Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361613a3a2f34382d3438203d3e20323135323037.roa
File: 326130663a383563313a3361613a3a2f34382d3438203d3e20323135323037.roa (raw, json)
Hash identifier: eCm/JuD5clVt3WObz1NCXUlbb5D/Twqzkkv+pyiA7T0=
Subject key identifier: 9E:3C:0F:44:05:12:C1:AB:81:18:96:55:2F:B5:65:4C:CC:E6:E7:31
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3DE2070E2C375F185567094616B9DDBAD0E397A6
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361613a3a2f34382d3438203d3e20323135323037.roa
Signing time: Thu 02 May 2024 19:22:36 +0000
ROA not before: Thu 02 May 2024 19:17:36 +0000
ROA not after: Thu 01 May 2025 19:22:36 +0000
asID: 215207
IP address blocks: 2a0f:85c1:3aa::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e2:07:0e:2c:37:5f:18:55:67:09:46:16:b9:dd:ba:d0:e3:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 2 19:17:36 2024 GMT
Not After : May 1 19:22:36 2025 GMT
Subject: CN=9E3C0F440512C1AB811896552FB5654CCCE6E731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:54:0a:a6:87:df:fa:92:e3:69:34:13:d5:
2f:73:28:a4:27:4d:88:68:0e:f1:b1:f1:16:cd:42:
fa:2e:bc:05:54:87:b1:7c:69:57:58:75:ad:a4:f4:
7e:4c:7a:ee:9b:ef:91:a2:77:b4:40:64:ac:1a:fd:
f9:c8:c6:76:33:62:f1:67:fa:98:a1:1d:6b:83:30:
bb:9b:67:b1:b9:bd:51:6e:f2:22:51:c5:61:8c:14:
08:75:57:a3:9b:d4:1b:5d:92:2b:ed:2e:43:07:83:
ab:29:98:72:6e:8e:2e:b6:78:bc:cc:f4:a7:e4:62:
ed:a4:a9:a7:d8:3b:87:13:6d:eb:24:dd:ff:53:ac:
c5:f6:9c:aa:78:c5:86:94:c9:01:70:d0:47:ec:8c:
d5:36:71:7e:a0:82:61:c0:36:2d:39:eb:22:96:e6:
95:51:cf:66:13:13:0c:db:65:66:ef:3c:7f:7c:f8:
e8:a2:ea:78:67:19:1d:50:0b:6a:52:a8:2a:a7:71:
d8:3f:fc:eb:e1:a3:ee:e1:78:67:f9:9c:36:b2:f9:
38:3a:2b:27:8b:f5:a1:84:2e:5c:82:b3:7d:bd:0e:
8f:9f:cc:a2:b5:05:c6:06:cb:80:e2:94:26:cb:52:
4e:9b:ee:66:cb:b9:b4:8c:b1:23:0a:fc:b6:91:b8:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:0F:44:05:12:C1:AB:81:18:96:55:2F:B5:65:4C:CC:E6:E7:31
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361613a3a2f34382d3438203d3e20323135323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3aa::/48
Signature Algorithm: sha256WithRSAEncryption
3a:cd:b3:77:51:59:71:99:84:0d:bf:70:c6:4f:00:f7:6e:78:
93:47:a8:58:59:9b:02:12:c6:7f:f7:60:67:e5:78:6f:4b:e3:
37:f6:b7:20:d1:23:a2:a9:b4:7b:ca:10:00:e4:e3:0c:e1:10:
f9:fc:8f:e1:1b:b7:7c:36:57:89:6b:ca:76:9d:5d:7a:b0:a6:
4a:71:89:78:f3:ed:b2:a0:5b:b8:a4:6c:8a:6a:4b:04:63:83:
2b:43:25:18:a8:d3:d6:d4:7a:19:b4:70:54:c5:88:0a:fc:f2:
be:dd:b8:ba:e1:2a:84:fc:15:2b:36:b5:3b:7c:5f:7a:a7:b6:
da:9b:c9:5d:cc:ce:f3:be:21:44:7a:39:a5:d6:ee:a4:7b:be:
6d:78:3a:f8:47:6e:b5:f2:f1:6b:ed:8f:a2:a0:a2:48:c1:10:
fe:de:3c:58:cf:ef:5c:33:f2:26:fb:ba:fc:d7:bf:19:c9:d0:
1f:8a:1a:23:3b:63:6e:05:b8:97:ef:4f:95:fe:81:7a:cb:5c:
4a:49:f1:7a:35:bd:e6:35:c6:a8:86:1e:6e:1d:1d:b0:5e:21:
10:b7:cb:f5:de:c1:91:15:5c:91:2a:ad:8f:d1:0e:86:4c:4d:
9c:a1:f4:c7:74:64:e7:ed:a1:a9:b1:b7:29:df:dc:d8:83:7f:
b3:3f:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org