Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3430203d3e203139393035.roa
File: 326130613a363034303a353430303a3a2f34302d3430203d3e203139393035.roa (raw, json)
Hash identifier: NDf2m96HctnXOVXwQhsXp4b1xcazsYShxA82jaumU3Q=
Subject key identifier: 69:A5:5E:14:B2:02:C7:DD:C2:04:90:A9:FC:BB:DF:D8:6E:FD:32:41
Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial: 7691FE8F823FF8AAEEF9A4E4AB13FABFB7D65F1D
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3430203d3e203139393035.roa
Signing time: Wed 10 Jan 2024 17:19:52 +0000
ROA not before: Wed 10 Jan 2024 17:14:52 +0000
ROA not after: Wed 08 Jan 2025 17:19:52 +0000
asID: 19905
IP address blocks: 2a0a:6040:5400::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 20 Jan 2024 03:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:91:fe:8f:82:3f:f8:aa:ee:f9:a4:e4:ab:13:fa:bf:b7:d6:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Validity
Not Before: Jan 10 17:14:52 2024 GMT
Not After : Jan 8 17:19:52 2025 GMT
Subject: CN=69A55E14B202C7DDC20490A9FCBBDFD86EFD3241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:66:d6:5f:aa:1f:19:e8:f6:04:3c:0b:30:
9b:2a:17:8c:f6:03:7e:70:6b:ab:f4:83:08:e0:81:
02:6c:9d:73:b4:df:8c:83:80:5f:e7:94:ab:fb:f5:
89:d6:1d:8f:13:fa:78:8e:8c:a6:28:79:a4:f1:df:
a2:01:7d:b1:19:e5:6c:bf:0b:2a:e2:6c:f7:a4:f1:
69:01:5c:32:a7:cf:f9:bd:77:b0:b2:d6:8d:57:7e:
e8:ca:b4:eb:6d:34:8b:5a:e2:42:97:c3:0b:85:a4:
9f:8f:db:f4:1a:22:89:b0:70:55:98:6e:b9:ee:e3:
92:32:e9:46:59:bc:8d:ed:e8:9c:27:89:61:24:d4:
24:00:8c:e2:fc:21:b2:cf:0b:bf:90:cb:9c:76:01:
16:ce:f9:1b:43:65:65:8d:cf:23:f0:29:8c:c9:0b:
f6:6c:27:b8:2f:3f:fc:cd:66:79:42:f9:34:32:0c:
89:a3:c3:a7:8e:d1:1b:47:e9:65:7d:53:38:95:79:
e4:c5:69:79:55:75:c3:b9:7f:91:3f:28:c0:27:91:
79:2a:10:a8:ee:a8:83:d7:aa:a3:66:44:be:7e:c0:
3a:95:75:6b:e1:45:a3:37:0d:ad:00:86:bd:f0:39:
53:66:70:e5:b7:a6:80:28:2e:25:0e:1b:13:b8:fa:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:5E:14:B2:02:C7:DD:C2:04:90:A9:FC:BB:DF:D8:6E:FD:32:41
X509v3 Authority Key Identifier:
keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3430203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:5400::/40
Signature Algorithm: sha256WithRSAEncryption
7c:c0:0d:e5:24:87:4f:85:80:9e:c7:dc:8e:c7:49:a6:1e:59:
d2:1c:bc:f8:b0:6b:1f:dd:3f:a0:87:d9:e8:5b:c6:b1:d7:15:
96:5f:37:2e:ff:1f:44:69:82:69:d6:8a:4d:eb:0d:25:50:51:
f4:74:a7:20:23:5b:85:19:12:ae:8a:ca:57:71:8f:31:24:32:
63:01:7d:f9:bd:5c:9c:64:9c:e6:56:41:ba:f8:8f:50:0a:68:
5b:e3:7f:2f:33:a5:8c:1d:06:c8:96:06:58:c1:43:1f:f9:b5:
d1:32:1b:9f:fb:d6:0d:7b:a4:16:52:ba:23:bf:5c:d6:f9:6c:
c7:9f:85:a3:ad:84:69:fa:7f:99:99:17:0a:ae:2a:17:cb:63:
fa:ef:81:e1:3e:e4:16:d3:23:1c:30:76:44:d9:0c:98:4a:cd:
de:44:c9:a6:2a:3e:c9:30:c3:b6:4b:eb:ec:00:32:3c:41:79:
57:f3:68:bd:3f:b2:5a:73:ce:5f:41:1f:fb:b6:b1:99:f7:71:
3a:32:62:17:36:f4:db:6a:72:06:a8:88:e1:0f:2b:cc:28:c4:
71:79:7b:c9:d6:6a:c0:d5:cc:c3:c7:6d:df:b1:42:7a:40:81:
1f:c9:1e:d8:b2:c6:9d:d3:5d:24:53:60:5b:b7:df:15:c2:fb:
f0:c5:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org