Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366323a3a2f34382d3438203d3e20323134393036.roa
File: 326130663a383563313a3366323a3a2f34382d3438203d3e20323134393036.roa (raw, json)
Hash identifier: Z0vUql+BI7KaTgMQ+nX+hHnZbpod6by1z580jHqPXZA=
Subject key identifier: D6:A3:7F:A2:A6:F8:9E:4E:B9:C8:14:72:FB:D5:C8:5D:45:A3:A5:ED
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1AC06913019FC6B9A45A54DFC169BD771673C161
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366323a3a2f34382d3438203d3e20323134393036.roa
Signing time: Thu 16 May 2024 13:13:35 +0000
ROA not before: Thu 16 May 2024 13:08:35 +0000
ROA not after: Thu 15 May 2025 13:13:35 +0000
asID: 214906
IP address blocks: 2a0f:85c1:3f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c0:69:13:01:9f:c6:b9:a4:5a:54:df:c1:69:bd:77:16:73:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 16 13:08:35 2024 GMT
Not After : May 15 13:13:35 2025 GMT
Subject: CN=D6A37FA2A6F89E4EB9C81472FBD5C85D45A3A5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:06:96:02:ba:bf:08:dd:88:14:85:4b:8c:
a6:f8:08:f6:c8:11:da:19:92:7e:c7:d4:16:18:cb:
46:ac:f1:27:aa:4f:a4:b8:95:b5:e5:c2:08:51:a0:
68:13:4b:56:9b:d1:a3:37:9c:bd:90:66:e8:a3:f9:
d8:2f:a8:7a:39:fa:bd:26:73:20:d2:fd:54:c7:5a:
68:4a:9a:da:e9:6d:82:9f:60:66:82:76:b3:f7:24:
aa:0a:61:f1:62:86:ab:36:f1:04:df:56:8b:f4:93:
16:92:05:9d:01:e1:db:51:89:51:2d:54:4e:e7:f6:
e7:71:e5:b2:21:ab:6c:76:c0:da:04:b3:26:f0:f7:
69:24:2c:dd:e0:88:98:45:1d:60:27:9e:ef:64:81:
9a:92:61:fe:60:5f:90:32:97:0b:4b:3a:37:04:15:
07:f2:53:ab:65:05:f2:9a:5a:84:b8:0b:9a:c1:f9:
4e:a4:fa:cd:15:30:9b:6a:24:03:50:fb:31:e7:cf:
80:37:9d:51:8b:7a:04:e5:a3:cb:41:14:6d:5f:89:
f6:ce:63:7a:73:4d:19:96:79:27:06:6d:54:72:70:
c0:a6:79:7b:02:8f:50:ce:38:08:9e:f4:9a:2f:b3:
f7:c8:ba:bf:07:46:fe:ef:29:00:10:93:31:95:2f:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:7F:A2:A6:F8:9E:4E:B9:C8:14:72:FB:D5:C8:5D:45:A3:A5:ED
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366323a3a2f34382d3438203d3e20323134393036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f2::/48
Signature Algorithm: sha256WithRSAEncryption
51:f3:05:88:5d:7a:38:41:4c:54:80:06:18:55:87:ab:56:04:
b3:ae:e9:0e:5b:1f:8c:5d:e1:f4:82:4b:6b:e9:d1:fc:31:4d:
14:6f:f9:b9:57:d5:1f:eb:57:98:31:40:b4:ee:ad:93:d1:6e:
2a:f9:0e:ad:a0:1c:db:04:b0:c7:d8:95:2d:16:25:9a:d8:2e:
8a:45:af:6f:1c:cd:b7:af:b1:3c:13:96:be:29:b6:4d:ac:4c:
19:32:c5:ee:68:b5:74:7f:8d:a9:7c:77:10:c6:78:50:08:14:
e3:ef:e1:18:b8:1e:0e:f1:54:e7:a9:df:e2:bf:d1:70:b5:5b:
b3:d1:99:89:a3:e6:36:0b:51:6e:59:5b:5f:a1:2b:bf:9f:b9:
3f:39:a7:f7:0e:f2:5b:f5:bb:ff:a0:55:6b:0b:7f:92:20:e1:
b9:02:4c:38:81:09:09:92:86:ee:c2:30:0a:79:94:c6:57:49:
b6:1e:ae:13:70:6f:1a:33:eb:f5:f0:d1:07:43:91:d5:58:25:
b0:03:61:6c:cb:10:52:26:0d:0e:03:45:e5:59:9d:4f:13:0d:
a5:fd:e3:73:01:2c:95:3b:e8:c0:67:49:9e:58:58:7e:4b:09:
b8:2e:16:fe:b7:40:24:e7:f7:86:7d:57:0f:80:34:59:27:88:
49:27:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org