Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33322d3438203d3e203136353039.roa
File: 326130363a313238333a3a2f33322d3438203d3e203136353039.roa (raw, json)
Hash identifier: UvvjiLyZHjqJLV1+S/CbF1b+yDFgpOOsJnaKtyNTNiY=
Subject key identifier: ED:DE:CA:6F:DE:B5:B2:73:98:70:3E:99:95:4A:6F:FB:4C:F3:32:E8
Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial: 54B137A847D5AED296D73CF7143958198C5B00B8
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33322d3438203d3e203136353039.roa
Signing time: Sat 19 Oct 2024 08:12:05 +0000
ROA not before: Sat 19 Oct 2024 08:07:05 +0000
ROA not after: Sat 18 Oct 2025 08:12:05 +0000
asID: 16509
IP address blocks: 2a06:1283::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Oct 2024 18:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b1:37:a8:47:d5:ae:d2:96:d7:3c:f7:14:39:58:19:8c:5b:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
Validity
Not Before: Oct 19 08:07:05 2024 GMT
Not After : Oct 18 08:12:05 2025 GMT
Subject: CN=EDDECA6FDEB5B27398703E99954A6FFB4CF332E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:39:15:47:ec:2f:02:0d:60:be:0f:6d:00:
5f:57:44:18:ea:58:08:02:5c:75:1d:ba:ce:6f:22:
8f:89:4e:49:9e:ef:12:91:91:f9:f6:d0:5a:20:d8:
b7:72:05:86:ad:6e:ed:99:97:1b:32:33:5d:34:8e:
68:7e:b9:f7:83:f1:1c:33:62:80:b8:35:de:2b:ba:
ce:32:e1:0b:aa:44:48:d9:eb:38:1e:f6:5b:ab:0d:
e9:da:2c:9b:7b:6a:84:a5:c1:7b:67:7a:57:ec:56:
9b:31:df:6f:53:2c:57:bd:3c:34:ca:f3:98:ec:a6:
0c:f1:50:f0:df:a5:4e:df:76:b9:69:04:9d:ae:e4:
ee:ed:6a:9d:43:82:18:f0:8f:1e:07:7a:9f:f2:b9:
92:a4:1e:fe:a8:3b:6c:07:90:52:8d:e9:56:1d:52:
6c:6e:2f:32:2b:81:71:04:2f:0b:0a:d6:5c:0e:23:
2a:ba:4c:3e:b7:72:58:ee:18:15:b1:fc:bc:27:77:
c2:53:04:3d:61:7e:4c:a3:b2:a0:cc:21:71:ea:0c:
da:32:37:61:c2:e1:87:d0:c9:08:b6:98:ab:9d:9d:
03:f0:7e:c0:f8:35:85:ed:04:6a:6d:a1:c2:48:0d:
dd:77:80:34:fe:62:46:32:fe:41:52:20:a4:8d:ad:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DE:CA:6F:DE:B5:B2:73:98:70:3E:99:95:4A:6F:FB:4C:F3:32:E8
X509v3 Authority Key Identifier:
keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33322d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
64:cd:76:54:c7:f1:82:2e:4a:50:d8:83:79:c2:05:ff:ac:40:
98:b7:de:a8:d6:85:11:2a:db:29:f5:b0:cc:0c:c3:2e:f4:94:
62:b7:45:da:a7:b7:d9:4f:82:90:13:27:5d:b4:dd:d8:1c:01:
6b:e9:53:e7:6d:b8:8a:7f:0e:38:5b:57:87:87:73:81:a5:74:
44:55:2b:11:91:a7:ec:e2:0f:dd:01:6a:4c:0e:04:bd:6b:13:
0b:4e:32:14:4f:c7:40:92:a8:4a:1d:5d:96:d7:76:3b:53:79:
8f:18:31:6b:77:47:06:95:0a:d6:ec:7c:8f:2a:7c:5d:5e:65:
94:f1:3b:be:3c:8a:71:3b:54:e0:b1:4f:70:ff:4c:be:f6:af:
bc:dd:a7:bf:31:7d:02:b6:93:53:05:d9:b3:92:22:85:9c:50:
21:cb:6c:e1:e2:63:70:8f:f2:94:26:c2:84:07:4a:08:f7:f0:
9a:de:b3:3a:7c:89:d7:da:75:d6:82:18:06:74:a0:15:af:15:
61:f8:67:08:5c:12:ee:39:5c:1d:c3:9c:a2:f9:4a:e7:6e:7e:
7b:2c:ac:be:2b:09:73:fe:d0:e7:ff:20:f6:e3:7e:4d:a7:d9:
fe:5f:13:a2:d5:cd:62:7f:bd:61:17:52:a2:57:fe:2a:21:eb:
56:fb:9f:e2
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org