Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a36303a3a2f34342d3438203d3e20323131323234.roa
File: 326130663a383563313a36303a3a2f34342d3438203d3e20323131323234.roa (raw, json)
Hash identifier: KIQqJyWOIunUXsxWNGdWaqL9m9Tmp/Vh3NdpE6XG3ps=
Subject key identifier: E1:B8:2D:A6:DF:49:35:C3:F6:41:D7:0F:67:70:41:79:E1:04:FD:30
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 026CB8101B8F741EDD41F8BAA859FD9BD0A8BC2A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a36303a3a2f34342d3438203d3e20323131323234.roa
Signing time: Tue 10 Oct 2023 15:19:54 +0000
ROA not before: Tue 10 Oct 2023 15:14:54 +0000
ROA not after: Tue 08 Oct 2024 15:19:54 +0000
asID: 211224
IP address blocks: 2a0f:85c1:60::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:b8:10:1b:8f:74:1e:dd:41:f8:ba:a8:59:fd:9b:d0:a8:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:14:54 2023 GMT
Not After : Oct 8 15:19:54 2024 GMT
Subject: CN=E1B82DA6DF4935C3F641D70F67704179E104FD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:54:b0:b5:9e:ce:9f:c2:21:5a:9c:dd:59:
cd:cb:48:83:dc:82:b8:80:c0:84:e5:83:b0:bd:cb:
75:12:c3:bd:c6:82:15:03:b8:20:93:37:22:70:87:
44:5b:f0:ed:e6:e7:ad:3d:4c:4f:5d:76:73:12:be:
81:32:16:68:08:f8:8a:42:ca:bc:bf:71:88:83:87:
a2:37:1f:8b:1a:84:55:37:c6:82:87:96:8b:9d:7b:
c3:06:6a:47:7a:e1:7f:f5:7e:60:79:39:5b:69:e0:
a2:0e:fb:9e:79:d7:fa:9f:db:36:65:a5:2d:a4:29:
6a:6e:d9:eb:06:c4:ba:cf:9b:60:33:4c:fc:8e:b5:
8b:57:ce:71:72:c1:61:ac:56:67:f2:6d:d0:f7:a0:
07:16:70:33:a4:32:11:2c:db:db:c8:f2:89:77:43:
d3:c6:85:9f:c1:72:47:99:86:9e:66:39:12:5c:5b:
89:43:e8:d1:dd:b3:84:b0:8f:1c:c4:30:4a:f9:1e:
c3:4b:91:39:2f:7b:8c:ef:6c:36:35:ff:b1:70:aa:
3a:61:23:0e:60:33:a6:a2:39:90:ce:ef:22:92:09:
21:66:10:95:f5:5e:3a:7f:e0:8e:6b:6e:a5:de:1d:
75:e8:ba:0a:a9:11:04:c5:63:2a:7e:88:b2:f9:21:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:2D:A6:DF:49:35:C3:F6:41:D7:0F:67:70:41:79:E1:04:FD:30
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a36303a3a2f34342d3438203d3e20323131323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:60::/44
Signature Algorithm: sha256WithRSAEncryption
b3:f7:6a:50:c1:89:bf:64:67:e1:8f:9b:62:28:ab:3c:cc:4b:
4d:0a:75:c1:3e:0e:4b:15:a7:6a:77:bf:8c:16:04:23:7d:6a:
24:de:16:87:d3:2b:de:31:5d:6f:07:fc:24:0a:e3:8c:1b:83:
17:00:0c:f0:f7:a2:45:92:d1:74:ee:6a:85:7d:07:9b:86:c6:
9f:f4:00:74:f1:60:7b:e6:66:4f:6e:f5:df:1c:21:be:84:aa:
44:31:f3:21:ed:b1:7d:90:83:b9:5f:45:c4:7b:24:7a:87:4c:
7d:bd:92:c7:30:96:8d:ef:97:69:a6:68:49:56:a7:e1:df:d8:
1b:ff:6c:13:43:19:80:ba:75:1a:a4:d1:99:7e:de:92:33:1c:
d2:54:e6:14:6c:a3:71:c1:d7:2b:1c:5c:22:e7:06:cb:4a:3d:
a0:2e:93:dc:19:cc:84:46:7d:89:2f:d9:fd:3d:c5:9c:c0:13:
15:d6:1b:93:2f:1e:b3:d9:f5:85:98:5a:5d:a6:b2:49:29:0e:
38:29:5d:18:a0:e5:c6:6f:9c:12:a4:f8:e5:8a:b0:cf:75:50:
3e:78:01:60:8f:c0:3c:37:1d:0f:36:27:eb:ab:2a:ef:98:0a:
a4:fa:c1:49:aa:c1:37:c6:11:e9:e7:9a:29:fa:4a:3a:1b:94:
51:79:bb:7d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUAmy4EBuPdB7dQfi6qFn9m9CovCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTE0NTRaFw0yNDEwMDgxNTE5NTRaMDMxMTAvBgNV
BAMTKEUxQjgyREE2REY0OTM1QzNGNjQxRDcwRjY3NzA0MTc5RTEwNEZEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX6VSwtZ7On8IhWpzdWc3LSIPc
griAwITlg7C9y3USw73GghUDuCCTNyJwh0Rb8O3m5609TE9ddnMSvoEyFmgI+IpC
yry/cYiDh6I3H4sahFU3xoKHloude8MGakd64X/1fmB5OVtp4KIO+5551/qf2zZl
pS2kKWpu2esGxLrPm2AzTPyOtYtXznFywWGsVmfybdD3oAcWcDOkMhEs29vI8ol3
Q9PGhZ/BckeZhp5mORJcW4lD6NHds4SwjxzEMEr5HsNLkTkve4zvbDY1/7Fwqjph
Iw5gM6aiOZDO7yKSCSFmEJX1Xjp/4I5rbqXeHXXougqpEQTFYyp+iLL5IU2DAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU4bgtpt9JNcP2QdcPZ3BBeeEE/TAwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMxMzIzMjM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEKg+FwQBgMA0GCSqGSIb3DQEBCwUAA4IBAQCz92pQwYm/ZGfhj5tiKKs8
zEtNCnXBPg5LFadqd7+MFgQjfWok3haH0yveMV1vB/wkCuOMG4MXAAzw96JFktF0
7mqFfQebhsaf9AB08WB75mZPbvXfHCG+hKpEMfMh7bF9kIO5X0XEeyR6h0x9vZLH
MJaN75dppmhJVqfh39gb/2wTQxmAunUapNGZft6SMxzSVOYUbKNxwdcrHFwi5wbL
Sj2gLpPcGcyERn2JL9n9PcWcwBMV1huTLx6z2fWFmFpdprJJKQ44KV0YoOXGb5wS
pPjlirDPdVA+eAFgj8A8Nx0PNifrqyrvmAqk+sFJqsE3xhHp55op+ko6G5RRebt9
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org