Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3634203d3e203434383137.roa
File: 326130663a383563313a3332353a3a2f34382d3634203d3e203434383137.roa (raw, json)
Hash identifier: oZj2itn3MrfbofQwF6VOa18Tc2gr/fHzGjKKAUtefqU=
Subject key identifier: CE:29:32:4C:43:9B:AD:5E:2C:E1:BC:D8:99:8B:3F:14:75:54:89:E4
Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial: 235AE1F91089D1DBD52E0B0754B76B0A22C7D33C
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3634203d3e203434383137.roa
Signing time: Tue 07 Nov 2023 15:58:13 +0000
ROA not before: Tue 07 Nov 2023 15:53:13 +0000
ROA not after: Tue 05 Nov 2024 15:58:13 +0000
asID: 44817
IP address blocks: 2a0f:85c1:325::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 08 Nov 2023 14:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5a:e1:f9:10:89:d1:db:d5:2e:0b:07:54:b7:6b:0a:22:c7:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Validity
Not Before: Nov 7 15:53:13 2023 GMT
Not After : Nov 5 15:58:13 2024 GMT
Subject: CN=CE29324C439BAD5E2CE1BCD8998B3F14755489E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:05:cb:92:2a:49:36:8e:ae:97:e6:0b:bb:
2e:68:f7:0c:35:6a:fd:72:28:82:4c:86:88:d4:f8:
ea:20:bd:19:ff:05:73:4d:a6:b2:b0:b1:ec:80:0d:
1e:19:c0:2b:61:e4:f0:07:f9:90:65:d1:09:2b:f3:
ec:00:29:f7:4a:87:f2:bf:80:58:e9:7d:a5:3b:75:
c8:5e:90:f9:7a:3e:05:1a:d9:44:9f:cc:41:a0:be:
50:2b:24:14:5f:db:a5:bb:3e:65:4d:f2:82:5f:20:
5e:38:70:cc:04:1d:a5:3d:18:f8:c5:24:23:a9:dd:
15:f5:e0:0a:92:f8:2c:b6:df:8e:5a:d9:37:2d:75:
c1:48:13:bc:39:47:53:c2:69:cf:82:8d:7e:fd:63:
70:56:47:11:46:56:a2:3c:9b:4a:74:a0:07:25:19:
45:9c:b4:50:fa:b4:8e:af:38:ab:e0:cd:49:09:44:
e3:06:e8:b2:03:94:d8:20:eb:cb:3a:b3:80:63:8a:
4e:c8:c7:32:fe:50:c9:f7:a3:ae:80:0a:85:07:53:
9e:01:61:49:ed:69:62:51:85:02:fd:87:e2:5c:21:
4b:db:0d:5f:62:6d:c1:3f:5e:32:3f:c1:b7:f0:0c:
9e:a9:1a:b7:4a:78:db:a2:6b:3d:97:39:03:a4:c1:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:32:4C:43:9B:AD:5E:2C:E1:BC:D8:99:8B:3F:14:75:54:89:E4
X509v3 Authority Key Identifier:
keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3634203d3e203434383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
24:9c:21:8a:2e:4b:60:57:66:65:a0:e9:2a:c2:5d:a4:9b:d4:
4b:fb:18:5c:a0:7a:05:7b:a7:82:1c:bf:b9:01:37:dc:02:01:
c7:36:5c:5c:bf:bd:1b:8f:a4:24:6d:66:8a:a4:e5:07:f5:47:
8c:5f:96:b4:2a:28:79:40:d3:5a:95:dd:49:6e:6f:65:f8:fd:
1a:2c:d3:bd:89:e4:ac:8b:cc:de:34:05:49:f1:43:f4:84:75:
af:f9:aa:ca:2f:39:24:3c:22:7a:b7:f6:d1:8d:f8:59:39:31:
17:07:55:0f:8f:a8:ff:09:6c:83:c7:4b:ba:bc:79:d1:53:30:
9f:6c:31:f5:89:59:59:4f:25:35:48:ac:74:ab:ab:40:f7:29:
bb:12:82:84:03:e5:e2:74:1b:77:91:f9:75:3a:b0:d9:4a:f8:
40:97:00:27:5c:4c:e6:6d:20:b2:e8:89:3d:e5:c9:55:83:30:
4a:37:d8:62:26:64:02:de:c5:d2:9c:1b:5a:38:38:e0:45:9a:
5c:ed:c0:f4:0c:41:37:d5:a2:d3:51:54:77:7d:0d:5f:24:6f:
90:f8:11:58:04:3d:25:95:22:25:b0:b8:eb:8e:98:52:de:e3:
1e:3a:0f:62:fd:d2:7b:ac:6a:1f:64:37:17:04:97:96:53:3b:
34:72:b7:ab
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIUI1rh+RCJ0dvVLgsHVLdrCiLH0zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC
OUVFREU1MjAeFw0yMzExMDcxNTUzMTNaFw0yNDExMDUxNTU4MTNaMDMxMTAvBgNV
BAMTKENFMjkzMjRDNDM5QkFENUUyQ0UxQkNEODk5OEIzRjE0NzU1NDg5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3QXLkipJNo6ul+YLuy5o9ww1
av1yKIJMhojU+OogvRn/BXNNprKwseyADR4ZwCth5PAH+ZBl0Qkr8+wAKfdKh/K/
gFjpfaU7dchekPl6PgUa2USfzEGgvlArJBRf26W7PmVN8oJfIF44cMwEHaU9GPjF
JCOp3RX14AqS+Cy2345a2TctdcFIE7w5R1PCac+CjX79Y3BWRxFGVqI8m0p0oAcl
GUWctFD6tI6vOKvgzUkJROMG6LIDlNgg68s6s4Bjik7IxzL+UMn3o66ACoUHU54B
YUntaWJRhQL9h+JcIUvbDV9ibcE/XjI/wbfwDJ6pGrdKeNuiaz2XOQOkwYfhAgMB
AAGjggKBMIICfTAdBgNVHQ4EFgQUzikyTEObrV4s4bzYmYs/FHVUieQwHwYDVR0j
BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy
NEU1NzJFQ0I5RUVERTUyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF
BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvMS8zMjYxMzA2
NjNhMzgzNTYzMzEzYTMzMzIzNTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDM0MzQz
ODMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqD4XBAyUwDQYJKoZIhvcNAQELBQADggEBACScIYou
S2BXZmWg6SrCXaSb1Ev7GFygegV7p4Icv7kBN9wCAcc2XFy/vRuPpCRtZoqk5Qf1
R4xflrQqKHlA01qV3Ulub2X4/Ros072J5KyLzN40BUnxQ/SEda/5qsovOSQ8Inq3
9tGN+Fk5MRcHVQ+PqP8JbIPHS7q8edFTMJ9sMfWJWVlPJTVIrHSrq0D3KbsSgoQD
5eJ0G3eR+XU6sNlK+ECXACdcTOZtILLoiT3lyVWDMEo32GImZALexdKcG1o4OOBF
mlztwPQMQTfVotNRVHd9DV8kb5D4EVgEPSWVIiWwuOuOmFLe4x46D2L90nusah9k
NxcEl5ZTOzRyt6s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:58 2024 by rpki-client on console-ams.rpki-client.org