Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362363a3a2f34382d3438203d3e20323135303837.roa
File: 326130663a383563313a3362363a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier: jB3BbnNiy0sNIHYWzw90CPKfwFAd2Q18X4DsZBYeSVo=
Subject key identifier: 96:53:38:A4:28:DA:D3:11:51:75:5A:DE:AE:AB:9B:59:C1:3A:C5:93
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 33B8E6BA9E0319A1F647A74B9AECAFD28678B801
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362363a3a2f34382d3438203d3e20323135303837.roa
Signing time: Fri 19 Apr 2024 16:58:45 +0000
ROA not before: Fri 19 Apr 2024 16:53:45 +0000
ROA not after: Fri 18 Apr 2025 16:58:45 +0000
asID: 215087
IP address blocks: 2a0f:85c1:3b6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b8:e6:ba:9e:03:19:a1:f6:47:a7:4b:9a:ec:af:d2:86:78:b8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 19 16:53:45 2024 GMT
Not After : Apr 18 16:58:45 2025 GMT
Subject: CN=965338A428DAD31151755ADEAEAB9B59C13AC593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:62:61:c5:a3:b6:de:40:3a:b6:2f:b9:f5:
bf:aa:b6:f7:f3:ba:92:73:7b:94:57:98:d7:da:8c:
33:22:48:81:72:e2:02:b9:64:3d:5c:6e:2a:98:e5:
72:1e:e3:c2:52:d3:74:37:9d:f6:ec:bf:3e:24:bb:
a0:98:35:44:1a:c9:00:95:43:47:90:ac:e6:da:d7:
c4:71:75:02:f7:5d:38:9b:b5:d3:46:6f:e2:2c:5f:
92:d3:ca:89:62:6a:d1:b4:a3:59:58:b0:a3:44:04:
e8:9e:4a:9b:75:7f:7f:82:df:ea:88:93:a6:39:28:
b6:e1:fd:b0:db:0d:1c:3b:7e:57:3d:f5:07:2a:02:
9c:a2:4b:d5:9a:c5:cf:41:9b:d7:49:5d:03:b1:d8:
ee:75:d5:14:6d:49:c3:f9:de:9b:b6:82:e7:87:64:
6b:e5:c8:e3:ea:2e:2e:73:98:b3:08:82:85:45:bb:
06:50:09:05:e5:f6:03:c9:2a:a4:56:71:16:fc:88:
ec:7d:ce:f5:75:a9:f4:bd:11:ee:bd:c1:10:d7:93:
46:84:7c:d8:6d:e1:b0:00:fd:6f:9e:e9:47:6c:57:
f8:36:2d:dc:4f:ed:2c:c9:40:21:6c:6e:95:c4:b9:
f8:ae:06:86:0d:8c:df:e4:a3:31:48:a8:29:28:e6:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:38:A4:28:DA:D3:11:51:75:5A:DE:AE:AB:9B:59:C1:3A:C5:93
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362363a3a2f34382d3438203d3e20323135303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b6::/48
Signature Algorithm: sha256WithRSAEncryption
48:f4:1b:96:fa:4c:9b:72:35:3b:b8:f2:34:74:05:46:8a:b1:
6e:82:1c:b3:c6:1e:9b:58:05:0f:f4:b2:ef:ef:d6:51:16:52:
47:e3:8d:db:fd:bf:24:ae:78:19:2a:8d:94:15:f7:d3:09:57:
04:50:89:2c:b7:b1:11:cd:52:80:e1:b2:bd:0c:f6:b6:38:14:
77:3e:92:5b:7d:85:d0:3c:99:ae:2f:63:74:4a:4b:f3:bb:f6:
74:db:84:3f:16:f1:5e:2d:d5:ca:47:4b:89:18:04:1c:01:0e:
6a:ea:29:7d:22:4f:a3:d9:48:aa:ce:c4:07:b1:b0:3f:d4:ec:
c9:69:45:ff:fb:32:65:a7:2c:57:9e:87:91:00:c3:5b:17:d7:
f2:4a:6d:91:88:fa:a7:ee:86:fe:e1:8a:e9:3e:03:96:d8:44:
ed:f3:6e:ee:4d:f4:ed:d6:4b:4c:96:76:9f:a7:53:83:47:d4:
e6:da:47:26:f1:60:23:a6:89:7f:ee:8e:73:05:10:3d:fe:89:
b3:15:b9:4d:55:f8:ee:c5:83:23:7e:21:f9:cc:07:81:cd:e3:
a7:bc:84:cb:23:d9:96:c9:e1:d4:0b:9a:26:76:52:32:44:38:
84:01:d6:16:47:26:c5:21:00:33:f8:c0:95:c6:19:17:c7:4f:
07:15:76:61
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUM7jmup4DGaH2R6dLmuyv0oZ4uAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA0MTkxNjUzNDVaFw0yNTA0MTgxNjU4NDVaMDMxMTAvBgNV
BAMTKDk2NTMzOEE0MjhEQUQzMTE1MTc1NUFERUFFQUI5QjU5QzEzQUM1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlE2JhxaO23kA6ti+59b+qtvfz
upJze5RXmNfajDMiSIFy4gK5ZD1cbiqY5XIe48JS03Q3nfbsvz4ku6CYNUQayQCV
Q0eQrOba18RxdQL3XTibtdNGb+IsX5LTyoliatG0o1lYsKNEBOieSpt1f3+C3+qI
k6Y5KLbh/bDbDRw7flc99QcqApyiS9Waxc9Bm9dJXQOx2O511RRtScP53pu2gueH
ZGvlyOPqLi5zmLMIgoVFuwZQCQXl9gPJKqRWcRb8iOx9zvV1qfS9Ee69wRDXk0aE
fNht4bAA/W+e6UdsV/g2LdxP7SzJQCFsbpXEufiuBoYNjN/kozFIqCko5mHRAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUllM4pCja0xFRdVrerqubWcE6xZMwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzMzYyMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMDM4Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqD4XBA7YwDQYJKoZIhvcNAQELBQADggEBAEj0G5b6TJtyNTu48jR0
BUaKsW6CHLPGHptYBQ/0su/v1lEWUkfjjdv9vySueBkqjZQV99MJVwRQiSy3sRHN
UoDhsr0M9rY4FHc+klt9hdA8ma4vY3RKS/O79nTbhD8W8V4t1cpHS4kYBBwBDmrq
KX0iT6PZSKrOxAexsD/U7MlpRf/7MmWnLFeeh5EAw1sX1/JKbZGI+qfuhv7hiuk+
A5bYRO3zbu5N9O3WS0yWdp+nU4NH1ObaRybxYCOmiX/ujnMFED3+ibMVuU1V+O7F
gyN+IfnMB4HN46e8hMsj2ZbJ4dQLmiZ2UjJEOIQB1hZHJsUhADP4wJXGGRfHTwcV
dmE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org