Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366333a3a2f34382d3438203d3e20323134393133.roa
File: 326130663a383563313a3366333a3a2f34382d3438203d3e20323134393133.roa (raw, json)
Hash identifier: kv4JBTTT76oo4fTu6fnodbds+UEKnb0VtlYclun7tv0=
Subject key identifier: 59:35:85:10:C6:8D:6D:34:BD:0B:26:72:17:0E:DE:E8:14:F4:EF:91
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4B40A5AD4C251872D38FF726E81C51D7ED8DCC34
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366333a3a2f34382d3438203d3e20323134393133.roa
Signing time: Thu 16 May 2024 13:13:55 +0000
ROA not before: Thu 16 May 2024 13:08:55 +0000
ROA not after: Thu 15 May 2025 13:13:55 +0000
asID: 214913
IP address blocks: 2a0f:85c1:3f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:40:a5:ad:4c:25:18:72:d3:8f:f7:26:e8:1c:51:d7:ed:8d:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 16 13:08:55 2024 GMT
Not After : May 15 13:13:55 2025 GMT
Subject: CN=59358510C68D6D34BD0B2672170EDEE814F4EF91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:98:d6:bf:c8:94:75:1a:de:12:0e:5d:7a:
63:94:3e:4f:1b:51:9c:c8:7e:5b:0b:24:d2:cf:b9:
23:93:3e:dc:f4:e4:50:9a:33:34:05:83:dd:a9:76:
1f:2d:24:e7:62:88:1a:da:bf:01:f6:57:05:89:e4:
95:a1:b2:b9:7e:07:1c:16:4e:58:81:f1:f1:ae:b0:
ee:2e:54:a4:21:47:27:3b:09:42:c3:15:44:fe:57:
7a:5f:f9:f9:67:2e:39:20:e8:2d:84:9c:23:16:51:
6d:01:cc:76:73:69:00:e0:37:68:da:1b:43:ce:8e:
b2:7a:4a:20:c6:33:43:f2:5a:cd:c1:da:3b:0b:27:
d8:4b:cc:ea:51:4d:83:2b:c0:36:f3:e7:80:93:71:
c4:6a:18:f0:87:9e:69:04:11:85:d5:f9:7a:a4:25:
e5:80:98:e7:f7:c4:73:f9:bc:b8:ea:52:59:cc:12:
87:89:04:81:bb:f8:1f:91:30:59:80:0c:61:63:f9:
9d:c5:52:c7:60:4b:20:e0:bf:14:b4:5d:ad:4d:e4:
42:ca:0b:4b:7d:e2:aa:03:84:41:f0:d1:ed:06:55:
ff:da:01:07:f6:66:e1:eb:bd:80:23:4f:3a:72:0f:
49:cd:b7:7b:56:8e:c5:4a:c0:5b:89:53:31:02:7c:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:85:10:C6:8D:6D:34:BD:0B:26:72:17:0E:DE:E8:14:F4:EF:91
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3366333a3a2f34382d3438203d3e20323134393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f3::/48
Signature Algorithm: sha256WithRSAEncryption
92:93:5d:e2:a1:af:0b:55:21:b0:fd:45:bd:8c:c9:90:17:7a:
fc:34:aa:ec:ff:a2:a4:f8:ac:b7:16:36:5f:7f:ed:77:5c:65:
11:80:ab:6e:4e:36:14:4d:2d:45:48:66:5b:3d:82:42:cd:72:
7b:6a:95:bf:9e:ad:fa:95:55:d3:23:b4:dc:79:2e:04:05:9d:
45:a2:be:7a:72:61:5d:53:ea:95:3e:ba:bd:c6:b5:ae:d9:3a:
1f:3b:2f:4e:0f:eb:10:9f:8f:5a:5d:9b:9b:39:b5:86:8e:06:
68:aa:74:08:0c:a5:43:41:71:c8:7a:04:e7:ba:0d:bc:58:0c:
98:6f:f4:6d:3f:a1:f5:1d:c9:17:93:65:54:cb:d7:d6:f6:fb:
09:85:93:e8:61:df:be:d1:ad:ed:fb:e6:78:2e:b3:e3:5f:a4:
df:8a:44:53:b5:e1:87:db:ba:4a:6c:0f:2c:3c:41:6c:15:4c:
ae:a3:2c:0f:c9:01:7b:4e:7e:09:dc:91:0b:6c:6e:79:e8:50:
b6:dc:a7:a9:d4:9c:2d:37:5d:a3:37:3f:5d:3b:92:c6:e8:d0:
8d:0f:0f:0d:54:52:76:90:1b:79:a6:83:26:a1:35:eb:2a:bf:
11:92:22:ac:95:0d:7d:cb:9b:19:64:a8:92:24:73:6f:4a:7e:
ee:43:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org