Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a336630303a3a2f34302d3430203d3e2030.roa
File: 326130353a646663313a336630303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier: eIGKSMZe67f5VFVSxVC5Z7tC64yQ0cIhnslHACvZVRM=
Subject key identifier: 27:9A:C8:6B:EE:A7:57:56:1B:5C:64:37:A8:E3:31:60:1E:E4:B6:71
Certificate issuer: /CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Certificate serial: 0F846AC98FE4B61B4575615F65D19E1EC4BB24E7
Authority key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a336630303a3a2f34302d3430203d3e2030.roa
Signing time: Wed 28 Aug 2024 23:42:05 +0000
ROA not before: Wed 28 Aug 2024 23:37:05 +0000
ROA not after: Wed 27 Aug 2025 23:42:05 +0000
asID: 0
IP address blocks: 2a05:dfc1:3f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 30 Aug 2024 20:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:84:6a:c9:8f:e4:b6:1b:45:75:61:5f:65:d1:9e:1e:c4:bb:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Validity
Not Before: Aug 28 23:37:05 2024 GMT
Not After : Aug 27 23:42:05 2025 GMT
Subject: CN=279AC86BEEA757561B5C6437A8E331601EE4B671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:7b:3f:ac:19:15:b8:78:04:49:e7:b3:7e:
58:be:43:43:fd:82:dc:78:c8:36:cd:89:7f:e8:84:
0d:fa:43:1c:41:b2:e9:fb:bb:b6:9e:f8:88:26:e3:
a3:0c:4e:48:37:6d:2c:6e:00:fa:67:21:df:4c:7d:
60:cc:84:40:85:21:83:f1:58:5f:1b:89:6f:da:92:
b2:f0:d4:0f:fe:af:0f:68:e0:16:b3:7f:e7:38:19:
57:c5:ef:0c:61:3f:9d:de:54:66:b0:4b:2a:8b:6a:
4e:d5:62:2e:63:52:bb:ea:a6:eb:f6:ab:11:fa:a4:
15:83:ab:03:01:fb:96:a1:1b:db:19:48:c4:fb:1a:
9b:9a:2c:cd:7d:e6:af:7f:0e:d0:6e:51:dd:fa:12:
40:70:db:6d:35:ec:6a:48:05:1c:ef:58:15:ef:cf:
bb:b4:25:77:f7:f7:8d:6d:3a:c6:a0:69:f1:3a:05:
ee:6f:21:3c:d8:99:81:78:a0:00:69:df:27:88:e0:
d3:f0:fe:00:a4:78:95:81:77:eb:34:ef:fd:41:09:
3f:d3:5d:fd:77:e9:22:4d:0c:4c:b5:52:57:2e:0b:
61:de:cf:47:bc:10:ed:36:46:05:a1:0f:4b:ac:cc:
af:a5:67:de:2f:f1:f4:4b:27:bd:c5:3b:79:34:f3:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:C8:6B:EE:A7:57:56:1B:5C:64:37:A8:E3:31:60:1E:E4:B6:71
X509v3 Authority Key Identifier:
keyid:A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a336630303a3a2f34302d3430203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
55:b3:9c:86:71:40:15:af:3e:0b:fb:d7:c3:5d:49:cd:a7:d5:
05:1b:a2:d8:29:b8:de:31:4a:83:59:46:a6:d0:42:29:9b:eb:
a4:f6:39:9d:48:1b:05:ed:68:fc:03:d3:5e:1c:33:b4:5c:02:
80:9f:7a:a5:59:7b:e2:c6:e9:e8:93:0c:b1:a8:ca:76:d1:7d:
7f:5a:b8:f6:57:89:65:5f:09:8b:ac:9c:ba:5d:77:54:7d:ee:
48:6a:ce:13:08:be:83:69:7c:e9:0a:ba:a6:dd:9b:fd:37:0a:
b5:8b:7a:1d:6a:8d:4f:3f:36:25:9d:e4:98:77:f5:6f:ee:59:
6b:67:cf:71:27:90:0f:4a:e0:fe:b1:2c:a7:96:5a:74:c7:38:
b0:94:f4:23:29:28:da:75:11:20:a8:69:09:ec:e7:b1:7d:ae:
f8:3b:bd:85:3b:c7:d0:f1:86:38:9f:7b:af:9a:12:88:4c:1c:
2e:49:38:1c:21:b0:42:3f:af:bb:25:d6:c3:bc:5a:c0:7a:ac:
92:fe:49:40:f6:2d:c6:40:3a:72:e6:8e:26:bb:45:31:28:e9:
b6:06:ff:45:9d:0b:a6:9a:ef:35:3a:94:35:63:8e:43:4c:70:
38:ee:a9:44:9c:0d:f4:55:79:7a:80:dc:67:db:4c:0f:6d:9f:
5d:df:5a:11
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 30 22:58:11 2024 by rpki-client on console-ams.rpki-client.org