Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34342d3434203d3e20323039323637.roa
File: 326130663a383563313a37303a3a2f34342d3434203d3e20323039323637.roa (raw, json)
Hash identifier: D9zedwQeTWVyUiU/ufaOCqPaXjkJ/uuYDxzyx2U195U=
Subject key identifier: 1F:9A:C1:A6:E4:5F:EE:21:C5:92:78:C6:AA:41:67:49:E1:6A:3B:1A
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2DFA36DB1CDE9C7F3523E2E15CB6F9B2E8D48B05
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34342d3434203d3e20323039323637.roa
Signing time: Tue 10 Oct 2023 15:18:25 +0000
ROA not before: Tue 10 Oct 2023 15:13:25 +0000
ROA not after: Tue 08 Oct 2024 15:18:25 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fa:36:db:1c:de:9c:7f:35:23:e2:e1:5c:b6:f9:b2:e8:d4:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:13:25 2023 GMT
Not After : Oct 8 15:18:25 2024 GMT
Subject: CN=1F9AC1A6E45FEE21C59278C6AA416749E16A3B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:2a:55:3d:8c:bd:c3:cf:ca:91:df:5b:6c:
b0:63:a1:e1:65:50:3e:49:49:88:6b:ea:af:64:29:
f1:b5:47:e7:62:7f:0a:cf:6c:cc:45:cc:65:4f:a7:
13:07:3c:1c:0e:f7:35:98:e1:62:bc:c6:6b:aa:42:
ca:a1:db:37:02:d3:23:e5:92:cc:72:35:b7:52:b5:
b5:fc:41:4e:2d:62:9c:30:38:ca:bc:b9:e8:ab:9e:
a5:58:ad:97:67:61:a8:bf:ad:dc:75:2a:30:00:94:
b0:73:8e:6d:dd:4b:97:7e:c3:19:fe:ea:0c:a1:16:
e4:98:bb:c3:40:33:57:29:b7:5b:60:55:75:a6:5c:
3c:d5:fe:44:73:f0:13:3a:16:9a:69:0a:91:8d:3f:
4c:b1:b3:ed:39:44:47:97:c9:7f:92:55:7a:01:81:
88:9d:10:38:25:32:48:a2:16:81:3c:cc:9a:5f:ea:
b6:36:55:13:fe:0e:96:74:0d:d6:25:09:58:c1:98:
6b:86:cd:2f:df:98:ec:ed:eb:3a:00:11:c6:24:c4:
d9:b4:0b:14:ae:da:a6:ae:87:72:b3:04:b6:60:e7:
7e:a0:11:a7:d0:0e:5c:9b:8e:c9:af:9b:08:db:79:
44:b3:3b:e0:1d:98:8f:02:57:29:29:34:d5:25:8a:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:C1:A6:E4:5F:EE:21:C5:92:78:C6:AA:41:67:49:E1:6A:3B:1A
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34342d3434203d3e20323039323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
71:40:af:16:83:1e:aa:73:32:07:15:7a:8a:a9:7b:19:25:ac:
17:c8:24:60:af:f2:17:be:17:fe:b3:2f:f5:86:07:ab:b8:04:
af:7d:6b:73:d2:e8:26:15:82:6e:1f:f2:78:cc:33:64:24:78:
84:34:e8:2d:13:1c:28:4c:50:a8:13:8e:92:a4:74:da:c3:c6:
a0:ec:32:ee:89:01:1f:e4:42:61:e9:9f:b2:c4:15:32:0b:2f:
96:cd:41:5a:38:b5:52:33:b6:d2:ea:68:e1:1a:2b:1e:81:6e:
ea:f6:4e:9e:5b:c4:68:b4:58:b9:77:a3:39:1b:aa:d2:ec:02:
eb:d9:cb:21:c8:a1:b7:62:f2:a3:3c:47:27:22:2a:8f:45:ae:
bd:9c:37:ad:bf:4e:70:b6:88:13:cb:1b:ab:cb:87:97:3f:ae:
a4:08:b9:0d:45:af:7e:9d:d9:90:34:fc:ef:c7:f0:47:17:0c:
23:31:ad:7e:a5:22:ce:28:01:29:46:05:58:36:cc:97:af:d3:
5f:ce:58:05:40:de:2b:bd:ec:7a:68:e3:3d:fe:11:00:d5:e7:
fd:ac:1f:f1:ad:c5:0a:04:ec:29:df:fc:55:43:f4:ed:82:fb:
80:e5:1d:ae:e5:d5:e9:6c:79:f3:0f:68:2e:dd:db:58:b5:0c:
de:45:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org