Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339663a3a2f34382d3438203d3e20323135323535.roa
File: 326130663a383563313a3339663a3a2f34382d3438203d3e20323135323535.roa (raw, json)
Hash identifier: JXoNVKdO1V3rVg0+mGsKp/yR2T02yAjZS1iGhl1FAjA=
Subject key identifier: E9:8F:D2:84:54:4A:63:7F:D3:29:C3:68:89:9F:A1:75:0D:1F:51:E1
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5BD4A06A738F36200C560B85116D6A8B303D81BB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339663a3a2f34382d3438203d3e20323135323535.roa
Signing time: Wed 27 Mar 2024 00:27:12 +0000
ROA not before: Wed 27 Mar 2024 00:22:12 +0000
ROA not after: Wed 26 Mar 2025 00:27:12 +0000
asID: 215255
IP address blocks: 2a0f:85c1:39f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d4:a0:6a:73:8f:36:20:0c:56:0b:85:11:6d:6a:8b:30:3d:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 27 00:22:12 2024 GMT
Not After : Mar 26 00:27:12 2025 GMT
Subject: CN=E98FD284544A637FD329C368899FA1750D1F51E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:a3:b6:ae:9e:87:b4:63:ed:94:c2:47:0c:
60:a1:0f:a1:96:a6:cb:a6:87:c2:11:64:6a:4d:42:
62:5c:e7:fa:76:e9:57:f4:9f:3a:de:fb:47:e0:5a:
94:c9:ec:9d:33:14:01:d6:e3:ea:c1:50:26:bc:3b:
75:ec:49:b0:bf:fa:d6:5f:b3:41:9d:d6:2a:ee:09:
a0:d8:f0:57:5a:cb:58:9d:da:bc:96:18:3f:6b:d7:
38:f5:4b:dd:69:6e:96:98:34:18:85:ee:16:83:0a:
f1:45:30:81:24:2a:d7:a2:db:6e:87:e4:22:88:bf:
39:73:4a:b0:ca:bb:c0:33:b3:7f:5a:27:df:2a:8a:
9d:94:e2:f2:8a:36:9d:da:ae:7d:01:98:fc:49:b6:
6d:a5:9d:df:d8:c8:41:54:ea:db:db:b9:3c:4b:eb:
e3:41:32:6d:34:2b:f8:b9:be:5f:97:e0:cf:39:e9:
7d:fb:09:96:3f:9f:f4:66:f0:96:5f:b9:e4:b4:11:
0a:fe:d9:29:a9:bb:9f:c3:54:cb:4a:bb:28:1c:92:
d4:15:3e:33:1b:70:83:a1:7e:ca:8c:cc:88:4d:80:
af:83:e5:ef:e2:06:0e:b4:d5:a1:82:8a:e3:8c:53:
b2:87:d8:91:a1:f7:ea:64:b6:16:88:97:de:e8:dd:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:D2:84:54:4A:63:7F:D3:29:C3:68:89:9F:A1:75:0D:1F:51:E1
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339663a3a2f34382d3438203d3e20323135323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39f::/48
Signature Algorithm: sha256WithRSAEncryption
75:4f:f9:b9:3f:b6:9e:bd:3b:c9:79:80:95:96:7e:a4:24:6b:
af:3a:06:e8:f4:5d:15:82:0d:9d:4f:01:6d:89:dd:f9:dc:54:
b9:f2:dc:fc:4b:c1:ac:46:4e:4d:fe:ef:10:8f:06:aa:9e:99:
7e:52:2e:a0:e2:29:b9:52:94:39:b7:55:34:34:46:98:d3:41:
b8:0c:a6:33:fa:8d:c6:35:6e:4a:bd:ff:95:aa:6c:65:4f:be:
50:ff:7c:44:91:0b:ad:cc:f8:e6:8d:be:24:61:ee:0c:3a:42:
d4:bc:1d:97:89:ac:d3:43:31:5b:ee:9d:52:5e:d8:92:3d:f6:
39:0e:96:66:f7:4e:83:df:38:47:38:20:5c:4f:5d:39:09:8b:
a2:c8:27:8c:0e:5f:0f:cf:59:e0:9e:4c:e4:72:7e:34:2d:9f:
6f:b0:fa:7c:b6:f6:9e:9f:5e:56:37:0e:f7:67:01:fe:b1:35:
9a:90:3e:7c:a9:1f:2a:58:26:59:67:d3:a4:c2:f7:e5:0c:d3:
6b:6c:1d:c0:f6:a5:19:be:d5:5a:42:b0:2e:ac:5f:b0:5f:f1:
cc:0c:9b:5f:9b:f5:d1:e9:8b:97:c0:6a:fe:28:46:3e:e1:86:
dd:60:10:f2:d3:69:3d:b0:ac:4d:ac:23:bd:27:6b:c4:5a:f6:
ed:e4:03:99
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUW9SganOPNiAMVguFEW1qizA9gbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDAzMjcwMDIyMTJaFw0yNTAzMjYwMDI3MTJaMDMxMTAvBgNV
BAMTKEU5OEZEMjg0NTQ0QTYzN0ZEMzI5QzM2ODg5OUZBMTc1MEQxRjUxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcKO2rp6HtGPtlMJHDGChD6GW
psumh8IRZGpNQmJc5/p26Vf0nzre+0fgWpTJ7J0zFAHW4+rBUCa8O3XsSbC/+tZf
s0Gd1iruCaDY8Fday1id2ryWGD9r1zj1S91pbpaYNBiF7haDCvFFMIEkKtei226H
5CKIvzlzSrDKu8Azs39aJ98qip2U4vKKNp3arn0BmPxJtm2lnd/YyEFU6tvbuTxL
6+NBMm00K/i5vl+X4M856X37CZY/n/Rm8JZfueS0EQr+2Smpu5/DVMtKuygcktQV
PjMbcIOhfsqMzIhNgK+D5e/iBg601aGCiuOMU7KH2JGh9+pkthaIl97o3VEDAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU6Y/ShFRKY3/TKcNoiZ+hdQ0fUeEwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzM5NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMjM1MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA58wDQYJKoZIhvcNAQELBQADggEBAHVP+bk/tp69O8l5gJWW
fqQka686Buj0XRWCDZ1PAW2J3fncVLny3PxLwaxGTk3+7xCPBqqemX5SLqDiKblS
lDm3VTQ0RpjTQbgMpjP6jcY1bkq9/5WqbGVPvlD/fESRC63M+OaNviRh7gw6QtS8
HZeJrNNDMVvunVJe2JI99jkOlmb3ToPfOEc4IFxPXTkJi6LIJ4wOXw/PWeCeTORy
fjQtn2+w+ny29p6fXlY3DvdnAf6xNZqQPnypHypYJlln06TC9+UM02tsHcD2pRm+
1VpCsC6sX7Bf8cwMm1+b9dHpi5fAav4oRj7hht1gEPLTaT2wrE2sI70na8Ra9u3k
A5k=
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org