Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa
File: 323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: Z99Bvpm2q8Ed6kEZl0LXgC8ZCLgzUS6u0qZcSvEQLSU=
Subject key identifier: B8:FB:24:5B:1E:46:B6:07:5A:74:37:EF:B0:C2:56:C6:8A:BF:BF:07
Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial: 33F17366E84A5891EEF857B9BEEF72DA1B23A20E
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa
Signing time: Wed 10 Jan 2024 12:25:22 +0000
ROA not before: Wed 10 Jan 2024 12:20:22 +0000
ROA not after: Wed 08 Jan 2025 12:25:22 +0000
asID: 47272
IP address blocks: 2001:67c:d90::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 20:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f1:73:66:e8:4a:58:91:ee:f8:57:b9:be:ef:72:da:1b:23:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Validity
Not Before: Jan 10 12:20:22 2024 GMT
Not After : Jan 8 12:25:22 2025 GMT
Subject: CN=B8FB245B1E46B6075A7437EFB0C256C68ABFBF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:33:e6:c3:3b:3e:ba:c2:f6:62:f4:0b:c6:
ac:41:a9:e4:cb:88:d7:fa:30:4a:2c:cc:54:bf:b8:
ee:ac:84:90:19:37:da:7c:77:a1:bb:fa:e6:9b:e7:
34:80:52:fd:54:d5:c8:c2:37:e5:c5:3c:12:23:b7:
ee:75:d0:e0:88:63:b2:8a:80:f1:03:20:6b:74:ab:
f1:a8:b3:07:52:98:9b:a0:a6:0a:9a:92:f5:70:37:
30:aa:f4:74:5c:d0:77:d2:1b:b7:c7:f1:2d:ef:6b:
26:0c:6e:b7:98:46:52:e7:3a:44:69:b5:e0:92:63:
97:e9:1a:69:e7:82:19:54:ce:f2:55:69:d2:55:75:
23:eb:01:44:f2:41:55:25:b1:23:31:27:c3:c0:88:
3f:4e:d0:0e:1e:77:e6:d9:2e:6e:8e:4d:43:12:e8:
3b:8f:32:2c:ba:95:20:86:30:2e:88:61:d8:98:cb:
3d:7c:f4:b8:a0:5a:87:aa:6e:ad:42:a9:d9:10:08:
bc:b7:08:12:c7:56:da:20:0f:a1:03:00:f6:5c:69:
e0:4a:e0:a9:cc:68:b2:ae:37:f0:64:a0:78:dd:52:
fe:d5:65:d3:9e:87:b2:b6:93:24:88:71:73:a7:b5:
cd:c9:7b:ab:2f:97:08:91:ff:c8:8a:a7:5a:dc:8a:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:24:5B:1E:46:B6:07:5A:74:37:EF:B0:C2:56:C6:8A:BF:BF:07
X509v3 Authority Key Identifier:
keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d90::/48
Signature Algorithm: sha256WithRSAEncryption
85:80:b6:9d:76:8b:9b:fe:0a:8e:3f:ac:12:94:02:43:3a:2e:
75:66:29:69:74:96:4e:20:c2:3d:9d:01:d0:c0:e9:17:0f:4c:
75:a5:49:9b:03:4e:bc:2c:66:50:b7:18:55:f2:65:4b:c8:de:
93:d6:12:9f:ed:96:01:05:a1:f5:17:5b:bd:74:e2:fc:b2:a7:
24:3b:d0:7c:ab:af:96:26:f0:4e:e0:a3:90:50:2d:9f:09:0a:
67:69:3b:46:db:1f:33:e0:70:a4:53:84:40:9a:46:89:26:34:
b2:93:62:92:7e:17:15:ed:d6:1e:03:b2:5a:f3:41:db:64:f2:
40:8d:13:60:06:73:85:5a:43:5b:61:7f:6b:d9:29:a6:62:e3:
3d:85:62:73:1a:ed:07:69:11:ca:12:ac:19:e5:f5:c1:4b:5e:
60:9a:64:46:40:e0:fd:cf:60:31:71:b4:96:ec:19:09:1b:6e:
75:ef:f6:51:2a:14:00:3e:30:a6:c5:de:2e:eb:b2:35:db:f8:
93:2a:94:e2:f2:07:84:67:93:21:f3:81:d2:71:1d:a0:40:93:
91:55:58:b8:5b:e6:92:42:97:01:a5:31:95:4e:d2:9f:c0:4e:
8d:f0:b5:92:bb:89:ac:5f:d9:b9:eb:eb:48:fd:d2:f9:4c:f5:
86:e9:12:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 30 21:19:55 2024 by rpki-client on console-ams.rpki-client.org