Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363373a3a2f34382d3438203d3e20323135303632.roa
File: 326130663a383563313a3363373a3a2f34382d3438203d3e20323135303632.roa (raw, json)
Hash identifier: cRvE55pnkvq4oQrjFmHZYa+TsASINN3MA/TczyC8N0k=
Subject key identifier: 36:0D:75:FB:5D:9C:3D:AC:D0:42:10:7E:DD:CC:D1:6B:BB:02:54:AB
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 796E7C07C77774D27814EC7740B0D0FFEE7CFDC2
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363373a3a2f34382d3438203d3e20323135303632.roa
Signing time: Thu 25 Apr 2024 13:34:57 +0000
ROA not before: Thu 25 Apr 2024 13:29:57 +0000
ROA not after: Thu 24 Apr 2025 13:34:57 +0000
asID: 215062
IP address blocks: 2a0f:85c1:3c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6e:7c:07:c7:77:74:d2:78:14:ec:77:40:b0:d0:ff:ee:7c:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 25 13:29:57 2024 GMT
Not After : Apr 24 13:34:57 2025 GMT
Subject: CN=360D75FB5D9C3DACD042107EDDCCD16BBB0254AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:47:9f:ec:b9:ef:84:08:32:af:59:66:74:
77:16:7f:ed:4a:17:e4:02:01:b3:7b:9a:44:10:06:
bf:2a:52:53:85:4a:fb:9f:74:d0:9a:a6:42:0f:45:
f1:d9:1e:66:57:09:ec:96:5b:f6:ce:a7:ab:a9:ae:
e1:eb:57:96:6e:d8:29:8b:c4:5e:f4:72:d5:f9:f1:
30:f5:a6:aa:25:ff:f5:b3:9c:f8:e5:ce:f5:2b:bf:
07:25:1f:12:a4:4a:7d:83:29:73:8f:b0:8a:eb:10:
3b:0e:97:2e:0f:e6:cc:c0:94:f6:16:0a:d6:a7:82:
fe:88:df:17:89:df:3b:83:eb:81:5c:5e:db:28:9f:
cf:c8:c4:88:be:3c:f1:d0:0d:db:b2:9d:67:9b:72:
e9:ba:d5:cb:b9:38:78:11:5d:2d:00:c9:67:4f:2e:
8f:01:26:4a:88:ed:10:43:c4:6f:f4:5e:7c:06:4b:
ea:2d:ff:6a:2e:04:68:cd:0e:2a:61:c1:38:1d:55:
2a:5c:50:d3:c4:5f:c0:bb:01:dc:00:b8:fb:a8:cc:
0e:df:b0:62:d2:76:40:1d:55:1b:09:03:d5:c6:86:
a1:14:0b:43:dc:ca:24:f4:a2:c2:22:11:d9:96:7c:
6e:7e:ef:77:b8:3c:54:7d:cc:3a:4a:ec:cb:26:fb:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0D:75:FB:5D:9C:3D:AC:D0:42:10:7E:DD:CC:D1:6B:BB:02:54:AB
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3363373a3a2f34382d3438203d3e20323135303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c7::/48
Signature Algorithm: sha256WithRSAEncryption
00:17:ce:25:29:b1:66:55:ce:75:19:7b:06:fe:9a:dc:1e:bc:
39:a7:bc:4d:d0:20:c2:d2:ad:64:a4:6b:80:37:11:e0:aa:85:
d8:b4:91:f0:d6:ad:b6:e6:f0:3c:0f:e3:de:75:da:96:3e:40:
4d:9e:98:c9:45:c3:be:5a:66:85:5a:0e:56:55:dd:b5:8f:7d:
64:b5:38:11:41:53:ba:c9:34:ac:68:73:d3:f0:61:6e:7b:75:
d0:d9:92:27:74:0a:f8:5d:7c:c5:05:d8:69:51:95:ce:d1:30:
9e:72:20:2b:8c:dd:de:4e:64:96:5f:4d:e1:72:2d:d4:26:01:
2e:84:5d:1a:df:f4:08:e8:07:5e:8c:2b:78:54:49:90:09:04:
0c:8a:7f:3b:4d:56:f9:07:eb:45:b2:49:9f:1a:3c:11:da:46:
c9:20:3f:c7:9b:38:05:29:14:df:8b:ab:e6:c8:5a:41:61:c3:
95:ae:0e:85:58:e9:14:3d:09:d9:ab:64:da:5a:38:3d:2b:50:
b0:eb:b9:82:f5:31:4c:4b:fb:d8:c5:a0:ad:0e:1a:df:47:da:
1c:fe:e4:52:a0:b7:64:52:81:98:7b:9b:d1:db:2e:3c:1b:6a:
a5:02:79:f3:68:da:87:00:71:3c:22:13:67:a9:63:ec:b4:f5:
12:1a:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org