Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638363a3a2f34382d3438203d3e20323134343531.roa
File: 326130363a396638363a3a2f34382d3438203d3e20323134343531.roa (raw, json)
Hash identifier: cQoZ9hWQGfOnMwPrdXQk71LH9NqMY350VdVGiPAwnos=
Subject key identifier: 30:52:DA:61:3E:34:5B:D3:59:61:FE:98:13:03:45:B0:04:B4:63:70
Certificate issuer: /CN=469D308DBBB88444EF4530905C6C6D40559ADF4D
Certificate serial: 793286FF5A2C7B4125CFD3B0B56E085D325D95D8
Authority key identifier: 46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/469D308DBBB88444EF4530905C6C6D40559ADF4D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638363a3a2f34382d3438203d3e20323134343531.roa
Signing time: Mon 11 Nov 2024 00:09:21 +0000
ROA not before: Mon 11 Nov 2024 00:04:21 +0000
ROA not after: Mon 10 Nov 2025 00:09:21 +0000
asID: 214451
IP address blocks: 2a06:9f86::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Nov 2024 16:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:32:86:ff:5a:2c:7b:41:25:cf:d3:b0:b5:6e:08:5d:32:5d:95:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469D308DBBB88444EF4530905C6C6D40559ADF4D
Validity
Not Before: Nov 11 00:04:21 2024 GMT
Not After : Nov 10 00:09:21 2025 GMT
Subject: CN=3052DA613E345BD35961FE98130345B004B46370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:b7:44:bf:8a:d1:17:09:4d:72:41:40:ce:
49:b7:81:05:fb:34:e5:cd:58:f8:b4:e7:41:4f:9c:
56:7e:78:3c:fa:32:ba:3c:b8:0d:d5:a2:51:91:27:
21:a0:73:9d:f4:76:3d:57:16:28:5f:61:e8:af:94:
b2:e0:b9:0f:de:5c:ba:ac:32:b5:4b:1c:14:ae:b7:
f7:87:a0:c5:ad:d0:c7:ca:f5:7a:c5:e4:4a:bf:bd:
14:e4:e1:38:b0:ce:a3:16:7d:80:17:69:52:42:59:
95:51:3e:26:3e:6f:48:80:0a:0f:0f:10:f5:9c:d7:
b3:fe:2e:fe:ec:77:78:98:e1:ec:da:c4:e3:1b:ba:
de:2e:ff:58:8f:ad:45:c1:35:3c:08:4c:5d:25:08:
c5:df:43:a1:35:bc:d8:6c:65:8b:a4:b1:4e:48:41:
fb:02:94:24:fa:42:87:38:61:19:0d:81:43:0d:67:
89:1d:9c:22:be:cf:ff:ab:8f:de:7a:5f:3c:b1:bf:
d6:e0:46:b6:01:08:05:ba:b5:46:af:39:c1:14:70:
05:8b:38:f0:1a:cc:ce:1e:da:f2:ee:c5:1d:8e:e3:
9b:c0:85:67:ef:a7:01:73:63:63:f7:a3:f4:a2:2c:
00:65:94:54:53:9c:5a:14:12:dd:6d:ba:74:21:bf:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:DA:61:3E:34:5B:D3:59:61:FE:98:13:03:45:B0:04:B4:63:70
X509v3 Authority Key Identifier:
keyid:46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/469D308DBBB88444EF4530905C6C6D40559ADF4D.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/469D308DBBB88444EF4530905C6C6D40559ADF4D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638363a3a2f34382d3438203d3e20323134343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f86::/48
Signature Algorithm: sha256WithRSAEncryption
58:6d:2a:8f:f7:de:a3:ea:34:60:f7:74:4b:10:28:b7:61:aa:
27:46:f8:91:d8:15:c0:85:de:99:64:6a:cc:ba:53:7e:ae:6b:
4a:fa:b7:94:54:39:b9:a1:fb:40:09:c7:aa:aa:9e:12:1b:bc:
f8:61:14:b3:1e:3a:6e:56:5d:a5:ec:06:d3:0d:52:61:e9:d1:
ae:7a:03:c4:de:da:c2:05:26:1e:0e:fc:67:8a:54:2b:8d:7f:
e5:45:90:6a:d8:11:84:28:4f:1a:65:2e:3d:b8:92:b6:c2:04:
96:b6:64:e3:ef:55:cc:24:6e:6f:69:8a:cd:e7:cb:b4:c8:d3:
f2:dd:a0:d0:be:0a:77:3f:9e:f8:a1:be:5c:ff:80:8f:62:f0:
46:c2:76:49:4c:1d:9d:de:9d:f0:f6:96:fc:d9:54:b7:99:0e:
9f:71:f7:0d:13:f3:27:44:fd:d3:e6:14:b6:e7:8a:ce:9e:76:
96:23:e7:92:eb:91:bc:52:d9:b6:40:d9:6d:00:57:46:fb:85:
4b:b2:a0:fc:79:2e:ab:b3:93:ef:04:43:6b:18:7e:e5:cb:66:
01:b2:55:26:8d:86:b5:84:31:fc:48:04:fc:1d:29:34:21:51:
4d:48:02:7f:be:f5:7f:7e:55:92:ef:9e:ff:70:c1:00:0d:fe:
47:99:6f:eb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUeTKG/1ose0Elz9OwtW4IXTJdldgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5RDMwOERCQkI4ODQ0NEVGNDUzMDkwNUM2QzZENDA1
NTlBREY0RDAeFw0yNDExMTEwMDA0MjFaFw0yNTExMTAwMDA5MjFaMDMxMTAvBgNV
BAMTKDMwNTJEQTYxM0UzNDVCRDM1OTYxRkU5ODEzMDM0NUIwMDRCNDYzNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8bdEv4rRFwlNckFAzkm3gQX7
NOXNWPi050FPnFZ+eDz6Mro8uA3VolGRJyGgc530dj1XFihfYeivlLLguQ/eXLqs
MrVLHBSut/eHoMWt0MfK9XrF5Eq/vRTk4TiwzqMWfYAXaVJCWZVRPiY+b0iACg8P
EPWc17P+Lv7sd3iY4ezaxOMbut4u/1iPrUXBNTwITF0lCMXfQ6E1vNhsZYuksU5I
QfsClCT6Qoc4YRkNgUMNZ4kdnCK+z/+rj956Xzyxv9bgRrYBCAW6tUavOcEUcAWL
OPAazM4e2vLuxR2O45vAhWfvpwFzY2P3o/SiLABllFRTnFoUEt1tunQhv8z5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUMFLaYT40W9NZYf6YEwNFsAS0Y3AwHwYDVR0j
BBgwFoAURp0wjbu4hETvRTCQXGxtQFWa300wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzMvNDY5RDMwOERCQkI4ODQ0NEVGNDUzMDkwNUM2QzZENDA1NTlBREY0RC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ2OUQzMDhEQkJCODg0
NDRFRjQ1MzA5MDVDNkM2RDQwNTU5QURGNEQuY2VyMIGtBggrBgEFBQcBCwSBoDCB
nTCBmgYIKwYBBQUHMAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1
MC8zLzMyNjEzMDM2M2EzOTY2MzgzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzEzNDM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGn4YAADANBgkqhkiG9w0BAQsFAAOCAQEA
WG0qj/feo+o0YPd0SxAot2GqJ0b4kdgVwIXemWRqzLpTfq5rSvq3lFQ5uaH7QAnH
qqqeEhu8+GEUsx46blZdpewG0w1SYenRrnoDxN7awgUmHg78Z4pUK41/5UWQatgR
hChPGmUuPbiStsIElrZk4+9VzCRub2mKzefLtMjT8t2g0L4Kdz+e+KG+XP+Aj2Lw
RsJ2SUwdnd6d8PaW/NlUt5kOn3H3DRPzJ0T90+YUtueKzp52liPnkuuRvFLZtkDZ
bQBXRvuFS7Kg/Hkuq7OT7wRDaxh+5ctmAbJVJo2GtYQx/EgE/B0pNCFRTUgCf771
f35Vku+e/3DBAA3+R5lv6w==
-----END CERTIFICATE-----
Generated at Mon Nov 18 18:41:02 2024 by rpki-client on console-fra.rpki-client.org