Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336653a3a2f34382d3438203d3e20323135353133.roa
File: 326130663a383563313a3336653a3a2f34382d3438203d3e20323135353133.roa (raw, json)
Hash identifier: wN/7VbLKfpe6U62dRhz51NSMEfrdd5t0QZR1fAIdUCU=
Subject key identifier: E6:7A:15:E1:B9:A0:95:94:D2:77:73:19:34:C5:A7:24:39:49:F4:0B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 0BF12C82A9FDC66E24FCC9E2F33428E60C48D104
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336653a3a2f34382d3438203d3e20323135353133.roa
Signing time: Wed 14 Feb 2024 15:31:08 +0000
ROA not before: Wed 14 Feb 2024 15:26:08 +0000
ROA not after: Wed 12 Feb 2025 15:31:08 +0000
asID: 215513
IP address blocks: 2a0f:85c1:36e::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f1:2c:82:a9:fd:c6:6e:24:fc:c9:e2:f3:34:28:e6:0c:48:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 14 15:26:08 2024 GMT
Not After : Feb 12 15:31:08 2025 GMT
Subject: CN=E67A15E1B9A09594D277731934C5A7243949F40B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:e0:dd:61:60:db:11:90:37:fd:6d:93:8d:
3d:56:ce:dc:d6:32:cf:fd:db:6c:b9:7e:db:c8:63:
7d:d9:e7:9f:cf:8a:e8:f3:5b:5b:86:e5:43:86:0d:
41:a9:2b:35:6f:fb:cf:4a:9d:45:db:5c:38:ee:e3:
59:ca:e1:ff:a8:46:62:27:f7:58:c4:81:3e:3d:b9:
ee:0b:8f:57:4b:51:e9:15:78:d1:75:ba:25:97:16:
e5:74:1c:7d:c6:80:16:90:0c:04:68:ba:2f:2d:02:
53:54:cd:9e:a5:4e:32:1d:68:e3:14:03:44:34:d5:
19:55:d7:4a:4b:df:0a:fc:80:da:7a:ff:78:b5:d1:
08:e2:64:32:b1:52:0c:6e:d7:3b:c8:52:47:1d:7c:
71:eb:cf:e2:1b:a8:13:ac:22:2a:38:d2:0d:86:9f:
99:c2:fe:81:d4:f4:a6:e5:c5:a9:62:74:0c:86:d0:
67:cf:b0:81:18:b3:f0:be:64:38:b0:e6:88:3c:78:
16:a0:57:2a:48:98:ef:a1:27:8c:0d:45:ca:78:ca:
a8:0f:f3:4d:4c:ce:ed:28:ba:10:14:3f:a1:bf:cc:
9f:5b:aa:ab:b9:71:83:92:af:03:a2:96:8e:31:93:
5a:6b:59:f1:70:c3:8b:9d:72:93:9e:c8:7c:b9:97:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:15:E1:B9:A0:95:94:D2:77:73:19:34:C5:A7:24:39:49:F4:0B
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3336653a3a2f34382d3438203d3e20323135353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36e::/48
Signature Algorithm: sha256WithRSAEncryption
91:c8:06:6d:c2:65:07:96:4a:fd:4f:1f:71:8a:ef:e2:a0:e0:
98:34:51:3c:4d:38:59:82:8d:75:15:bd:7f:bb:57:f8:8e:ab:
07:06:03:5f:d7:e6:a8:61:c9:f6:0d:0d:38:c9:c9:64:d7:5e:
0c:6f:ee:0a:7c:d8:7e:63:ed:54:2c:9d:b3:bc:c8:60:26:2a:
ff:56:33:2a:1b:34:a9:d1:f5:81:3b:09:65:26:b1:67:84:f7:
7c:0f:31:f2:b7:10:61:87:c8:92:1f:f4:e7:fc:96:0d:7e:e5:
99:01:e6:59:4c:14:91:52:b5:90:cb:3f:56:89:43:97:c9:1e:
cd:92:df:68:62:2c:c6:29:08:cd:99:6b:78:fe:15:81:ab:e3:
09:da:90:17:b8:a6:b4:09:42:ff:60:e7:21:28:a3:31:c5:d8:
16:35:c4:30:99:b8:07:73:70:03:17:4b:4a:2c:79:d6:b2:58:
94:74:a5:56:cb:dd:75:c8:56:77:9d:39:3a:4a:76:db:31:e2:
16:93:d4:fd:83:98:f6:d9:d5:64:68:6f:a8:b0:40:9e:42:9c:
04:e3:95:3c:82:32:46:ad:d4:fa:6b:a7:ec:9d:24:f3:bf:bc:
2c:4c:7d:89:ae:fb:4e:72:e1:72:81:56:1e:4f:85:02:28:35:
2c:4a:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org