Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361363a3a2f34382d3438203d3e20323135323233.roa
File: 326130663a383563313a3361363a3a2f34382d3438203d3e20323135323233.roa (raw, json)
Hash identifier: PrQSiH9XmG+skrQ6HdFxHuzIQky6Kp73v64c0aZ5yzQ=
Subject key identifier: E2:2E:A0:3A:8E:D9:74:F7:74:F6:EF:9B:B0:BB:A0:6D:BA:BA:A6:E7
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 405EBE53542416BF3ACC50769B1469433339F40A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361363a3a2f34382d3438203d3e20323135323233.roa
Signing time: Wed 27 Mar 2024 15:18:17 +0000
ROA not before: Wed 27 Mar 2024 15:13:17 +0000
ROA not after: Wed 26 Mar 2025 15:18:17 +0000
asID: 215223
IP address blocks: 2a0f:85c1:3a6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5e:be:53:54:24:16:bf:3a:cc:50:76:9b:14:69:43:33:39:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 27 15:13:17 2024 GMT
Not After : Mar 26 15:18:17 2025 GMT
Subject: CN=E22EA03A8ED974F774F6EF9BB0BBA06DBABAA6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:4b:33:75:5a:ab:d4:eb:be:77:bf:99:6f:
c0:07:46:d3:33:8f:15:d3:cf:0d:81:12:d7:45:9d:
74:a3:0b:f9:4d:9d:22:d6:41:59:c0:6c:f5:99:0c:
04:07:7b:2d:03:bd:b6:a2:99:9e:1a:02:19:8c:e7:
1b:ab:ac:ef:c2:d0:99:aa:89:07:0c:7f:d3:ee:0b:
6c:e8:cf:61:92:74:c4:b9:66:5f:c6:7f:d8:99:fc:
95:33:db:72:f1:43:f3:b1:0c:24:e0:91:0f:42:39:
c2:e9:e6:8c:f1:e6:8f:ba:75:0d:e0:6d:06:aa:c7:
ce:2d:2d:04:b5:23:2a:10:ab:f5:f6:c3:63:56:75:
3b:bc:ac:d2:3b:fd:fb:6e:23:4a:bc:b6:4b:aa:2b:
3a:a2:43:b7:90:cb:57:cf:27:45:50:e9:1f:c4:43:
1a:8f:4c:d7:dd:88:ff:ab:87:af:19:1b:a9:4b:10:
ae:37:e5:03:20:71:a5:4a:63:ba:f1:9c:d5:a1:dd:
73:7e:02:09:31:59:48:b4:72:1c:93:9d:9a:bd:70:
82:06:6c:d8:43:15:9e:7e:b1:65:8f:a8:41:8e:37:
bb:7b:c9:9f:3f:0e:4b:80:b5:9d:48:cf:16:9a:c5:
88:33:c2:73:6d:fa:02:2e:66:33:cb:b8:30:e2:51:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:A0:3A:8E:D9:74:F7:74:F6:EF:9B:B0:BB:A0:6D:BA:BA:A6:E7
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361363a3a2f34382d3438203d3e20323135323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a6::/48
Signature Algorithm: sha256WithRSAEncryption
aa:d0:dc:b2:c4:d9:1f:fe:63:14:7c:f4:07:71:53:25:91:54:
3f:48:f3:e8:60:fd:c7:1e:2a:b6:d6:94:bc:c2:fd:7a:f2:a6:
33:52:c5:43:66:52:d8:fb:e0:18:60:4a:7a:b6:09:ce:61:68:
01:24:83:9f:5a:50:5c:3a:3a:9a:81:2c:ed:b9:46:bf:7d:a5:
74:c5:73:27:4c:21:b2:54:ec:a6:13:31:39:f4:c6:0d:8c:d2:
22:36:3b:e2:f4:50:1c:8e:43:c5:42:c0:d9:48:b8:18:34:9b:
07:d3:bf:f8:2f:d7:da:da:2b:7b:df:83:ef:db:23:c7:36:c9:
93:f4:e6:d0:53:a6:59:c9:d5:e9:56:da:44:22:14:3e:bd:8e:
4f:92:e5:c7:ea:e8:b9:71:be:c3:84:d3:2b:c9:c5:08:87:ca:
0b:be:b4:2f:e7:20:02:cc:64:a1:56:4f:36:32:aa:0e:e3:c7:
98:5f:db:77:4a:dd:f9:ae:e2:ed:e2:49:21:00:4c:59:88:ae:
77:a8:fa:9a:86:f5:43:cc:ba:c4:b5:13:af:ca:f8:21:4f:17:
05:d9:6b:32:ca:71:0f:a9:a5:85:e1:b9:6d:ea:7b:37:50:64:
34:80:09:0c:c9:99:76:03:d2:42:2d:eb:80:c8:72:78:bd:a7:
6a:21:ea:b4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUQF6+U1QkFr86zFB2mxRpQzM59AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDAzMjcxNTEzMTdaFw0yNTAzMjYxNTE4MTdaMDMxMTAvBgNV
BAMTKEUyMkVBMDNBOEVEOTc0Rjc3NEY2RUY5QkIwQkJBMDZEQkFCQUE2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UEszdVqr1Ou+d7+Zb8AHRtMz
jxXTzw2BEtdFnXSjC/lNnSLWQVnAbPWZDAQHey0DvbaimZ4aAhmM5xurrO/C0Jmq
iQcMf9PuC2zoz2GSdMS5Zl/Gf9iZ/JUz23LxQ/OxDCTgkQ9COcLp5ozx5o+6dQ3g
bQaqx84tLQS1IyoQq/X2w2NWdTu8rNI7/ftuI0q8tkuqKzqiQ7eQy1fPJ0VQ6R/E
QxqPTNfdiP+rh68ZG6lLEK435QMgcaVKY7rxnNWh3XN+AgkxWUi0chyTnZq9cIIG
bNhDFZ5+sWWPqEGON7t7yZ8/DkuAtZ1IzxaaxYgzwnNt+gIuZjPLuDDiUYa3AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU4i6gOo7ZdPd09u+bsLugbbq6pucwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzYxMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMjMyMzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA6YwDQYJKoZIhvcNAQELBQADggEBAKrQ3LLE2R/+YxR89Adx
UyWRVD9I8+hg/cceKrbWlLzC/XrypjNSxUNmUtj74BhgSnq2Cc5haAEkg59aUFw6
OpqBLO25Rr99pXTFcydMIbJU7KYTMTn0xg2M0iI2O+L0UByOQ8VCwNlIuBg0mwfT
v/gv19raK3vfg+/bI8c2yZP05tBTplnJ1elW2kQiFD69jk+S5cfq6LlxvsOE0yvJ
xQiHygu+tC/nIALMZKFWTzYyqg7jx5hf23dK3fmu4u3iSSEATFmIrneo+pqG9UPM
usS1E6/K+CFPFwXZazLKcQ+ppYXhuW3qezdQZDSACQzJmXYD0kIt64DIcni9p2oh
6rQ=
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org