Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362323a3a2f34382d3438203d3e20323135313530.roa
File: 326130663a383563313a3362323a3a2f34382d3438203d3e20323135313530.roa (raw, json)
Hash identifier: 6UNGNFJD0aSBR95Jisqei47KjZmU37IG7ea0WTJFWT8=
Subject key identifier: 3A:66:73:8B:AE:76:79:77:6F:D4:FA:71:A5:60:68:04:28:D2:B9:26
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5C00A6F3BAB2F6E8E5C41682F1F049F2C86231E8
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362323a3a2f34382d3438203d3e20323135313530.roa
Signing time: Mon 29 Apr 2024 18:16:30 +0000
ROA not before: Mon 29 Apr 2024 18:11:30 +0000
ROA not after: Mon 28 Apr 2025 18:16:30 +0000
asID: 215150
IP address blocks: 2a0f:85c1:3b2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:00:a6:f3:ba:b2:f6:e8:e5:c4:16:82:f1:f0:49:f2:c8:62:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 29 18:11:30 2024 GMT
Not After : Apr 28 18:16:30 2025 GMT
Subject: CN=3A66738BAE7679776FD4FA71A560680428D2B926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:b6:15:34:d2:bb:b8:c3:f3:71:82:09:a6:
fd:32:62:4a:e0:65:e1:f9:b8:2b:51:4a:5b:74:05:
2e:a6:8c:44:84:b5:93:34:6d:68:85:4c:dc:f9:72:
e1:96:f3:6b:d9:db:3b:a5:a3:8a:79:16:42:ba:cd:
6e:37:47:ee:e1:de:d6:c2:e1:6d:bf:4b:c8:b1:a2:
53:e3:fc:39:a2:ce:26:31:a8:24:63:51:ac:fa:8f:
76:35:5a:64:a9:aa:fe:86:0a:c9:0b:17:b9:b1:70:
2b:2e:a5:fa:91:c1:12:6f:92:da:26:8b:be:c8:51:
86:bc:89:b9:9e:97:d9:54:79:55:54:f9:44:82:5e:
d3:30:c5:63:9b:1c:96:80:7a:a0:b6:2c:ac:51:ac:
ad:70:15:2f:84:bd:0b:88:d7:06:3c:ef:d0:b0:f9:
50:c0:6f:e0:a5:7a:c2:15:44:f5:90:7e:83:25:ea:
43:7a:ab:2d:0a:4a:ff:ba:a5:26:d0:d0:0f:a2:83:
93:62:a8:ce:46:73:2f:e9:14:36:79:86:c9:5d:02:
d3:4c:c4:e1:ff:08:a3:c7:59:3a:b5:3b:bd:d8:d0:
1f:4f:8c:9d:51:83:de:fd:f7:0e:36:f9:d0:6a:ef:
31:43:65:9f:bf:a8:d1:4b:40:6f:94:8b:2b:89:d8:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:73:8B:AE:76:79:77:6F:D4:FA:71:A5:60:68:04:28:D2:B9:26
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362323a3a2f34382d3438203d3e20323135313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b2::/48
Signature Algorithm: sha256WithRSAEncryption
25:d4:6f:5a:bc:1c:12:7b:54:f5:c0:21:69:f0:f7:45:8d:ee:
34:db:25:1b:5b:76:4e:4a:a2:6f:dd:1e:c5:04:a2:51:f9:33:
d2:9f:1b:09:f4:2d:17:50:a2:6c:42:9c:63:a7:0d:5b:b2:30:
1c:9d:5b:b9:eb:79:9d:06:38:93:2e:bc:eb:59:9b:92:3c:68:
0b:a1:ac:16:8c:d1:c7:b8:fc:9d:be:86:c3:99:c4:fc:c7:9a:
fa:62:09:7b:65:20:be:65:ee:a6:ef:10:82:71:38:d2:17:64:
15:45:a5:d8:da:a6:61:ee:e3:e6:99:cf:e3:a8:92:fe:d8:cd:
bf:a0:bf:35:64:b0:93:4a:5f:53:16:fb:11:b5:3d:34:7f:b5:
5c:5a:b7:81:46:d9:cd:6a:f5:2e:e5:44:5f:14:2d:f7:37:96:
98:72:d5:bb:33:4e:ef:cd:e7:d0:77:a0:d5:b6:0a:ca:d4:de:
bb:f8:ee:ef:62:65:60:c1:80:35:c1:9c:f3:37:25:b5:94:a9:
e8:88:5d:41:1f:ee:b6:9f:dc:b0:74:9f:64:c0:6b:e0:a0:ad:
c4:ce:72:c2:ed:d4:71:fb:2e:5f:b4:ca:de:db:fd:96:16:69:
90:da:6a:47:af:c6:83:8c:e7:8f:1d:b2:fa:0f:4a:de:b9:1e:
1d:86:7a:4d
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUXACm87qy9ujlxBaC8fBJ8shiMegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA0MjkxODExMzBaFw0yNTA0MjgxODE2MzBaMDMxMTAvBgNV
BAMTKDNBNjY3MzhCQUU3Njc5Nzc2RkQ0RkE3MUE1NjA2ODA0MjhEMkI5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgP7YVNNK7uMPzcYIJpv0yYkrg
ZeH5uCtRSlt0BS6mjESEtZM0bWiFTNz5cuGW82vZ2zulo4p5FkK6zW43R+7h3tbC
4W2/S8ixolPj/DmiziYxqCRjUaz6j3Y1WmSpqv6GCskLF7mxcCsupfqRwRJvktom
i77IUYa8ibmel9lUeVVU+USCXtMwxWObHJaAeqC2LKxRrK1wFS+EvQuI1wY879Cw
+VDAb+ClesIVRPWQfoMl6kN6qy0KSv+6pSbQ0A+ig5NiqM5Gcy/pFDZ5hsldAtNM
xOH/CKPHWTq1O73Y0B9PjJ1Rg9799w42+dBq7zFDZZ+/qNFLQG+UiyuJ2DYXAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUOmZzi652eXdv1PpxpWBoBCjSuSYwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzYyMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMTM1MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA7IwDQYJKoZIhvcNAQELBQADggEBACXUb1q8HBJ7VPXAIWnw
90WN7jTbJRtbdk5Kom/dHsUEolH5M9KfGwn0LRdQomxCnGOnDVuyMBydW7nreZ0G
OJMuvOtZm5I8aAuhrBaM0ce4/J2+hsOZxPzHmvpiCXtlIL5l7qbvEIJxONIXZBVF
pdjapmHu4+aZz+Ookv7Yzb+gvzVksJNKX1MW+xG1PTR/tVxat4FG2c1q9S7lRF8U
Lfc3lphy1bszTu/N59B3oNW2CsrU3rv47u9iZWDBgDXBnPM3JbWUqeiIXUEf7raf
3LB0n2TAa+CgrcTOcsLt1HH7Ll+0yt7b/ZYWaZDaakevxoOM548dsvoPSt65Hh2G
ek0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org