Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383430303a3a2f34302d3438203d3e20323135363035.roa
File: 326130613a363034343a383430303a3a2f34302d3438203d3e20323135363035.roa (raw, json)
Hash identifier: ctIYbNv82RMOz/dCg2AxVz+wPfy/p9zJBMuYU7Cj32Q=
Subject key identifier: B7:FD:80:34:07:93:D8:1E:C7:BA:1B:A8:EC:FA:CE:DB:C4:0B:FD:A3
Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial: 1762D4B7EF16DCFCCF576A9CD0F5AA157A7B9CC2
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383430303a3a2f34302d3438203d3e20323135363035.roa
Signing time: Tue 06 Aug 2024 19:01:11 +0000
ROA not before: Tue 06 Aug 2024 18:56:11 +0000
ROA not after: Tue 05 Aug 2025 19:01:11 +0000
asID: 215605
IP address blocks: 2a0a:6044:8400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Aug 2024 10:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:62:d4:b7:ef:16:dc:fc:cf:57:6a:9c:d0:f5:aa:15:7a:7b:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Validity
Not Before: Aug 6 18:56:11 2024 GMT
Not After : Aug 5 19:01:11 2025 GMT
Subject: CN=B7FD80340793D81EC7BA1BA8ECFACEDBC40BFDA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:3d:58:7f:54:86:7b:0a:b8:d2:d1:27:7a:
c5:f5:00:72:e4:4a:c4:19:56:b5:ef:88:23:d8:20:
c1:ac:37:c7:11:39:76:d9:bf:ba:57:bd:15:45:16:
d1:83:c6:83:4c:76:fc:30:44:30:ed:dc:a2:a9:40:
3b:48:99:71:f0:22:2c:3d:19:7e:93:b5:3d:8e:a2:
5e:f7:86:a3:6f:e9:69:85:c9:66:b0:88:1f:73:8c:
a5:33:38:78:3b:c0:cf:a0:e3:10:a5:ce:f1:b8:dd:
d0:2e:0f:23:71:c4:25:ea:42:d2:52:35:20:0a:7d:
96:ee:9f:ab:c5:ba:61:9f:21:48:30:dd:a6:7a:38:
02:4d:f7:ce:91:05:12:c4:d7:fa:5e:4e:bc:93:da:
f1:6d:34:9a:e3:4a:23:35:f3:23:6e:86:fb:b1:00:
31:79:a5:4b:cb:bb:22:c3:af:61:c5:ea:95:ec:be:
30:4d:17:c4:30:c1:5f:d4:0d:59:26:af:5d:88:a2:
35:f1:af:d4:16:ba:d8:ae:f8:07:16:01:d6:51:75:
01:50:72:30:e2:f7:3f:95:8d:73:8b:6f:2c:eb:04:
61:07:81:60:87:f8:05:b7:69:35:d4:cc:1a:7d:5f:
34:27:9e:78:f7:27:72:2c:e3:a1:74:78:55:05:a2:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:80:34:07:93:D8:1E:C7:BA:1B:A8:EC:FA:CE:DB:C4:0B:FD:A3
X509v3 Authority Key Identifier:
keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383430303a3a2f34302d3438203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8400::/40
Signature Algorithm: sha256WithRSAEncryption
7f:f5:ce:1a:ee:68:8e:88:7a:71:aa:63:f3:17:e4:a6:a8:a6:
28:a8:c9:46:61:02:85:8c:0b:26:f5:1d:36:00:aa:b3:4a:f2:
59:93:b8:48:4c:db:06:41:04:2a:9a:87:f9:67:06:4a:12:f4:
5c:d2:6a:78:3e:52:2a:88:8f:56:2c:a0:e8:6f:a4:11:aa:78:
8b:74:94:8f:51:c9:4e:22:01:05:d6:44:38:61:35:73:78:c5:
75:4f:c6:0c:ff:a8:39:c3:32:4b:54:1d:9f:a8:6b:16:8d:89:
8b:87:b6:f4:cd:0c:7e:81:60:67:98:6a:03:0b:6b:58:18:d8:
29:cf:e9:ec:c1:8d:2a:19:04:2e:24:32:77:9d:6c:20:01:1c:
b7:73:fd:0f:03:3e:01:0f:2b:93:57:58:b3:6b:f3:42:87:06:
25:48:52:d2:5f:9e:92:54:2d:a3:62:40:b0:b8:ae:e2:92:8a:
f7:10:2a:32:4a:da:0f:75:2c:06:e2:61:bb:3f:34:02:d3:be:
5f:ae:1d:9e:e6:07:73:04:1e:73:90:fa:34:9e:00:a3:be:f0:
b5:44:f0:35:ab:68:03:00:72:31:29:46:35:a7:f5:4c:2f:e9:
1d:69:fc:6c:ff:10:cd:e5:79:98:bb:9a:24:6a:d2:55:73:0b:
34:17:54:f1
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUF2LUt+8W3PzPV2qc0PWqFXp7nMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNDA4MDYxODU2MTFaFw0yNTA4MDUxOTAxMTFaMDMxMTAvBgNV
BAMTKEI3RkQ4MDM0MDc5M0Q4MUVDN0JBMUJBOEVDRkFDRURCQzQwQkZEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcj1Yf1SGewq40tEnesX1AHLk
SsQZVrXviCPYIMGsN8cROXbZv7pXvRVFFtGDxoNMdvwwRDDt3KKpQDtImXHwIiw9
GX6TtT2Ool73hqNv6WmFyWawiB9zjKUzOHg7wM+g4xClzvG43dAuDyNxxCXqQtJS
NSAKfZbun6vFumGfIUgw3aZ6OAJN986RBRLE1/peTryT2vFtNJrjSiM18yNuhvux
ADF5pUvLuyLDr2HF6pXsvjBNF8QwwV/UDVkmr12IojXxr9QWutiu+AcWAdZRdQFQ
cjDi9z+VjXOLbyzrBGEHgWCH+AW3aTXUzBp9XzQnnnj3J3Is46F0eFUFortBAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUt/2ANAeT2B7Huhuo7PrO28QL/aMwHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4MzQzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRIQwDQYJKoZIhvcNAQELBQADggEBAH/1
zhruaI6IenGqY/MX5KaopiioyUZhAoWMCyb1HTYAqrNK8lmTuEhM2wZBBCqah/ln
BkoS9FzSang+UiqIj1YsoOhvpBGqeIt0lI9RyU4iAQXWRDhhNXN4xXVPxgz/qDnD
MktUHZ+oaxaNiYuHtvTNDH6BYGeYagMLa1gY2CnP6ezBjSoZBC4kMnedbCABHLdz
/Q8DPgEPK5NXWLNr80KHBiVIUtJfnpJULaNiQLC4ruKSivcQKjJK2g91LAbiYbs/
NALTvl+uHZ7mB3MEHnOQ+jSeAKO+8LVE8DWraAMAcjEpRjWn9Uwv6R1p/Gz/EM3l
eZi7miRq0lVzCzQXVPE=
-----END CERTIFICATE-----
Generated at Wed Aug 7 13:00:29 2024 by rpki-client on console-ams.rpki-client.org