Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa
File: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (raw, json)
Hash identifier: Vc0Fu3+YrlknSMqYhRWq8LILmWmCKORWZ9Ucl0R/T+k=
Subject key identifier: 7A:5E:06:14:80:D5:1F:6D:E9:AD:99:45:A5:65:96:70:B2:11:7E:E3
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 725ECAD7AE6086357A63C10C7641698857FE77CC
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa
Signing time: Mon 19 Feb 2024 11:21:59 +0000
ROA not before: Mon 19 Feb 2024 11:16:59 +0000
ROA not after: Mon 17 Feb 2025 11:21:59 +0000
asID: 215470
IP address blocks: 2a0f:85c1:390::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5e:ca:d7:ae:60:86:35:7a:63:c1:0c:76:41:69:88:57:fe:77:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Feb 19 11:16:59 2024 GMT
Not After : Feb 17 11:21:59 2025 GMT
Subject: CN=7A5E061480D51F6DE9AD9945A5659670B2117EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e2:e1:ee:4d:58:9b:af:08:11:0b:86:07:20:
7f:28:6f:92:2d:95:15:42:9d:e7:d2:7c:99:c8:99:
07:ac:55:62:c3:3f:05:e7:62:47:59:9f:34:02:7d:
24:72:56:b8:3b:39:33:28:8c:34:42:19:26:a0:85:
04:e7:c0:83:82:e7:e7:9b:36:b1:3a:21:94:33:df:
b3:aa:08:57:57:b4:56:36:ef:92:7b:ca:0d:b3:e5:
87:ef:5d:9e:95:cc:c6:ef:0a:cd:90:26:99:d9:c0:
ed:6c:ce:b3:91:5b:5b:fb:6a:7f:38:c3:e9:0a:4e:
b4:3b:76:8f:e1:9f:50:77:14:66:33:2e:13:17:16:
98:d9:85:6b:17:94:e4:99:96:15:87:ad:c5:ab:36:
c9:4a:74:7a:40:b7:4b:af:93:91:4c:89:6b:4f:36:
ab:66:cf:d3:95:3a:76:4f:00:b3:94:ec:ec:28:1b:
35:91:c2:3b:ab:50:6a:7a:d7:e2:78:4a:7d:8b:4d:
5d:25:7a:71:89:fe:21:e5:8b:dc:79:8c:32:83:e8:
06:44:59:47:5e:e0:ac:cd:60:27:21:0a:2e:8f:65:
2c:35:61:64:cd:75:2a:75:e7:1b:c3:fa:2f:c6:2d:
a4:96:33:96:f8:b3:5c:78:0c:fd:5e:b3:58:06:f9:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:06:14:80:D5:1F:6D:E9:AD:99:45:A5:65:96:70:B2:11:7E:E3
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:390::/48
Signature Algorithm: sha256WithRSAEncryption
94:ba:cd:3e:27:5c:d6:49:c5:20:01:f2:bd:76:d9:f7:10:38:
75:50:9b:0e:d6:61:be:42:7d:8d:9f:a5:ba:3c:db:5b:3d:7d:
1a:1e:01:dd:1d:43:a5:f2:ba:f1:04:57:ed:96:c2:a6:0d:a0:
74:a7:97:55:90:fd:87:62:b4:c7:08:bc:13:c5:54:79:7c:98:
42:a1:f4:08:d7:1a:be:80:80:8f:f3:9d:ea:ac:b5:55:43:9b:
aa:80:6a:80:41:61:0b:10:0a:b2:ab:aa:f1:12:0b:45:91:d3:
dd:51:bf:67:4f:33:a1:8d:67:49:a7:96:ef:75:c6:d4:98:1f:
aa:4d:9a:89:04:a3:c9:7f:94:57:1a:a8:f0:9b:5c:c9:2d:55:
58:e9:fa:17:60:8d:fa:b6:e7:47:68:bb:07:9c:e6:11:b0:e7:
9d:a2:3e:b6:e1:1c:2c:01:c0:9c:88:15:8c:c7:8a:25:1d:48:
a8:3b:9a:9a:54:d3:b2:ee:c2:20:32:f9:10:e1:91:04:14:04:
6a:b8:de:b2:01:a5:2d:ad:c1:88:4b:78:e7:d6:f1:56:89:ea:
74:2d:35:6b:48:1d:a6:9c:fe:af:48:78:e0:64:3d:fb:a7:61:
53:12:c2:c5:98:f0:52:b6:17:5c:4a:f6:6e:3e:85:aa:43:17:
f8:5a:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org