Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
File: 326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: oG+PN41Q4LjOy3rd+9OXVEhSQIQ8kCfFtTjyFSKl/OA=
Subject key identifier: 5D:27:16:CD:85:92:32:0D:86:1E:23:29:84:AC:64:F0:65:08:F9:40
Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial: 69D82B6BF698DB7ABCDEFF3F96D8054DB277C537
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access: rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
Signing time: Sat 14 Oct 2023 16:06:43 +0000
ROA not before: Sat 14 Oct 2023 16:01:43 +0000
ROA not after: Sat 12 Oct 2024 16:06:43 +0000
asID: 14618
IP address blocks: 2a12:dd47:84ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Nov 2023 05:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d8:2b:6b:f6:98:db:7a:bc:de:ff:3f:96:d8:05:4d:b2:77:c5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Validity
Not Before: Oct 14 16:01:43 2023 GMT
Not After : Oct 12 16:06:43 2024 GMT
Subject: CN=5D2716CD8592320D861E232984AC64F06508F940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:f6:e9:08:a7:3b:af:19:11:3e:bd:e7:3b:
b0:91:c0:a2:c4:aa:fc:22:92:3f:b1:b6:0b:ee:ef:
7b:97:a6:7a:94:b3:0a:d2:5a:ec:7e:89:3c:d5:46:
d7:5e:d2:07:17:0a:ec:54:7a:55:17:0f:05:b2:e2:
36:c0:8e:23:c2:a0:40:2a:3c:31:2a:51:a0:60:c7:
7d:ab:38:97:84:d3:96:88:e0:0e:26:8f:d9:26:1d:
9f:c3:72:6a:b6:64:1b:0c:c1:f7:76:64:08:7c:23:
dd:4a:2b:09:45:2e:f9:b6:b9:9e:af:ca:00:fd:8f:
40:24:4b:d6:b7:3c:39:46:25:9b:e4:35:4d:35:de:
b7:7a:d7:07:32:12:bb:4c:b8:4c:a6:1b:13:91:f9:
0d:e1:3b:62:d1:59:12:15:7d:7a:f1:c5:c8:19:da:
41:8e:2d:88:89:23:ec:f6:36:de:73:d9:9f:7b:87:
4a:41:24:8e:a1:d1:f3:e3:a5:89:41:fd:98:0b:5b:
92:15:2c:af:6f:14:77:4a:a0:56:84:28:20:72:bb:
77:e7:d8:20:57:09:59:5a:70:7d:58:9a:76:74:16:
e5:41:6f:0e:0a:b4:8f:12:3c:64:79:0e:a9:9a:78:
33:3b:5e:c7:54:28:db:86:cc:82:1d:3d:18:5c:99:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:16:CD:85:92:32:0D:86:1E:23:29:84:AC:64:F0:65:08:F9:40
X509v3 Authority Key Identifier:
keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:84ff::/48
Signature Algorithm: sha256WithRSAEncryption
23:37:2c:e3:37:ae:da:eb:b5:bf:30:aa:53:fe:12:21:9b:35:
73:fa:90:f8:82:94:3b:e8:c1:cb:a2:a5:2a:89:4a:33:95:29:
b4:31:da:31:6e:c7:6b:80:9e:9a:38:74:3f:f6:e5:ff:45:02:
25:20:6f:04:94:6a:b4:14:af:8c:c1:55:33:3a:82:60:7e:70:
56:ad:43:e9:f3:1b:bc:2f:aa:7a:c2:a1:53:8d:13:b7:8a:2e:
c7:77:4b:a2:ec:7d:a2:40:31:41:66:79:8b:c7:5d:cf:56:c2:
82:98:95:b4:05:25:55:4d:50:ed:66:f7:7f:cb:65:0e:f4:ca:
9c:1a:af:bc:37:0a:6b:5b:ad:08:ae:e7:0e:1a:05:a9:c6:04:
28:f2:2b:b7:71:36:a0:b8:08:c3:cb:93:e1:30:02:c9:33:1f:
07:d4:37:ae:43:5b:be:a3:16:2f:ac:5f:d8:b7:4d:2d:8c:e3:
30:71:b2:32:43:81:2c:2f:d1:9d:d1:fb:4b:74:75:05:68:71:
d8:23:db:57:d6:c2:79:ae:02:2e:3c:e0:f3:2d:84:1f:73:89:
8a:6a:73:b9:99:3d:92:99:9b:ae:af:c8:d3:2a:46:df:7b:c7:
83:74:1a:5c:f2:97:1a:4f:8e:89:e9:a7:5b:7d:7a:9b:31:c2:
4d:dc:eb:7c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUadgra/aY23q83v8/ltgFTbJ3xTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFF
NTBEQUQ1MTAeFw0yMzEwMTQxNjAxNDNaFw0yNDEwMTIxNjA2NDNaMDMxMTAvBgNV
BAMTKDVEMjcxNkNEODU5MjMyMEQ4NjFFMjMyOTg0QUM2NEYwNjUwOEY5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTfbpCKc7rxkRPr3nO7CRwKLE
qvwikj+xtgvu73uXpnqUswrSWux+iTzVRtde0gcXCuxUelUXDwWy4jbAjiPCoEAq
PDEqUaBgx32rOJeE05aI4A4mj9kmHZ/Dcmq2ZBsMwfd2ZAh8I91KKwlFLvm2uZ6v
ygD9j0AkS9a3PDlGJZvkNU013rd61wcyErtMuEymGxOR+Q3hO2LRWRIVfXrxxcgZ
2kGOLYiJI+z2Nt5z2Z97h0pBJI6h0fPjpYlB/ZgLW5IVLK9vFHdKoFaEKCByu3fn
2CBXCVlacH1YmnZ0FuVBbw4KtI8SPGR5DqmaeDM7XsdUKNuGzIIdPRhcmf9FAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUXScWzYWSMg2GHiMphKxk8GUI+UAwHwYDVR0j
BBgwFoAUNOaqx0GT/jTFfLX1YmCO4eUNrVEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzYvMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFFNTBEQUQ1MS5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xLzM0RTZBQUM3NDE5M0ZFMzRDNTdDQjVGNTYyNjA4RUUxRTUw
REFENTEuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUHMAuGgZVyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3
LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS82LzMyNjEzMTMyM2E2NDY0MzQz
NzNhMzgzNDY2NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAKhLdR4T/MA0GCSqGSIb3DQEBCwUAA4IBAQAjNyzjN67a67W/MKpT
/hIhmzVz+pD4gpQ76MHLoqUqiUozlSm0MdoxbsdrgJ6aOHQ/9uX/RQIlIG8ElGq0
FK+MwVUzOoJgfnBWrUPp8xu8L6p6wqFTjRO3ii7Hd0ui7H2iQDFBZnmLx13PVsKC
mJW0BSVVTVDtZvd/y2UO9MqcGq+8NwprW60IrucOGgWpxgQo8iu3cTaguAjDy5Ph
MALJMx8H1DeuQ1u+oxYvrF/Yt00tjOMwcbIyQ4EsL9Gd0ftLdHUFaHHYI9tX1sJ5
rgIuPODzLYQfc4mKanO5mT2SmZuur8jTKkbfe8eDdBpc8pcaT46J6adbfXqbMcJN
3Ot8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org