Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386230303a3a2f34302d3430203d3e203530333835.roa
File: 326131343a373538313a386230303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier: Ko1pIv42dw6rV9x1kGJmUbxt2N1/cH+/zSTCQFZ0sQw=
Subject key identifier: FF:C7:A2:84:FE:C8:06:A5:32:C0:AF:20:BC:C4:73:86:1F:E2:CC:82
Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial: 13E342585CB80A9BE6A2130E3A2768027EAEAFB2
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386230303a3a2f34302d3430203d3e203530333835.roa
Signing time: Fri 17 May 2024 16:15:01 +0000
ROA not before: Fri 17 May 2024 16:10:01 +0000
ROA not after: Fri 16 May 2025 16:15:01 +0000
asID: 50385
IP address blocks: 2a14:7581:8b00::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 18 May 2024 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e3:42:58:5c:b8:0a:9b:e6:a2:13:0e:3a:27:68:02:7e:ae:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Validity
Not Before: May 17 16:10:01 2024 GMT
Not After : May 16 16:15:01 2025 GMT
Subject: CN=FFC7A284FEC806A532C0AF20BCC473861FE2CC82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:85:f2:25:26:e9:4c:85:6c:20:a0:c6:45:
0d:6d:3e:7f:34:bf:1f:5d:00:df:e7:35:8f:43:c2:
f3:81:77:bb:8e:cd:24:47:30:1a:df:80:98:af:90:
11:12:09:f0:76:e0:59:3d:ff:37:2f:db:36:c7:ee:
0f:23:c5:1f:c2:0c:00:42:43:7a:84:2c:1a:bd:96:
e1:66:eb:92:76:4f:04:13:12:b2:e0:2f:f6:34:33:
fc:a9:3e:b9:c4:97:26:1e:6f:36:21:70:9b:79:02:
e2:a4:b0:c4:17:5b:24:41:48:5c:cf:6e:98:69:a8:
d3:1b:a3:48:41:af:af:41:4c:d2:c2:3c:6b:01:14:
d2:06:3d:e1:74:27:53:84:38:38:28:a7:a6:f0:46:
92:cd:de:16:ea:06:cd:fd:9b:e7:d9:9d:98:66:3d:
e5:59:b5:5e:c9:15:98:c1:24:ee:39:2a:0c:9b:47:
e1:82:71:16:89:18:49:d3:05:ee:82:09:ed:c5:8c:
e2:37:84:f0:7d:e4:53:35:ba:f0:8a:66:a9:f1:43:
67:8b:af:34:53:e5:fe:98:c6:2d:cd:66:1b:02:c7:
58:b3:e3:f2:bf:25:53:6f:49:48:b4:8e:3b:c1:12:
7d:a7:c6:61:2a:6b:07:41:67:de:cf:7d:eb:7b:28:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:A2:84:FE:C8:06:A5:32:C0:AF:20:BC:C4:73:86:1F:E2:CC:82
X509v3 Authority Key Identifier:
keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386230303a3a2f34302d3430203d3e203530333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
c0:60:7e:71:61:6b:ef:38:81:1d:da:7e:5d:b0:4c:f1:15:64:
2f:a7:23:aa:57:06:54:6f:ba:10:ce:5e:09:33:0f:d1:c3:75:
09:c3:03:c2:68:7d:82:21:1d:d5:a3:da:bf:48:fd:14:e0:f4:
32:06:9e:a9:2b:02:2c:41:f6:46:de:eb:ce:81:6c:50:d6:2d:
91:44:96:21:cb:85:b1:d8:46:f3:18:0a:c9:be:74:bb:60:94:
f6:7d:85:6d:53:e1:9c:de:ff:f2:f4:c5:0f:1c:5c:cd:d8:fb:
e4:9a:94:9d:6e:75:47:e0:69:12:ad:b0:16:95:59:89:1d:1b:
95:62:75:00:9b:91:23:0b:4e:b1:55:9c:dd:62:ca:a8:2f:1e:
58:b3:08:ea:45:ae:7a:a4:a0:d3:ec:38:fc:59:c1:07:ad:6c:
ac:5d:52:4c:34:a7:b6:aa:55:6d:0a:4f:6e:06:30:f0:df:af:
73:23:a4:d9:67:fc:7e:ee:cf:24:d5:3d:2b:9a:22:26:d3:1f:
25:6a:87:13:71:85:10:c6:03:68:7e:92:93:e9:6d:9d:d4:29:
31:8d:dc:ab:1a:fd:3c:3a:c5:03:f5:36:2e:6f:69:15:2d:9b:
f0:4d:6a:33:0b:66:91:b8:ef:91:2f:e2:98:23:ce:22:47:d2:
f5:c7:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org