Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a323030303a3a2f33362d3336203d3e20323135333138.roa
File: 326131343a316563303a323030303a3a2f33362d3336203d3e20323135333138.roa (raw, json)
Hash identifier: KwEI8lxFYauSGGzgi2PKlVTPigtT2mqp4kgZHdJpDeQ=
Subject key identifier: B1:CC:EA:6E:48:E2:F0:92:0A:51:DE:66:D3:59:4C:83:95:AC:5A:C3
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4DB1E2B6BABB48FE7B13BC75AB43D86956CB9DDA
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a323030303a3a2f33362d3336203d3e20323135333138.roa
Signing time: Thu 02 May 2024 17:54:21 +0000
ROA not before: Thu 02 May 2024 17:49:21 +0000
ROA not after: Thu 01 May 2025 17:54:21 +0000
asID: 215318
IP address blocks: 2a14:1ec0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 22 Jun 2024 16:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b1:e2:b6:ba:bb:48:fe:7b:13:bc:75:ab:43:d8:69:56:cb:9d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: May 2 17:49:21 2024 GMT
Not After : May 1 17:54:21 2025 GMT
Subject: CN=B1CCEA6E48E2F0920A51DE66D3594C8395AC5AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:1d:67:34:a6:fe:84:a7:30:e4:8d:bb:72:
32:20:a7:58:d3:15:59:2a:c6:ea:1b:97:0e:77:ab:
cc:56:77:25:93:75:13:a5:f8:7c:45:cb:d6:ad:d3:
5b:35:54:c7:91:f1:be:a3:cf:b9:f8:51:99:02:12:
e2:a9:46:42:75:99:d1:51:aa:c2:25:74:0d:64:2d:
b4:28:99:8e:2a:63:95:64:08:14:1b:9c:b4:24:29:
a9:55:d6:64:1e:3f:9f:96:e9:0d:7a:17:22:99:96:
06:d3:f0:0d:c6:c3:c3:99:ba:5a:d4:c3:15:d2:b1:
db:66:bd:66:cb:31:b8:88:8f:e4:14:df:6e:c9:c8:
79:45:9e:8b:07:d0:0c:b9:47:af:de:de:68:82:3a:
0a:4e:50:57:28:c5:a6:1b:3e:0d:ee:e1:33:3f:a1:
ce:6d:5f:4b:4e:cc:96:d5:79:f0:6d:3f:0b:7d:b5:
47:0d:0b:f9:ed:2a:c2:19:48:4e:ca:92:60:a1:e4:
2b:62:3f:dc:c0:0d:f6:a9:4e:a4:11:9f:d4:6f:ce:
52:09:6c:32:59:6a:42:83:96:c5:cd:dc:d9:c1:88:
54:73:03:9e:32:3a:cb:6e:bb:53:00:f1:51:bf:af:
c2:3f:63:f9:70:38:1f:e5:2f:8d:1e:96:87:09:c0:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:EA:6E:48:E2:F0:92:0A:51:DE:66:D3:59:4C:83:95:AC:5A:C3
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a323030303a3a2f33362d3336203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
4e:b6:44:dc:85:02:0f:08:6c:37:35:7e:f6:53:4a:ef:6d:e2:
cc:c3:d2:f2:90:e1:ea:4a:d9:c1:a3:d5:3e:53:0d:0c:a8:8c:
c7:7a:d0:b6:e0:13:82:0c:f7:37:1e:17:03:d6:49:a5:a5:bb:
34:b6:4b:6d:aa:b1:59:f4:e9:a5:b2:e6:0c:56:50:18:11:5d:
86:89:d0:69:0a:d0:86:bb:db:d6:27:96:e4:a0:c0:69:8c:95:
b4:71:2a:16:d1:20:2f:72:e9:d2:fc:36:b2:81:e5:4e:88:3d:
ed:9c:3b:17:c3:df:a8:d9:67:c7:7b:4a:6f:cf:b2:bd:fa:dd:
e7:bb:7c:f8:9e:44:00:bc:65:1c:9e:b1:3f:83:63:38:73:25:
2e:bc:04:f8:54:2b:95:10:9f:c8:e1:7c:35:84:a3:b6:f9:81:
df:3d:1d:81:40:95:0a:ca:16:c8:6a:17:44:b2:ca:28:d4:6d:
ae:f2:f0:64:61:6f:bf:56:57:f3:94:95:d7:05:89:df:2f:60:
5b:1d:20:1e:23:7d:8e:aa:d4:b2:53:db:12:9a:c5:89:d5:3a:
2f:31:54:7b:04:d5:b3:b1:f7:11:9b:3b:0c:35:46:87:ca:9b:
1a:f4:5f:76:b4:0b:88:2b:41:9e:c4:1e:71:f9:4a:4b:ad:e1:
96:0c:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 19:17:45 2024 by rpki-client on console-ams.rpki-client.org