Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34382d3438203d3e20323039323637.roa
File: 326130663a383563313a37303a3a2f34382d3438203d3e20323039323637.roa (raw, json)
Hash identifier: pTJiQCKaZhYil0Rr7gMmlHHus90S+MucDzNT1LZi7UE=
Subject key identifier: 87:CE:02:D8:2C:F9:A4:1A:07:77:F9:88:7B:2A:AA:F9:0F:A4:2E:A4
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1FCB8489939B8F449B2C432E6DAC3B64E0F30327
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34382d3438203d3e20323039323637.roa
Signing time: Tue 10 Oct 2023 15:18:34 +0000
ROA not before: Tue 10 Oct 2023 15:13:34 +0000
ROA not after: Tue 08 Oct 2024 15:18:34 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cb:84:89:93:9b:8f:44:9b:2c:43:2e:6d:ac:3b:64:e0:f3:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:13:34 2023 GMT
Not After : Oct 8 15:18:34 2024 GMT
Subject: CN=87CE02D82CF9A41A0777F9887B2AAAF90FA42EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:e2:20:0c:f6:9a:41:4c:f3:df:e5:8e:3f:
64:05:31:48:15:b1:2e:3a:4c:43:48:bc:1d:1b:e9:
00:5a:0e:70:99:73:85:55:24:da:d1:34:71:21:08:
7b:65:45:f3:21:f2:17:60:4c:ab:9a:f4:56:7c:b5:
a7:8e:d5:4a:33:ec:ac:89:50:8d:69:9a:57:22:94:
c0:a2:6d:f4:a5:59:46:93:80:e9:a2:8b:b7:69:fc:
0d:e4:86:bb:04:c8:3e:11:07:70:8e:8c:68:fe:cf:
05:1a:56:77:a3:8f:b1:1d:5a:66:82:13:07:69:ec:
25:9b:7a:00:1c:ec:55:8b:67:23:69:df:df:ae:5e:
ce:45:ce:46:c6:48:aa:6e:8d:dd:29:ec:93:30:e1:
b6:39:3d:db:aa:3e:83:99:73:63:41:0e:c7:73:31:
c8:91:39:70:fa:ed:01:f5:8c:b4:cd:12:0d:6b:bc:
bd:82:87:e4:5d:ae:ee:01:30:8c:cb:09:9b:4b:9a:
f1:79:2f:9c:9f:95:54:b7:70:81:0b:37:c3:cd:13:
e9:1b:2f:c1:54:08:95:fa:b4:12:43:50:d0:95:b7:
7c:7d:7a:99:ae:ac:48:e0:07:42:fc:80:49:14:69:
7d:32:b9:59:51:b3:ae:9d:81:28:d3:a2:81:e4:23:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:02:D8:2C:F9:A4:1A:07:77:F9:88:7B:2A:AA:F9:0F:A4:2E:A4
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a37303a3a2f34382d3438203d3e20323039323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/48
Signature Algorithm: sha256WithRSAEncryption
9c:a3:aa:c3:04:53:2c:57:9a:6f:09:70:52:ba:3e:3c:d8:67:
34:5c:9e:cc:97:a4:b6:26:0e:17:f6:1e:53:21:c7:89:cc:bb:
d8:1f:39:24:52:1d:de:72:8c:ca:04:ef:66:6a:ed:b0:75:49:
9f:65:03:58:6b:c1:96:0c:3d:fb:87:b1:22:f4:20:65:50:99:
20:22:1f:a4:1b:3e:e1:36:be:83:82:9a:8c:4c:72:c2:64:c9:
0b:00:50:80:e1:32:ee:27:06:e2:f3:58:14:23:c0:00:bf:55:
d6:b9:dd:3c:02:0f:b1:72:8c:9a:79:2e:a2:4f:49:af:1b:34:
64:7a:61:99:09:d7:1e:f3:a9:39:52:ef:ca:3d:73:d5:e4:e6:
8e:eb:48:c8:9d:0b:23:ea:da:3a:65:77:37:e1:11:b0:a5:f4:
b1:aa:5f:09:c8:82:17:9f:74:47:77:eb:9e:0a:1c:06:ae:37:
5c:7f:bd:50:9d:74:20:3c:59:bc:ba:12:64:bc:f4:a4:af:23:
9f:57:80:12:4a:54:ae:97:8d:44:25:3b:c3:f2:d3:b1:9c:19:
e4:7f:48:9f:9d:ba:c8:44:5a:2f:1e:71:f6:92:c4:62:b5:38:
be:30:a1:fc:53:81:1d:a2:61:33:45:30:00:30:ff:bb:c2:46:
c1:ed:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org