Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330323a3a2f34382d3438203d3e20323136313037.roa
File: 326130353a646663313a6330323a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier: zEwQZwLvCZ4ZCVKe8MdU+5RTPijulwBFNlqQxT6Fsds=
Subject key identifier: 48:E7:06:CE:8A:68:21:1B:82:BD:91:DE:7E:E7:40:0F:69:67:63:3F
Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial: 1C57FFD0A519A812C858007F1AF5E08DC164E189
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330323a3a2f34382d3438203d3e20323136313037.roa
Signing time: Fri 19 Jan 2024 19:25:54 +0000
ROA not before: Fri 19 Jan 2024 19:20:54 +0000
ROA not after: Fri 17 Jan 2025 19:25:54 +0000
asID: 216107
IP address blocks: 2a05:dfc1:c02::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Sep 2024 19:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:57:ff:d0:a5:19:a8:12:c8:58:00:7f:1a:f5:e0:8d:c1:64:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Validity
Not Before: Jan 19 19:20:54 2024 GMT
Not After : Jan 17 19:25:54 2025 GMT
Subject: CN=48E706CE8A68211B82BD91DE7EE7400F6967633F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:ef:7e:f1:05:17:1e:89:92:3e:16:47:a0:
b5:7d:9c:4e:06:80:24:89:e4:db:fd:63:8e:09:72:
c8:33:df:9c:b0:ba:7d:ea:46:45:10:cd:05:a7:b0:
bd:38:32:71:06:7e:89:04:3a:39:ed:e5:9c:00:2a:
e1:21:03:96:62:3a:b2:e2:b8:ef:cb:e9:eb:83:0f:
1d:c8:c2:a5:9a:fb:4a:aa:91:c6:99:66:60:65:4e:
50:6e:a1:e9:01:b9:c9:56:44:0b:79:e9:6f:81:8f:
f5:8d:b9:d7:61:48:22:73:21:d5:1e:52:16:52:96:
91:10:5e:f9:58:df:7f:6b:70:13:42:4c:b8:67:c4:
73:b0:71:fb:9d:95:a6:f7:2b:48:06:44:65:62:18:
eb:67:da:95:c1:f1:1d:44:c7:d8:ff:a6:c3:c8:8c:
d5:7d:75:73:ff:7a:bf:6c:c3:bc:e7:cc:ca:76:5b:
07:64:88:df:a4:d5:cc:9b:d9:17:87:21:13:aa:de:
43:d5:01:81:0b:42:1d:69:96:ba:ab:33:e4:c9:87:
c5:36:b5:e6:93:5a:b9:f4:8b:40:4d:84:3c:ae:3c:
9e:b9:1e:60:ec:8a:69:d7:29:13:1e:c7:67:a7:ce:
36:24:66:1d:48:23:13:5e:0d:04:44:0b:c6:97:72:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:06:CE:8A:68:21:1B:82:BD:91:DE:7E:E7:40:0F:69:67:63:3F
X509v3 Authority Key Identifier:
keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330323a3a2f34382d3438203d3e20323136313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c02::/48
Signature Algorithm: sha256WithRSAEncryption
05:be:05:da:88:38:46:c0:46:bb:a7:97:a1:25:fa:32:15:e4:
3b:c8:02:c3:10:41:d9:d4:56:dd:fd:1e:41:5b:d6:52:c0:68:
4c:41:0b:ba:9f:7b:57:36:e6:95:ce:bc:74:b4:17:a2:05:b4:
6a:54:4c:f9:56:67:24:dc:0f:33:fd:87:41:8e:fa:ba:b3:55:
e3:08:8e:16:2f:37:3d:d1:0d:82:64:92:ea:71:65:83:6c:bf:
4b:91:d7:bb:4e:41:21:c3:4c:6a:61:1a:6c:bd:81:47:59:61:
c1:e3:7a:bc:32:6a:fc:cc:c7:37:90:72:52:36:21:8e:cf:b7:
f9:7c:a0:8d:5b:75:74:22:73:ce:1f:43:92:66:24:3b:01:ea:
13:20:cf:6c:43:73:aa:f1:9f:70:5c:c5:2b:cf:af:5b:12:1b:
b5:69:b3:d1:b0:8a:37:98:46:d8:84:4d:8f:11:97:83:05:3c:
71:f2:71:36:86:2b:5d:62:49:9b:b7:69:92:a2:f4:68:69:83:
12:60:4d:50:43:1a:4c:6c:c7:01:3b:53:35:d1:9f:3f:ae:52:
37:c3:bc:ea:49:76:0a:fc:4b:3f:88:1f:aa:f2:0a:30:64:be:
20:03:d9:ac:21:7f:3e:e6:e3:08:9c:49:d1:cf:21:84:b5:60:
05:86:03:1a
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 17 21:58:32 2024 by rpki-client on console-fra.rpki-client.org