Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438633a3a2f34382d3438203d3e203437323732.roa
File: 323030313a3637633a6438633a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: KJTpjevOWmmlyWHLi6YG4Z1azDuXouY1rfVHKiWcKFQ=
Subject key identifier: 69:A5:A6:E1:3C:01:F2:3C:C3:A4:57:ED:22:48:B7:42:FB:CD:BC:ED
Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial: 57CF8882ACD28A9BE0331CB9183A461F8F138D78
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438633a3a2f34382d3438203d3e203437323732.roa
Signing time: Wed 10 Jan 2024 12:25:05 +0000
ROA not before: Wed 10 Jan 2024 12:20:05 +0000
ROA not after: Wed 08 Jan 2025 12:25:05 +0000
asID: 47272
IP address blocks: 2001:67c:d8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 20:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:cf:88:82:ac:d2:8a:9b:e0:33:1c:b9:18:3a:46:1f:8f:13:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Validity
Not Before: Jan 10 12:20:05 2024 GMT
Not After : Jan 8 12:25:05 2025 GMT
Subject: CN=69A5A6E13C01F23CC3A457ED2248B742FBCDBCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:f4:16:c0:40:ec:05:84:4f:86:4d:16:27:
00:7a:65:22:b7:65:1b:d9:5a:8a:5b:ea:4f:bf:f3:
ab:bf:00:05:37:9e:b7:3f:7c:3c:4c:b9:dc:c1:ac:
0d:4f:e8:b6:94:aa:76:db:25:6a:65:16:06:9d:10:
62:60:8f:5c:73:70:1d:3c:54:5d:e9:37:9a:59:5c:
26:f1:ce:8a:ae:03:33:50:40:64:c1:b5:cd:7a:30:
e9:4d:0a:dc:a6:24:86:e5:c4:f7:04:b0:b7:6f:ec:
98:27:bf:1d:6d:45:c1:cc:a6:eb:4b:00:55:14:e1:
c4:0b:5e:a6:ea:cf:f1:ca:12:be:d7:d3:44:a1:19:
e3:30:18:7f:a9:8a:8b:29:8a:3f:04:24:90:b1:ef:
2c:a4:e3:a4:88:ba:d9:f1:93:7b:97:3d:c2:a7:9b:
ff:a4:81:56:bb:eb:cd:61:b8:09:7a:ab:d3:6b:2e:
9a:51:81:44:a3:d2:80:e2:c1:3c:df:63:e6:80:0f:
2d:fd:26:80:5c:59:7e:15:e1:f3:ba:61:2e:c1:1b:
2f:1e:8f:bc:04:0a:38:ea:09:62:18:a2:c0:c7:5b:
d9:83:6b:1f:f1:97:35:1c:a3:48:25:d6:c7:56:91:
71:ed:02:f7:dd:eb:e2:17:63:50:96:07:d3:c0:df:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:A6:E1:3C:01:F2:3C:C3:A4:57:ED:22:48:B7:42:FB:CD:BC:ED
X509v3 Authority Key Identifier:
keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438633a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
7d:8c:1f:f9:c3:36:7a:11:32:3d:c4:90:f5:42:cf:f0:c0:11:
a5:53:e8:58:aa:22:4a:d8:a2:d7:1a:4e:7c:c6:c3:1a:2c:c9:
22:9c:c8:ab:61:21:be:28:b0:4f:0c:b8:b3:77:3b:93:44:28:
c0:aa:13:9b:e5:b8:25:cc:da:43:13:b4:08:38:1a:49:8f:32:
a4:b1:8a:a0:47:0d:1b:9e:83:fb:bd:c8:b0:97:ed:6b:12:17:
04:1f:f2:94:5e:89:19:0e:cb:dd:35:ed:8a:4f:bc:3e:03:42:
ae:a9:4b:dd:63:75:49:56:32:e9:fe:ec:46:d7:b5:28:2f:82:
8b:8e:d7:e0:46:62:14:58:b3:fa:f5:d5:3f:7b:92:bd:2b:55:
ea:27:57:fa:0a:e9:d9:67:8d:77:0c:e6:37:93:5e:e0:11:8d:
b9:40:2c:5e:0b:83:23:da:4a:33:55:4a:94:19:f5:c1:74:07:
38:36:8f:02:02:93:e2:9f:6a:d9:d7:9c:2f:93:d4:8a:d5:12:
84:f9:83:09:52:41:50:f3:a3:5e:00:49:39:84:32:ed:bc:07:
60:e4:3e:9d:7c:af:2f:b6:a3:e3:ec:eb:4e:b7:58:8e:65:f8:
04:d4:29:17:31:16:c0:6b:a6:df:0d:96:c4:c8:58:80:d3:01:
ac:ab:b9:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org