Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313431303a3a2f34342d3434203d3e20323134373632.roa
File: 326130353a646663313a313431303a3a2f34342d3434203d3e20323134373632.roa (raw, json)
Hash identifier: 2z04fxfCfy/bd9W+75NUbFXBd8Vz7+1KZ6wUnI0KEtE=
Subject key identifier: 99:69:94:45:BE:D0:42:99:1A:BB:E6:59:BF:25:41:49:0D:C6:1F:CE
Certificate issuer: /CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Certificate serial: 1D8EDE01A4C22FFEE1F5F06944A9D4597FBC22AC
Authority key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313431303a3a2f34342d3434203d3e20323134373632.roa
Signing time: Wed 05 Jun 2024 20:15:46 +0000
ROA not before: Wed 05 Jun 2024 20:10:46 +0000
ROA not after: Wed 04 Jun 2025 20:15:46 +0000
asID: 214762
IP address blocks: 2a05:dfc1:1410::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 25 Jun 2024 13:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8e:de:01:a4:c2:2f:fe:e1:f5:f0:69:44:a9:d4:59:7f:bc:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Validity
Not Before: Jun 5 20:10:46 2024 GMT
Not After : Jun 4 20:15:46 2025 GMT
Subject: CN=99699445BED042991ABBE659BF2541490DC61FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:cc:1f:4a:f8:25:b3:07:4f:65:4f:af:6f:
56:c0:51:cb:a9:30:2f:72:83:e7:5c:92:aa:65:46:
97:e8:25:9a:38:5e:0f:51:ed:6e:7c:72:ff:f7:23:
5d:64:94:31:fd:9a:a3:f6:08:48:f3:62:30:30:56:
ff:63:f7:f7:76:1f:01:2a:eb:db:1c:ae:95:d0:ce:
a6:90:3c:3f:96:24:7b:44:c9:76:be:b1:a9:c1:d1:
6d:ca:f4:36:4b:63:85:ca:f7:1e:f9:87:fe:79:85:
1d:d8:48:f8:d0:33:76:24:33:fe:7a:a3:b9:b0:f8:
eb:26:ee:51:2f:2e:1e:73:53:fb:95:39:cc:0a:64:
05:80:11:66:41:7d:d2:94:0b:cf:5c:0d:b0:4a:58:
91:24:7c:2f:9f:20:ec:99:a7:64:e7:84:34:7b:94:
fd:c7:f9:e3:05:1e:cd:f4:95:b3:cb:2d:f9:58:d7:
25:16:2f:3a:15:f0:dd:d0:60:a0:7b:a2:20:1f:36:
e2:36:46:1b:c1:ee:c1:a4:b0:1f:67:53:0d:a8:92:
4d:af:89:44:78:21:98:00:ee:e7:82:f8:7f:1e:bb:
0a:86:aa:35:3a:37:9d:57:8f:f9:f4:83:be:ee:82:
4c:e5:83:6c:d4:29:6e:d7:91:29:38:bf:73:c3:00:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:94:45:BE:D0:42:99:1A:BB:E6:59:BF:25:41:49:0D:C6:1F:CE
X509v3 Authority Key Identifier:
keyid:A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313431303a3a2f34342d3434203d3e20323134373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1410::/44
Signature Algorithm: sha256WithRSAEncryption
72:47:1d:72:26:88:c9:bf:0a:79:7c:f7:11:c5:c1:29:99:fa:
a3:24:27:3a:e5:3b:93:33:26:43:c1:bf:08:63:0e:65:d3:46:
d8:dd:5e:90:19:f9:da:fa:86:05:4f:ee:39:47:53:28:80:06:
f1:65:d1:9f:eb:96:d1:49:64:d8:85:82:84:e5:ab:d3:22:a5:
16:5c:3e:15:75:b4:13:3f:e2:43:68:64:69:05:9d:17:93:81:
88:6d:ab:6c:80:93:5e:10:09:a4:bf:c1:28:d4:a8:17:45:f7:
6a:f3:b7:da:86:49:00:19:55:d9:ee:f7:e6:0b:a4:a1:cb:4d:
a7:de:f2:e3:84:b6:e3:c8:b2:5a:fa:83:04:71:8f:58:00:75:
8f:06:56:e3:95:38:26:d4:87:b3:3f:82:14:84:9f:88:a0:a8:
af:cf:e0:f3:ed:d2:4d:2a:cb:25:63:ef:86:4f:91:3a:29:20:
22:3d:86:e6:b8:f6:c1:a1:a5:2f:72:7d:33:8f:ff:bd:17:9b:
a0:c0:09:fd:ac:88:a8:23:b6:98:f4:ec:fa:80:27:3b:f1:16:
eb:60:dc:ce:eb:09:ca:28:7e:ae:d3:21:e8:27:28:b0:a6:79:
ea:cc:98:a1:6c:65:2d:0e:a7:f5:c3:cb:7a:6a:db:f3:37:5e:
1f:d8:a0:b8
-----BEGIN CERTIFICATE-----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Generated at Tue Jun 25 18:30:31 2024 by rpki-client on console-fra.rpki-client.org