Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e20323135353737.roa
File: 326130353a646663313a383538663a3a2f34382d3438203d3e20323135353737.roa (raw, json)
Hash identifier: PRchFwA+yqEm+NlAwEwQFwFh3kJ3SAsHmyLQQBb+Ozg=
Subject key identifier: C8:65:49:6E:7C:85:4C:4B:CA:49:0D:6B:47:95:FC:D0:BC:AD:C6:67
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 3FEC247250FC0802FF53ECD61B0E6D842F851EBB
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e20323135353737.roa
Signing time: Fri 08 Mar 2024 20:46:29 +0000
ROA not before: Fri 08 Mar 2024 20:41:29 +0000
ROA not after: Fri 07 Mar 2025 20:46:29 +0000
asID: 215577
IP address blocks: 2a05:dfc1:858f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Mar 2024 01:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ec:24:72:50:fc:08:02:ff:53:ec:d6:1b:0e:6d:84:2f:85:1e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Mar 8 20:41:29 2024 GMT
Not After : Mar 7 20:46:29 2025 GMT
Subject: CN=C865496E7C854C4BCA490D6B4795FCD0BCADC667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:9c:f0:80:3f:ae:ee:2a:1e:9e:23:e9:75:
48:a2:02:cf:0d:62:ad:94:59:e5:30:2d:3c:43:73:
da:29:84:19:45:21:89:e9:6d:b2:7e:0d:f4:80:fc:
66:48:2a:a8:22:d6:ee:4a:3f:cb:bc:82:26:f9:33:
5e:b3:f2:b7:63:ad:fd:61:f2:f1:7f:b8:ab:36:8e:
e0:50:e4:52:5b:4b:e5:a1:cc:13:83:7d:7c:96:04:
0d:ae:77:77:0a:53:53:21:c5:e3:b7:8a:35:82:0c:
96:88:ec:7b:b6:95:ca:7a:91:47:dc:44:5f:7c:37:
a4:d7:9f:b6:b3:2b:e8:03:93:e3:b7:d0:68:d6:9a:
79:e2:4d:c3:20:a2:24:fe:c5:a2:66:51:da:f3:91:
79:cc:a8:04:13:a7:f5:6b:69:a6:d2:21:3c:70:b6:
ca:ed:13:69:bb:56:37:09:e5:b5:00:a9:4f:cb:c6:
ee:72:2e:57:00:dc:d6:4e:a0:e4:72:4a:d1:27:fd:
1a:e6:90:6c:19:40:e6:3a:e0:67:96:54:22:27:e8:
5d:2b:e3:95:1f:c5:c2:2e:ce:f1:ea:1a:ce:b9:27:
c2:ea:be:ce:7d:bb:11:e1:cb:93:39:e5:03:6c:ae:
89:63:b5:29:10:3d:bb:d5:b3:f6:f9:2c:d3:4d:17:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:49:6E:7C:85:4C:4B:CA:49:0D:6B:47:95:FC:D0:BC:AD:C6:67
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383538663a3a2f34382d3438203d3e20323135353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:858f::/48
Signature Algorithm: sha256WithRSAEncryption
15:59:ed:db:5b:41:dd:73:e0:48:4f:d7:e9:71:b2:9d:58:ed:
3a:3b:60:24:b8:69:c9:a3:6d:e1:da:c1:af:e3:2c:7e:ef:0c:
95:96:0d:08:b7:58:ad:32:c6:49:63:c8:aa:da:ec:d1:23:c1:
c5:39:8f:91:d8:67:4d:a1:13:a8:67:c5:85:28:e9:59:43:d8:
96:86:06:fa:d6:ed:1b:fa:5a:e9:16:b5:de:a8:0c:c2:8d:9e:
19:d5:06:49:5f:7b:02:26:16:3c:55:ee:40:d9:45:d8:ae:97:
60:7c:c6:21:73:da:14:9e:57:30:33:ff:32:3e:63:dd:e3:7c:
b5:f7:c2:de:18:da:e1:b1:88:91:68:8d:42:03:3f:1e:70:2b:
d5:77:7d:93:d2:8d:0c:5b:94:c0:ed:fe:83:6d:5c:61:a2:76:
ce:ed:2d:ac:04:a8:d4:fd:22:02:7c:46:ee:74:61:29:11:cd:
00:3a:bd:dc:fa:17:ff:5c:ad:bf:16:ee:c5:6c:db:70:d9:ef:
63:ea:d7:dd:f1:60:7c:03:c0:a6:76:e5:45:7b:a0:eb:02:84:
ad:d9:e9:ea:88:07:12:05:35:92:27:b0:05:66:98:30:08:1b:
3c:eb:7a:3c:b7:56:9a:67:d7:e2:69:72:17:ff:41:54:60:fe:
c6:a8:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org