Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3430203d3e20323033303639.roa
File: 326130613a363034303a336630303a3a2f34302d3430203d3e20323033303639.roa (raw, json)
Hash identifier: utRtEe1wLhQEoxnM6evepHfLx31F4VUcRddVBBs/i2s=
Subject key identifier: 0F:DA:28:63:70:4E:AC:7B:73:18:DA:1E:95:EA:98:E5:7C:25:29:4E
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 3AC904B483FE5856D0C9920A62F5EEF8E8DA738E
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3430203d3e20323033303639.roa
Signing time: Sun 10 Dec 2023 17:55:59 +0000
ROA not before: Sun 10 Dec 2023 17:50:59 +0000
ROA not after: Sun 08 Dec 2024 17:55:59 +0000
asID: 203069
IP address blocks: 2a0a:6040:3f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 10 May 2024 15:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c9:04:b4:83:fe:58:56:d0:c9:92:0a:62:f5:ee:f8:e8:da:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Dec 10 17:50:59 2023 GMT
Not After : Dec 8 17:55:59 2024 GMT
Subject: CN=0FDA2863704EAC7B7318DA1E95EA98E57C25294E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:73:18:73:c9:16:ad:c4:fb:68:8d:6c:e8:
b5:a5:2d:ec:53:c7:aa:d9:ef:b8:23:c2:b7:1a:87:
3c:51:3f:a9:ef:d6:94:b7:32:a2:34:c4:b6:de:e8:
56:59:bb:80:0c:56:28:96:23:e8:46:b3:32:2a:dd:
35:89:99:9d:08:e5:66:17:80:7a:af:0e:e2:77:a4:
71:52:5a:8d:ef:19:55:f9:e2:44:8f:a0:43:3c:08:
62:d0:e8:39:e5:4b:e7:86:4d:1a:99:8a:03:ed:3c:
20:67:17:99:1b:70:e8:e0:2d:e2:c8:70:0c:fb:c0:
4b:b9:0c:9f:15:57:4e:c8:85:ae:4e:b1:14:33:03:
09:35:b3:05:04:d3:01:15:b3:d8:6c:6b:b0:03:db:
00:58:24:2a:3d:26:ae:74:f2:cb:8e:8e:08:c0:f1:
67:ad:5a:bd:f0:5e:45:68:b9:23:a7:e5:27:3b:c8:
d3:3e:b1:55:5f:06:5e:48:d1:cd:c5:f6:39:08:1f:
8e:29:ca:91:20:bd:a3:41:3a:14:9e:2e:59:a8:ee:
af:48:35:09:13:29:57:16:ed:0b:ad:b3:83:00:a8:
d0:71:39:c9:a4:07:1f:cf:4d:05:93:9b:5c:ce:ee:
47:44:3e:94:36:af:4b:b0:ac:52:4d:31:2b:be:bb:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:28:63:70:4E:AC:7B:73:18:DA:1E:95:EA:98:E5:7C:25:29:4E
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3430203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
42:6f:83:99:4a:8d:ec:ff:64:d3:d0:85:a7:2a:c5:9d:89:1e:
22:6a:89:40:c0:a0:98:84:06:8f:b0:52:76:6a:05:5e:24:79:
b0:c8:45:e5:2b:7d:61:c1:35:f8:c4:d8:41:f3:77:bd:b5:7a:
db:fe:d9:93:a5:43:5d:0f:6a:97:66:01:78:d6:79:45:49:49:
8e:ef:75:b8:e7:03:af:8f:70:b6:85:ec:d4:11:dd:49:02:61:
05:83:9d:8f:23:0d:a4:42:c6:30:88:33:e0:cd:47:86:76:66:
38:41:fb:91:59:66:46:40:76:fa:5b:04:98:19:65:7b:68:ce:
76:63:ab:7a:9d:6b:d5:f6:b9:a6:f9:a6:b0:62:f2:9a:f2:d5:
6a:1b:13:8b:98:84:26:42:d9:d2:7c:90:a1:11:fd:8f:cd:e5:
67:27:32:d7:8e:4b:8d:8c:0a:f2:cc:92:cf:15:77:49:40:f9:
9d:dc:97:a6:67:8d:0f:75:fd:b7:ec:48:59:ca:7a:db:89:5c:
7c:26:c9:33:67:f6:bb:d4:64:03:89:71:9b:24:9b:41:8d:a0:
a9:48:47:4f:b1:50:08:56:9f:2b:b0:f3:58:ff:a8:24:c1:d8:
0e:4f:e3:76:00:c2:9b:5a:df:dc:c1:b7:a9:f0:34:30:95:dd:
53:76:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org