Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e2030.roa
File: 326130353a646663313a383538663a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: K3zjl8NUxE1opy2axlc1ThsMPPN7zEV6Wu9hFdo8o5Q=
Subject key identifier: E7:8B:69:98:33:D0:E9:BF:6F:A4:D3:56:63:46:FF:4E:C4:1B:B1:05
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 257A1F07CE10C2935B6ADA368B74CA4F86BEB618
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e2030.roa
Signing time: Fri 08 Mar 2024 18:53:30 +0000
ROA not before: Fri 08 Mar 2024 18:48:30 +0000
ROA not after: Fri 07 Mar 2025 18:53:30 +0000
asID: 0
IP address blocks: 2a05:dfc1:858f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Mar 2024 20:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7a:1f:07:ce:10:c2:93:5b:6a:da:36:8b:74:ca:4f:86:be:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Mar 8 18:48:30 2024 GMT
Not After : Mar 7 18:53:30 2025 GMT
Subject: CN=E78B699833D0E9BF6FA4D3566346FF4EC41BB105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:3b:d5:ad:c5:47:90:3b:bc:c4:c1:ca:5b:
41:4a:c1:8f:fc:11:52:6c:11:8f:13:46:71:89:fb:
56:05:5f:33:f6:af:8a:a7:83:26:07:2c:15:29:5f:
54:da:39:a6:9c:1e:1b:a8:f0:9c:c6:ed:58:04:b7:
bd:83:f2:f3:73:57:9f:22:45:1f:ea:b9:0b:84:49:
3a:ab:9f:ce:71:00:77:01:b6:89:18:37:3d:13:83:
79:86:6e:6d:a8:f8:50:c1:2a:ea:e0:7e:2e:2c:e3:
5c:c3:81:31:62:2f:2f:9f:ef:f6:b2:59:52:93:e3:
6f:bf:ed:55:dd:03:95:1b:30:8b:cd:b9:79:0e:79:
e2:13:c2:8a:26:1c:7f:21:49:a3:0a:51:72:32:ee:
3a:ec:d4:c9:6f:f1:58:0b:91:87:ae:f6:09:e3:5f:
f7:60:da:86:12:46:13:1d:9a:ae:21:11:cc:7f:ea:
ca:46:a0:32:1b:73:09:d5:26:aa:d5:28:b9:95:12:
99:a5:3b:6d:05:0c:63:c2:83:3d:99:4c:65:22:6f:
75:9e:7b:d5:a0:d4:f1:18:84:cd:2e:86:09:24:fa:
12:03:58:0b:66:c0:88:13:f2:3b:35:6d:a9:7d:be:
21:d2:31:c0:64:c9:84:fc:5a:1d:60:b8:5e:57:63:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:69:98:33:D0:E9:BF:6F:A4:D3:56:63:46:FF:4E:C4:1B:B1:05
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:858f::/48
Signature Algorithm: sha256WithRSAEncryption
72:54:49:12:4c:7a:de:fa:11:43:a7:83:1b:74:a1:28:aa:56:
ec:96:79:fe:a1:d3:81:f3:b9:c8:a1:37:d5:c5:91:c2:4f:04:
63:13:9c:00:36:ca:26:48:dd:d2:94:fe:c7:64:90:45:69:4e:
14:d0:fc:6f:fd:0a:a6:cf:39:3a:59:dd:7a:5d:0b:38:fe:3d:
8f:db:b6:2f:c8:03:0b:5e:8b:6e:d6:d0:27:c4:2b:98:02:1d:
72:cd:be:95:1e:d2:d1:db:8a:b7:7a:81:da:00:4a:57:f4:99:
65:06:45:70:40:f0:4c:1a:4e:f5:e4:7c:60:33:2d:aa:f0:e4:
f3:6a:37:71:b8:b9:ad:24:a9:f1:17:7e:b4:9d:9e:e4:41:08:
aa:2a:4a:4f:3b:f5:8b:de:d6:88:a1:60:73:6b:0e:b8:9b:af:
43:af:1a:69:36:57:26:a7:53:7d:fa:c4:14:12:af:e1:af:19:
79:14:ed:28:e4:89:26:47:21:69:60:3c:38:90:56:dd:f0:5c:
5c:26:4f:ab:82:b0:1d:cb:a1:df:9c:bb:42:1d:2d:c9:0b:dc:
66:ba:f5:a4:9e:c6:52:08:44:ea:f7:c9:64:14:42:7c:f2:e7:
fd:af:6f:0b:89:f9:bf:46:6a:00:03:3f:43:63:e1:d2:71:d2:
e0:9f:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org