Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/323030313a3637383a6331383a3a2f34382d3438203d3e20323037343837.roa
File: 323030313a3637383a6331383a3a2f34382d3438203d3e20323037343837.roa (raw, json)
Hash identifier: 8alOJfWG9PoA/jZmmmvM4HneLb1kv03dG0FSnCS3hlQ=
Subject key identifier: 21:F6:1D:98:4D:33:D1:FF:66:E9:1E:7E:43:5B:BE:88:99:C0:95:A6
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 468EEFD680A9293D9CEC657CE70B0F0CE1F1423E
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/323030313a3637383a6331383a3a2f34382d3438203d3e20323037343837.roa
Signing time: Mon 20 May 2024 05:38:14 +0000
ROA not before: Mon 20 May 2024 05:33:14 +0000
ROA not after: Mon 19 May 2025 05:38:14 +0000
asID: 207487
IP address blocks: 2001:678:c18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Oct 2024 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8e:ef:d6:80:a9:29:3d:9c:ec:65:7c:e7:0b:0f:0c:e1:f1:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: May 20 05:33:14 2024 GMT
Not After : May 19 05:38:14 2025 GMT
Subject: CN=21F61D984D33D1FF66E91E7E435BBE8899C095A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:4b:b9:0f:63:05:f4:1e:a9:3c:b9:61:7f:
71:62:7e:fc:21:0d:50:39:2a:e4:85:29:d8:ee:29:
c6:4d:9c:54:61:d0:3d:ae:a4:27:80:16:22:ac:ad:
7f:64:e7:ef:4a:bf:46:51:e4:24:59:a9:48:0c:80:
c1:ef:5e:5d:a9:65:74:2f:19:37:fc:1a:73:56:d7:
2b:13:bd:96:27:97:95:ca:ea:b0:6b:8f:d6:8b:ab:
d7:6b:76:44:89:73:f5:43:6e:f2:8e:1a:0d:86:13:
f0:8d:43:7d:e4:79:3f:2e:a2:2d:67:ad:68:c1:88:
c8:fb:3a:e9:e8:90:c9:fd:fc:c3:fb:0e:4a:b8:e8:
75:8f:b6:f7:4f:cb:b6:26:75:82:a9:66:c2:4a:e1:
57:c4:6a:1c:08:5f:8a:92:42:63:00:53:1b:cd:b0:
a8:63:16:5d:71:d1:c7:15:c6:0f:b4:f4:5b:88:08:
74:37:2c:d9:57:c4:39:9e:33:ce:54:5a:7f:53:84:
3d:82:ef:92:ae:03:f1:81:ca:01:0a:b9:7d:ed:f2:
d8:15:57:c6:3c:42:1b:42:9d:df:2c:e1:61:8e:15:
34:28:5c:31:58:58:60:3d:9a:56:93:b5:e6:f3:d0:
f8:93:b2:d4:30:94:fa:f5:41:7a:7e:8e:3c:8f:d4:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:1D:98:4D:33:D1:FF:66:E9:1E:7E:43:5B:BE:88:99:C0:95:A6
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/323030313a3637383a6331383a3a2f34382d3438203d3e20323037343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c18::/48
Signature Algorithm: sha256WithRSAEncryption
05:f9:4c:7a:26:c2:72:f5:42:09:c3:de:2a:77:1c:2e:58:5d:
32:b0:90:2d:de:7b:7c:1a:bf:a3:53:de:d6:46:d4:d3:c9:08:
9d:ed:20:ea:16:21:3e:e2:c1:bb:62:c8:59:cb:30:af:88:51:
dc:02:ed:ad:6e:f9:da:e8:fc:d5:2e:85:63:6c:91:ce:e4:f6:
f5:3f:e9:48:3d:eb:5b:21:13:a8:f1:32:aa:1d:cf:98:24:04:
bb:f2:37:bb:6f:95:aa:90:34:bf:c8:65:1e:bb:be:53:50:6c:
6d:71:58:29:6d:ea:12:2d:27:f5:aa:d8:86:3a:6e:31:ee:86:
c8:23:bd:9a:42:95:24:6a:93:3b:22:2b:ae:93:6a:b6:b8:18:
a8:a2:e8:55:88:84:12:ff:9c:b3:0c:4d:e2:a5:f4:51:bc:cc:
f5:2e:89:94:a3:95:b5:59:2e:7a:97:2a:d1:6a:c2:67:3b:87:
41:af:20:97:d9:f0:ca:fb:a0:f5:94:db:1c:b6:e2:25:cd:96:
57:79:f7:ca:df:10:83:58:86:fb:c5:d6:86:c2:69:ee:45:de:
94:39:fd:17:79:40:35:1f:51:37:e9:6a:85:30:39:1c:59:86:
94:0c:e9:7e:c1:37:4b:2a:56:a4:02:d7:0a:b1:df:11:19:b3:
3b:29:d0:25
-----BEGIN CERTIFICATE-----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 at Wed Oct 30 10:37:44 2024 by rpki-client on console-ams.rpki-client.org