Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3338303a3a2f34342d3434203d3e20323135353136.roa
File: 326130663a383563313a3338303a3a2f34342d3434203d3e20323135353136.roa (raw, json)
Hash identifier: XqS7tKtulC4Bc0DD892VC1e4rHfY6R+tO9082IXueZU=
Subject key identifier: C6:3C:95:A1:E3:A5:15:A7:2D:56:6F:C1:3B:BE:98:1B:78:48:34:D1
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 0FDA3D976379A65B63E5012F4A1276C76DC2EB70
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3338303a3a2f34342d3434203d3e20323135353136.roa
Signing time: Sun 18 Feb 2024 16:35:35 +0000
ROA not before: Sun 18 Feb 2024 16:30:35 +0000
ROA not after: Sun 16 Feb 2025 16:35:35 +0000
asID: 215516
IP address blocks: 2a0f:85c1:380::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:da:3d:97:63:79:a6:5b:63:e5:01:2f:4a:12:76:c7:6d:c2:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 18 16:30:35 2024 GMT
Not After : Feb 16 16:35:35 2025 GMT
Subject: CN=C63C95A1E3A515A72D566FC13BBE981B784834D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:89:5e:95:64:5c:32:98:a9:e4:eb:fd:38:
26:9a:fa:eb:ae:a4:21:5c:5c:4c:23:97:7f:c4:86:
2a:b2:b4:7a:ca:7f:d6:57:94:a1:cb:f9:94:58:23:
fd:0b:ec:d7:05:5c:69:1d:08:17:a6:9a:29:7a:2c:
c6:08:23:b9:a2:e6:fe:9b:51:73:de:a2:f1:1e:07:
79:59:a5:86:e1:83:fe:ad:4f:0e:7e:9e:ef:74:db:
e0:ec:58:e3:86:3d:12:83:f6:5b:98:51:20:d8:ca:
34:a3:54:fb:93:04:50:59:10:67:c8:7a:ac:69:67:
a5:5c:7d:8f:4d:f4:e2:07:1e:5e:55:47:51:08:07:
c0:ce:b8:2b:3a:d9:c0:8a:11:14:62:e3:06:e8:2a:
e9:fb:b3:b3:ab:e9:22:bf:61:68:f5:6e:d9:d1:3f:
e4:d8:cc:8c:4a:56:81:b1:9b:53:14:dd:6f:bf:09:
51:15:68:ba:4a:51:10:c6:49:35:2d:3e:2a:0e:fe:
dd:71:ef:a3:67:b8:22:a0:09:cf:77:06:0f:88:28:
8f:de:cf:c3:60:01:28:a1:b6:6a:6e:b9:25:21:f7:
94:ac:ef:cf:98:f0:3f:34:5b:12:80:24:34:7c:52:
8d:3b:4b:87:de:8e:fb:8c:31:c4:08:e6:32:b6:0f:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:95:A1:E3:A5:15:A7:2D:56:6F:C1:3B:BE:98:1B:78:48:34:D1
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3338303a3a2f34342d3434203d3e20323135353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:380::/44
Signature Algorithm: sha256WithRSAEncryption
25:26:64:8c:90:ed:be:ce:85:79:3f:19:ea:7a:02:37:6a:b2:
fc:1f:0a:63:25:17:60:ee:1a:a1:5a:33:cc:df:98:02:99:01:
7b:9a:72:c3:66:90:5a:8f:71:79:23:06:de:87:9c:11:fc:67:
26:87:7f:df:bf:2e:42:bd:a3:52:be:89:5f:4e:2d:e2:8f:3c:
74:f7:30:ba:18:44:1e:67:5a:3c:6a:c7:e6:98:9c:57:47:22:
d7:b5:73:00:aa:28:07:ff:14:0c:0c:37:39:b7:dd:aa:98:29:
b5:1b:ff:f1:75:b4:5e:d7:5c:5f:04:03:e2:7a:d4:a0:1d:25:
bb:e0:3c:5d:8d:f6:96:9a:a9:b2:74:d8:ef:bb:d3:6c:5e:98:
fd:8e:88:a4:03:0a:d7:e4:53:1e:8f:53:11:58:31:f8:6d:64:
1d:ce:8d:06:22:e5:eb:05:8a:8e:b9:6c:6f:5d:bc:a0:5f:fb:
8e:ea:ae:47:e4:08:cd:07:44:b9:31:b6:82:11:7d:5a:57:39:
48:b1:e3:74:dd:2a:db:39:48:86:95:aa:3d:56:38:71:3c:f8:
a3:cd:f6:c4:8d:4b:51:26:0b:5b:0e:f2:5d:18:63:0c:0a:9a:
27:40:31:19:b6:f8:06:c1:c0:65:d3:18:84:eb:0b:5b:90:f1:
e8:36:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 21:03:48 2024 by rpki-client on console-ams.rpki-client.org