Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362313a3a2f34382d3438203d3e20323135313534.roa
File: 326130663a383563313a3362313a3a2f34382d3438203d3e20323135313534.roa (raw, json)
Hash identifier: mTVb5R6U6jDDiL4ELdUp5BWJdQ1vnN+EgkBCB44npVQ=
Subject key identifier: D5:FC:13:FD:50:CC:04:32:8D:40:F5:E0:1A:CB:42:A3:C4:E1:F7:69
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1B79F46D1732A6DD4D4BA3E775E2ECB6788ECE75
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362313a3a2f34382d3438203d3e20323135313534.roa
Signing time: Tue 09 Apr 2024 02:00:40 +0000
ROA not before: Tue 09 Apr 2024 01:55:40 +0000
ROA not after: Tue 08 Apr 2025 02:00:40 +0000
asID: 215154
IP address blocks: 2a0f:85c1:3b1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:79:f4:6d:17:32:a6:dd:4d:4b:a3:e7:75:e2:ec:b6:78:8e:ce:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 9 01:55:40 2024 GMT
Not After : Apr 8 02:00:40 2025 GMT
Subject: CN=D5FC13FD50CC04328D40F5E01ACB42A3C4E1F769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:14:01:5c:f1:de:d0:73:17:70:cc:c0:c9:
fd:2f:9f:8a:d2:81:db:45:0f:f6:23:69:40:7b:0e:
e7:ee:98:4a:ec:8d:db:95:a1:3e:82:b0:f6:32:4b:
7a:3a:bf:3b:9a:de:68:bc:ef:0a:62:c4:c2:83:f3:
e9:b4:f4:26:da:56:29:12:8e:2d:1a:d2:0b:f3:92:
cc:55:11:ba:a4:76:ad:d7:57:e3:fa:4b:2d:96:6a:
04:c8:a2:e6:02:2e:0a:cd:2c:a9:e3:ee:b2:01:79:
6d:f9:ce:99:28:31:cd:eb:af:52:00:89:6d:42:bc:
5d:e0:e6:ad:97:05:30:e1:dd:af:10:3b:87:12:07:
2a:58:00:d3:b4:5a:21:cc:20:a4:1e:2a:b0:e9:6c:
0f:17:d3:a9:83:ca:67:f5:12:3f:48:bd:89:68:fa:
92:b7:94:8c:cd:1e:13:5a:a6:dd:87:8c:c5:05:82:
85:b2:c2:68:7a:4f:90:e8:2f:bf:b2:c6:e9:3b:7d:
18:31:2e:52:5d:ff:ce:72:ab:a9:51:04:72:fb:bb:
58:5c:1e:59:88:02:53:28:55:88:84:4e:05:db:6f:
35:5a:e5:e0:f8:4c:a8:97:d2:b2:18:ec:b7:ed:73:
37:8b:c8:64:d2:b1:94:f5:b5:49:ca:0d:03:f3:fa:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:13:FD:50:CC:04:32:8D:40:F5:E0:1A:CB:42:A3:C4:E1:F7:69
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362313a3a2f34382d3438203d3e20323135313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b1::/48
Signature Algorithm: sha256WithRSAEncryption
40:8d:3e:b7:4e:e3:25:e4:82:b4:61:22:8d:65:be:a4:e5:30:
93:98:ac:83:e2:7c:6a:7c:31:4c:1b:0f:f4:cc:21:95:d1:08:
79:7e:32:e8:99:95:51:b8:8d:6a:8a:6a:c7:3a:25:ed:87:04:
7d:89:cc:84:f1:ee:96:e8:81:27:80:58:32:30:d9:8d:17:28:
ee:68:d2:af:8a:a1:9f:ea:28:9f:0b:1a:d5:64:6b:b4:dc:98:
4d:fc:9e:5b:29:50:85:3b:d0:fd:4b:3b:82:d5:84:ca:4a:b4:
4c:fc:db:f7:42:03:c2:48:2e:13:ba:76:fa:38:32:f6:f2:8a:
6a:a2:2d:82:5a:95:84:31:9c:81:ab:9f:1a:fb:66:a4:80:be:
d7:70:58:eb:2d:72:81:65:6e:7f:a1:55:e1:d1:42:71:61:4c:
c9:74:1e:d4:34:f9:73:24:1a:99:90:f7:00:8b:43:46:bf:fe:
14:0f:ce:aa:09:ba:59:1f:33:65:8a:a2:0a:30:b4:ba:0d:1d:
77:31:bc:b5:37:bc:5f:0b:39:e5:22:ec:f3:78:7f:86:1e:38:
0c:e3:9b:08:e6:f5:5f:16:05:f3:cf:55:55:ef:7d:f9:05:1b:
a5:e4:8d:9d:98:cd:6d:a1:29:27:b8:4e:6d:d6:6e:d9:4a:22:
52:fb:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org