Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633038303a3a2f34312d3438203d3e20323037363039.roa
File: 326130663a383563313a633038303a3a2f34312d3438203d3e20323037363039.roa (raw, json)
Hash identifier: A8PMGWhSu55R4QBVEaTRFFd3/Cy/OZejY8mwh5+C0fA=
Subject key identifier: 18:A6:D2:0F:42:73:41:64:8B:50:67:AF:37:D8:55:09:2E:19:2A:12
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 52922E4A2E88749ACFC0A9149C54424C8A05590E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633038303a3a2f34312d3438203d3e20323037363039.roa
Signing time: Tue 10 Oct 2023 15:15:47 +0000
ROA not before: Tue 10 Oct 2023 15:10:47 +0000
ROA not after: Tue 08 Oct 2024 15:15:47 +0000
asID: 207609
IP address blocks: 2a0f:85c1:c080::/41 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:92:2e:4a:2e:88:74:9a:cf:c0:a9:14:9c:54:42:4c:8a:05:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:10:47 2023 GMT
Not After : Oct 8 15:15:47 2024 GMT
Subject: CN=18A6D20F427341648B5067AF37D855092E192A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:2b:5c:f7:e9:68:13:2c:55:91:60:d2:c6:
10:3f:5a:e5:d9:8a:e8:7b:b4:5e:db:24:b5:34:ef:
6f:6f:64:40:86:c4:32:90:04:bf:ce:e1:fb:40:1f:
4c:77:28:91:96:c5:67:68:58:54:07:77:69:48:1d:
a3:28:6e:68:ae:00:69:b0:86:6c:a8:c8:3b:ce:f4:
a9:2c:9d:cc:b4:1f:ba:85:15:1e:7d:98:fb:8c:b7:
7a:bb:77:9c:c5:42:69:fa:01:25:6a:93:f1:a1:ab:
58:a9:41:c9:a1:be:a7:8b:41:60:c6:07:91:99:e2:
f7:66:19:82:8a:19:f8:81:1d:5c:c2:fd:a2:d9:78:
64:31:11:69:79:c0:fc:a9:70:db:b9:ce:a2:8f:01:
d6:b1:12:b2:04:5d:f1:cf:16:f0:66:65:cb:50:5c:
64:3a:09:42:7d:a3:c3:9b:5e:8f:d3:d3:5f:ea:6a:
be:12:b7:81:13:aa:e4:5a:34:0c:05:15:46:45:29:
5a:78:29:2d:18:30:04:df:7c:50:ce:fd:82:c4:5c:
3b:33:80:b5:7d:ca:d2:8e:99:ae:fc:c7:40:a6:22:
91:3f:73:e2:3c:83:b6:01:85:58:20:7d:dd:f1:a6:
5f:27:7d:b0:ad:a0:af:2c:bb:76:ff:2e:6e:e9:c9:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:D2:0F:42:73:41:64:8B:50:67:AF:37:D8:55:09:2E:19:2A:12
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a633038303a3a2f34312d3438203d3e20323037363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c080::/41
Signature Algorithm: sha256WithRSAEncryption
51:e4:9e:28:c7:65:24:4c:1a:46:65:f1:c5:06:63:62:39:4f:
a4:9b:2f:25:67:ba:4d:ec:25:e5:38:9c:ad:6c:00:a4:40:5e:
2e:17:42:55:1f:44:1f:34:53:62:70:a8:e6:07:0b:16:64:2e:
7d:88:00:7f:4f:5c:3e:03:e4:f4:39:18:54:98:92:65:cf:5b:
d9:72:56:02:99:fa:ec:c5:7a:99:1a:58:77:d8:4f:39:fc:47:
78:a5:ff:3d:19:67:87:eb:f4:a6:f5:b8:ba:9b:6d:70:cc:9d:
a9:96:ce:71:59:46:ff:d6:67:60:72:cc:e3:6d:a0:d8:8c:31:
a8:2f:df:a8:1b:65:58:88:e8:ea:b8:11:de:8b:2c:0e:86:3e:
ad:a9:9f:dc:30:04:47:ed:f4:12:b6:c3:40:f3:20:23:15:64:
2a:a5:e4:86:39:7a:d8:70:d5:7a:2c:53:7a:4c:71:7b:69:4b:
e1:e1:f7:8e:ac:fa:78:9c:84:52:66:06:2b:5c:ee:d6:e9:c2:
57:cd:c4:96:1e:45:66:f3:ab:8e:25:18:8b:f8:1f:4e:ad:e6:
8e:1e:10:cf:80:2c:80:24:1b:e9:58:58:cd:c4:b5:49:2a:6e:
34:96:76:06:b3:5a:4a:bd:08:e7:86:79:03:24:4c:59:0a:ea:
ec:20:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 21:03:48 2024 by rpki-client on console-ams.rpki-client.org