Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a38303a3a2f34342d3438203d3e20323039373335.roa
File: 326130663a383563313a38303a3a2f34342d3438203d3e20323039373335.roa (raw, json)
Hash identifier: JhGWgDC3f/f28RBpmQTMjyAK5O/D3SxueOyW/T/dR9c=
Subject key identifier: 05:5F:B7:F6:10:2B:62:40:C9:53:EE:F5:0F:A5:51:12:6D:A2:21:AE
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4813A4D992CA4F74E1F970DB5320724BB45C4460
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a38303a3a2f34342d3438203d3e20323039373335.roa
Signing time: Tue 10 Oct 2023 15:18:57 +0000
ROA not before: Tue 10 Oct 2023 15:13:57 +0000
ROA not after: Tue 08 Oct 2024 15:18:57 +0000
asID: 209735
IP address blocks: 2a0f:85c1:80::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:13:a4:d9:92:ca:4f:74:e1:f9:70:db:53:20:72:4b:b4:5c:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:13:57 2023 GMT
Not After : Oct 8 15:18:57 2024 GMT
Subject: CN=055FB7F6102B6240C953EEF50FA551126DA221AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:53:9e:9d:10:68:d4:fa:bd:31:38:6d:d1:
46:6f:8c:76:0b:cd:75:55:72:85:e5:51:53:8d:e7:
d9:53:a7:69:16:dc:35:ef:7b:12:b4:3d:67:a5:be:
cb:35:56:aa:e1:b8:c1:bc:a0:a2:7e:d8:e3:68:f4:
fa:ec:4c:2a:fd:7f:68:64:78:05:07:1e:4c:e6:37:
b1:c4:aa:6e:fc:d1:8a:b1:6e:b6:0e:cf:9e:7f:f5:
c4:73:d6:1a:74:29:da:6f:1f:29:26:ff:2d:6a:18:
b3:10:4e:b6:9f:2c:78:f9:28:f7:62:34:5c:d9:a8:
8d:b8:46:71:ef:6b:78:ba:16:72:f3:72:9a:c0:12:
d4:d6:f2:02:2b:bf:e9:6a:e3:d6:1c:d4:96:ab:c1:
30:67:46:73:b3:41:c9:3a:96:b2:ec:e0:cb:6b:90:
e5:89:ca:2b:20:65:20:58:fc:15:9d:dc:71:ea:21:
c7:fc:56:70:b7:c7:ca:73:e7:fa:d4:30:1f:4a:43:
d7:1d:42:86:0c:0e:1b:cf:a5:2a:8c:c8:e1:e4:a9:
56:06:de:79:aa:b0:2d:43:b2:12:e2:51:39:4a:25:
5f:a5:0c:7b:0b:88:e6:29:54:6a:da:7d:88:2d:06:
53:05:fb:91:5c:31:f2:b5:b2:87:c6:51:9c:2d:13:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:B7:F6:10:2B:62:40:C9:53:EE:F5:0F:A5:51:12:6D:A2:21:AE
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a38303a3a2f34342d3438203d3e20323039373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:80::/44
Signature Algorithm: sha256WithRSAEncryption
21:f2:51:6d:f8:7d:a8:5b:c5:17:8c:fb:db:ef:01:71:3e:27:
e1:30:42:ad:56:17:59:ac:a9:e2:a5:18:6e:e0:35:47:91:76:
f9:9f:98:2e:d9:30:64:49:5c:0a:ff:19:76:46:bc:ec:b4:e2:
6a:50:9d:4b:4c:e1:51:b0:f7:da:86:06:8d:91:72:52:59:9f:
8d:3a:0f:01:a3:7d:fa:e8:e9:b9:42:f9:68:a4:6a:19:f3:52:
56:e9:bf:5e:62:73:f3:16:50:ae:e5:17:bd:e8:10:f9:0b:b8:
79:74:f5:59:6a:9d:24:bc:2d:8e:1f:0d:7c:3d:4a:14:b4:2a:
ef:35:5b:30:53:00:bc:eb:2d:a5:fe:c5:db:ef:1c:b1:6b:13:
86:b0:e2:75:13:2a:7e:ae:30:da:60:cb:bf:f8:ac:4c:3f:2a:
c0:bb:1e:61:89:8f:b7:bc:0c:58:5f:37:57:7c:05:51:a0:7c:
8b:ef:2f:1c:b0:19:27:f9:ec:0f:d7:b9:cb:3e:c3:e6:c1:0a:
de:be:bf:80:a2:76:f7:80:a3:05:e8:3f:f8:ac:82:5d:54:a4:
2e:a0:24:b8:f8:69:ad:62:91:83:85:bd:76:fd:7c:89:72:78:
6e:96:99:19:42:b2:07:f4:de:ce:44:2c:ab:4d:47:8f:12:2e:
1a:33:a8:a3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUSBOk2ZLKT3Th+XDbUyByS7RcRGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yMzEwMTAxNTEzNTdaFw0yNDEwMDgxNTE4NTdaMDMxMTAvBgNV
BAMTKDA1NUZCN0Y2MTAyQjYyNDBDOTUzRUVGNTBGQTU1MTEyNkRBMjIxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGVOenRBo1Pq9MTht0UZvjHYL
zXVVcoXlUVON59lTp2kW3DXvexK0PWelvss1VqrhuMG8oKJ+2ONo9PrsTCr9f2hk
eAUHHkzmN7HEqm780YqxbrYOz55/9cRz1hp0KdpvHykm/y1qGLMQTrafLHj5KPdi
NFzZqI24RnHva3i6FnLzcprAEtTW8gIrv+lq49Yc1JarwTBnRnOzQck6lrLs4Mtr
kOWJyisgZSBY/BWd3HHqIcf8VnC3x8pz5/rUMB9KQ9cdQoYMDhvPpSqMyOHkqVYG
3nmqsC1DshLiUTlKJV+lDHsLiOYpVGrafYgtBlMF+5FcMfK1sofGUZwtE5gdAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUBV+39hArYkDJU+71D6VREm2iIa4wHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMt
YTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhmMTk2LzAvMzI2MTMwNjYzYTM4MzU2MzMx
M2EzODMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM5MzczMzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEKg+FwQCAMA0GCSqGSIb3DQEBCwUAA4IBAQAh8lFt+H2oW8UXjPvb7wFx
PifhMEKtVhdZrKnipRhu4DVHkXb5n5gu2TBkSVwK/xl2RrzstOJqUJ1LTOFRsPfa
hgaNkXJSWZ+NOg8Bo3366Om5QvlopGoZ81JW6b9eYnPzFlCu5Re96BD5C7h5dPVZ
ap0kvC2OHw18PUoUtCrvNVswUwC86y2l/sXb7xyxaxOGsOJ1Eyp+rjDaYMu/+KxM
PyrAux5hiY+3vAxYXzdXfAVRoHyL7y8csBkn+ewP17nLPsPmwQrevr+Aonb3gKMF
6D/4rIJdVKQuoCS4+GmtYpGDhb12/XyJcnhulpkZQrIH9N7ORCyrTUePEi4aM6ij
-----END CERTIFICATE-----
Generated at Thu May 23 18:17:04 2024 by rpki-client on console-fra.rpki-client.org