Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e203531303139.roa
File: 326130613a363034303a336666643a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier: Q+1GNh5frIUcRPOiSODHSmxZMXifQyL8oWlr75vIraY=
Subject key identifier: 80:38:6D:AC:E1:BE:0C:2B:95:9D:E6:D0:DA:90:49:5E:E2:C5:6E:35
Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial: 724D7A44144856394E010FBD70AC1C2CBDD560FA
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e203531303139.roa
Signing time: Wed 20 Dec 2023 01:56:52 +0000
ROA not before: Wed 20 Dec 2023 01:51:52 +0000
ROA not after: Wed 18 Dec 2024 01:56:52 +0000
asID: 51019
IP address blocks: 2a0a:6040:3ffd::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 13:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4d:7a:44:14:48:56:39:4e:01:0f:bd:70:ac:1c:2c:bd:d5:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Validity
Not Before: Dec 20 01:51:52 2023 GMT
Not After : Dec 18 01:56:52 2024 GMT
Subject: CN=80386DACE1BE0C2B959DE6D0DA90495EE2C56E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:c9:da:7b:e4:93:6e:2f:a4:15:26:36:f1:
82:5b:a2:f3:46:45:44:1a:03:de:7e:22:85:d0:65:
f5:06:76:02:87:aa:c5:d6:eb:22:bf:51:62:4a:51:
9a:43:87:50:27:3e:33:e7:f9:2d:37:07:01:b1:29:
f6:d7:d4:9f:61:6f:50:35:6e:56:e0:3a:40:b2:de:
f6:e9:50:94:45:95:4a:0d:2a:71:be:3c:9d:eb:83:
7a:31:b7:ff:8d:0a:ad:ec:98:6f:ef:26:5b:e7:8e:
b4:db:06:4d:03:f4:0a:f3:e8:de:06:2e:03:4e:d4:
af:5e:39:2c:92:de:b9:fd:a7:aa:a3:cf:a1:e9:67:
08:1b:e2:06:22:ea:6a:03:7c:ce:db:37:f0:6b:ea:
7c:9b:f5:02:d7:92:51:6d:cb:8c:63:e2:ad:50:d9:
82:2a:ec:e1:e2:39:e9:c5:f3:24:d8:70:58:07:ca:
ac:5d:c8:16:f4:c8:c6:b2:d3:64:ad:f8:1e:cb:ed:
7c:bb:92:1d:86:d1:67:f2:5e:91:74:37:e9:f5:d0:
f7:57:33:71:12:5c:58:d4:14:b8:17:a8:07:f6:05:
09:8d:3f:9e:6a:db:0c:4f:94:5f:da:8a:e6:df:16:
a6:c2:af:7b:a6:95:1e:92:74:b3:97:3d:eb:be:f8:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:6D:AC:E1:BE:0C:2B:95:9D:E6:D0:DA:90:49:5E:E2:C5:6E:35
X509v3 Authority Key Identifier:
keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e203531303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3ffd::/48
Signature Algorithm: sha256WithRSAEncryption
1e:9e:5f:15:f8:51:d1:45:64:02:63:30:ca:4e:67:a0:41:0d:
7e:79:84:81:31:bd:78:2e:5e:34:f3:17:93:2b:f2:04:df:4e:
15:2a:2a:a6:96:f6:a1:be:29:1e:c2:c4:b4:57:73:52:ce:02:
7c:fb:1e:ea:d6:fc:40:9f:9e:4f:54:7b:81:35:26:f1:e7:98:
9a:fa:be:e7:07:c4:1d:8a:eb:83:2d:c0:39:63:fb:e2:ab:fa:
97:77:f1:e4:90:8c:2d:e1:de:28:8e:28:d6:f6:c1:7c:79:68:
7b:a4:04:ec:43:39:af:e6:4a:83:78:7f:32:cf:e7:f5:d5:bc:
4f:1b:03:06:df:94:b8:9f:08:a7:9f:bf:24:82:4d:00:44:de:
2f:60:cd:db:e8:3a:05:51:a6:9f:ec:b4:db:07:e4:4e:4b:fa:
ca:5a:4c:49:12:27:ce:0a:a3:d8:97:4e:e7:36:11:52:b3:38:
db:79:0d:b0:b9:d0:db:b6:55:ec:ca:0c:c1:ec:cf:bb:be:59:
d9:3d:56:d2:1a:09:68:4d:0a:09:10:fa:83:98:9a:e7:72:28:
d5:bb:8f:72:ed:e7:b3:36:40:a3:ca:4f:1e:99:7e:7e:d9:47:
2b:11:6f:2f:51:f9:f9:62:8d:21:54:86:5b:e6:3d:86:f3:d5:
9e:6c:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org