24:9c:3f:16:ce:
18:66:80:fb:0e:a8:2f:09:59:e0:16:a3:e3:78:98:b7:86:ba:
2a:8f:f1:c1:3b:29:b7:62:80:d5:d0:ce:9b:a6:b6:b3:5b:14:
da:2e:87:13:87:29:fc:b8:a9:93:6e:1e:6e:ff:e1:4b:43:f4:
9a:0b:dd:59:5b:de:8c:84:52:84:60:e7:78:3c:c7:29:2c:53:
53:3f:da:68:27:4e:30:89:35:98:a5:c6:d3:53:bc:c5:b9:1e:
1a:43:c5:a9:40:99:49:96:bb:34:51:3f:3c:64:06:86:4f:af:
f2:66:69:b3:48:7d:70:f7:d8:21:0a:74:1f:0e:fe:d0:d3:14:
cd:5e:9f:8b:80:40:e0:b2:41:d0:25:93:2c:9e:32:9f:fe:96:
97:cf:04:64:2a:88:1e:9c:c3:9e:61:c7:41:aa:a0:9f:54:ae:
e0:91:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org