Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339633a3a2f34382d3438203d3e20323136333130.roa
File: 326130663a383563313a3339633a3a2f34382d3438203d3e20323136333130.roa (raw, json)
Hash identifier: NQX8sJdj2Oy/QBlWX3sL+WV7vYRtGZCuN/ShYLqmwgU=
Subject key identifier: AA:58:E4:71:86:43:A4:BF:68:A9:47:26:BC:10:52:DF:AF:71:1D:F5
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 6B543EAD6A2B304ABBFD0FF55D2081E5FF5D02C5
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339633a3a2f34382d3438203d3e20323136333130.roa
Signing time: Wed 20 Mar 2024 16:14:53 +0000
ROA not before: Wed 20 Mar 2024 16:09:53 +0000
ROA not after: Wed 19 Mar 2025 16:14:53 +0000
asID: 216310
IP address blocks: 2a0f:85c1:39c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:54:3e:ad:6a:2b:30:4a:bb:fd:0f:f5:5d:20:81:e5:ff:5d:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 20 16:09:53 2024 GMT
Not After : Mar 19 16:14:53 2025 GMT
Subject: CN=AA58E4718643A4BF68A94726BC1052DFAF711DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:72:fb:81:9b:61:98:2d:70:16:61:6c:cb:
c8:e9:69:9e:ab:12:7e:79:41:ca:68:02:28:40:9e:
35:87:43:b0:d0:da:3f:5c:bb:57:83:4e:98:ba:cb:
4b:25:33:45:3e:8a:86:11:7a:90:34:ea:f8:9c:3f:
08:29:7e:ed:f3:3a:ed:f7:df:1e:ac:9d:86:cb:f9:
bf:79:ff:e4:48:fe:e5:fb:85:69:0a:1d:62:7f:d8:
ad:e2:d2:4f:5c:44:d2:07:53:22:f2:c4:f1:a3:70:
e3:2f:c6:95:c5:28:a6:9f:37:3f:ea:15:f9:65:b2:
a8:a8:fd:c8:92:fa:cb:86:81:ba:52:86:9b:cc:59:
20:42:50:da:ba:4d:a0:84:ca:ea:71:90:d2:ce:ad:
00:da:a7:2a:cf:6d:a3:dd:d8:cd:19:07:87:24:8a:
6f:a4:ee:64:ca:56:b7:0e:ba:ee:c8:db:1e:f7:24:
a7:48:37:9d:40:4c:fa:ea:fa:83:7e:f1:b5:cd:8e:
e6:f2:72:a6:5c:b6:aa:33:0b:b9:1c:c0:1b:bf:04:
cd:78:3b:a9:0e:c1:42:1a:e5:2e:e0:89:92:12:c9:
8c:22:8e:8f:48:1c:87:f0:b5:81:8f:a4:33:e4:b2:
57:c2:fc:af:85:d7:25:05:34:3e:4d:c8:97:73:d5:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:E4:71:86:43:A4:BF:68:A9:47:26:BC:10:52:DF:AF:71:1D:F5
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339633a3a2f34382d3438203d3e20323136333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39c::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8a:c9:59:3b:6b:cc:72:40:6f:c1:c3:2c:b9:5e:d9:5d:54:
48:69:8e:a8:e8:61:10:d0:88:8f:c7:11:c2:40:48:b7:73:88:
e2:7a:3c:fd:6d:a9:5e:26:c7:c8:6b:dd:b0:14:4a:f4:58:1a:
84:05:8e:f3:0c:a9:c1:75:d4:48:39:94:85:58:33:eb:28:ce:
e5:e8:77:5d:5b:f5:1f:c4:0d:a6:81:4f:12:cf:e3:7a:ca:aa:
8c:3e:77:80:ac:0a:e0:2b:80:26:15:54:69:13:f5:4c:8a:ff:
e2:64:bd:5d:3d:5d:ac:70:f5:4e:88:0d:d6:33:01:01:08:b8:
34:2c:87:96:88:f8:10:b0:15:72:48:39:11:7c:b9:f4:94:8e:
e5:fb:e8:23:1a:1d:65:14:b1:3a:c8:b1:0a:93:cd:1b:92:d2:
ec:49:94:f1:e8:e5:81:d2:34:5e:49:15:6e:c6:9a:fa:bc:7e:
39:79:ff:38:3a:42:b2:75:24:93:84:c1:82:54:ff:d8:17:96:
33:46:b6:6c:25:75:11:e9:69:36:cf:fa:bd:0c:2f:ee:5f:5b:
60:f7:b8:75:a4:bf:bd:e5:0a:85:f3:fb:c4:a7:20:09:cc:51:
48:4d:c3:a9:1a:ee:7a:a8:0f:e7:99:43:3b:28:a6:dc:ef:56:
80:2d:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org