Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339353a3a2f34382d3438203d3e20323135333832.roa
File: 326130663a383563313a3339353a3a2f34382d3438203d3e20323135333832.roa (raw, json)
Hash identifier: NIZiKMS9bugfcIxSaEXcvwieqTX/QzlAUWhncLlFt6g=
Subject key identifier: CB:9D:DE:65:80:66:A6:78:52:1D:BF:1B:BE:25:44:AE:43:5A:69:4E
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5E3773396CDD49317D50F30EE7C5B2153D861EB7
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339353a3a2f34382d3438203d3e20323135333832.roa
Signing time: Mon 04 Mar 2024 15:48:40 +0000
ROA not before: Mon 04 Mar 2024 15:43:40 +0000
ROA not after: Mon 03 Mar 2025 15:48:40 +0000
asID: 215382
IP address blocks: 2a0f:85c1:395::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:37:73:39:6c:dd:49:31:7d:50:f3:0e:e7:c5:b2:15:3d:86:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 4 15:43:40 2024 GMT
Not After : Mar 3 15:48:40 2025 GMT
Subject: CN=CB9DDE658066A678521DBF1BBE2544AE435A694E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:6d:f2:ab:13:c3:ae:62:67:a3:76:1e:08:
76:18:c9:8d:42:c8:09:10:e4:db:70:c9:1e:3d:18:
8c:ee:2f:e3:75:36:02:6e:c0:9e:12:5f:c5:bc:75:
cf:a7:e6:7c:51:b4:3c:11:35:a6:dc:8f:b2:6e:fb:
3f:b4:a7:8a:10:6b:82:1c:cc:15:40:40:f2:c5:83:
d4:d6:c7:73:cc:84:fc:19:4d:29:f8:02:39:5d:9b:
45:ed:9e:ed:73:b4:3a:c7:87:ce:77:af:3d:70:59:
2d:f7:25:56:cf:61:dd:95:cc:bf:73:d8:dd:54:61:
8f:0f:1d:58:75:6e:1c:f7:7a:cf:b3:5d:a0:eb:fe:
a3:46:46:8a:08:00:7d:35:35:6f:5c:e9:a4:66:39:
e0:c7:e2:4d:b8:cd:7a:c1:6d:62:b1:c8:51:ce:61:
95:92:66:ed:f0:d0:6f:e8:5b:28:62:f8:f6:01:a7:
eb:6a:29:37:22:8a:8c:1b:f6:47:32:fc:6b:22:33:
a1:91:e6:68:e9:31:d8:44:a6:11:b4:93:f7:d4:71:
c0:a4:6e:96:35:8d:27:d5:12:95:59:5a:d7:57:f9:
65:04:00:11:e2:55:6e:d2:2d:69:38:14:03:65:0a:
cc:ae:b6:40:a1:15:ca:c5:65:ce:ab:35:70:dc:dd:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:DE:65:80:66:A6:78:52:1D:BF:1B:BE:25:44:AE:43:5A:69:4E
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339353a3a2f34382d3438203d3e20323135333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:395::/48
Signature Algorithm: sha256WithRSAEncryption
6e:07:dd:a1:3b:60:8e:f4:7b:8a:35:c5:37:63:08:0c:b0:85:
98:c0:31:c7:01:7f:d5:26:36:34:43:08:7f:6b:33:d2:e8:3f:
1b:31:d4:b3:aa:22:1f:e0:3d:b7:06:ad:6c:17:8d:a5:be:68:
c1:39:96:86:2d:2a:90:af:3e:56:06:f0:c2:9a:ad:b4:26:0d:
ba:88:71:5f:06:50:8d:13:1e:7c:4a:61:34:d2:2c:e9:5c:43:
0e:f1:a5:88:12:57:9c:36:a3:ce:60:fd:1a:31:ce:7f:52:30:
cb:bc:b9:93:98:ce:0a:5e:b7:a4:5b:66:38:9c:c0:61:be:cb:
08:d1:52:27:bb:06:c9:d5:e7:0c:ed:e8:87:80:91:05:f0:b0:
a6:06:9e:e9:46:cf:a2:c3:2b:8b:92:5a:6b:f9:4d:0f:cd:ee:
63:ce:b7:41:52:21:37:4f:e0:30:63:4f:3f:01:19:3e:ce:b4:
ec:05:48:60:55:03:c9:8c:5b:eb:11:dc:ac:9f:03:e0:c5:31:
69:0a:8b:8d:87:e1:1d:9c:ac:61:e8:5f:10:55:4a:4c:26:f0:
a5:d2:21:f8:6c:41:68:e2:5c:69:7e:20:1f:9b:5f:6b:70:c7:
19:f5:e6:e5:57:d1:f1:1a:99:75:a2:ce:8d:77:01:05:41:a4:
08:e2:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org