Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643034303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643034303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: qb1Sy8R932B/ienopa/KYEEwHbbbQPr2lKeJhd3yBAE=
Subject key identifier: C1:C3:F5:D3:DF:62:E9:EA:BF:DD:04:70:56:2B:34:3F:52:EF:06:34
Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial: 52206FE11D82BD6B1D7FC09F9EEDB152E5731FF0
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643034303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Tue 08 Oct 2024 13:29:40 +0000
ROA not before: Tue 08 Oct 2024 13:24:40 +0000
ROA not after: Tue 07 Oct 2025 13:29:40 +0000
asID: 214757
IP address blocks: 2a09:54c6:d040::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 14 Nov 2024 18:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:6f:e1:1d:82:bd:6b:1d:7f:c0:9f:9e:ed:b1:52:e5:73:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Validity
Not Before: Oct 8 13:24:40 2024 GMT
Not After : Oct 7 13:29:40 2025 GMT
Subject: CN=C1C3F5D3DF62E9EABFDD0470562B343F52EF0634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:9b:1a:0f:28:2c:41:66:60:cf:f5:90:52:
5e:11:cd:92:e2:59:c1:03:a6:11:e0:29:c4:a4:3d:
0a:56:64:80:d2:9b:7d:07:73:c1:a0:0e:83:fe:68:
14:a4:3b:a6:c4:c7:33:3d:24:75:de:f9:98:ba:70:
64:52:ce:05:8d:86:2c:20:ab:a0:e2:98:95:7e:95:
cf:58:69:07:6f:1b:21:d5:5f:a1:a1:3c:a2:36:10:
63:7d:43:04:8d:4e:82:74:4b:98:56:a7:46:cc:27:
18:58:71:e7:81:ab:66:f0:d0:0d:d2:a2:79:2a:38:
e7:34:93:5b:c3:87:d8:5d:f6:7a:c1:27:99:5e:a0:
83:04:d6:7a:fe:f6:53:b2:e0:70:71:d6:ae:78:af:
11:e8:49:5c:dd:ba:a7:4e:2e:b2:66:cf:fc:a5:a0:
7e:51:af:ac:2f:75:c7:53:86:cb:08:2c:74:e7:0e:
d6:c9:20:36:b6:16:5a:34:04:7b:5f:ee:a1:2f:5c:
3e:0d:e0:11:c1:02:8c:82:58:78:3e:19:ba:ad:c5:
6d:bd:eb:6e:0c:14:bc:f6:09:9b:1c:7e:f5:76:a7:
bf:5d:f6:ac:3d:58:63:64:d3:42:b6:c4:c1:c1:db:
7b:ac:35:c3:03:37:6c:24:dc:21:12:9c:94:fe:cb:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:F5:D3:DF:62:E9:EA:BF:DD:04:70:56:2B:34:3F:52:EF:06:34
X509v3 Authority Key Identifier:
keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643034303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d040::/44
Signature Algorithm: sha256WithRSAEncryption
30:3c:6e:bc:ea:c1:d1:1d:b6:1c:4b:be:89:c2:f8:0a:b0:36:
29:ef:8c:f5:65:3f:c2:7f:60:ef:76:b2:87:a0:8d:73:a4:73:
f8:d8:60:a2:fb:26:ab:c5:cf:66:37:3e:f0:87:10:4c:b1:05:
5b:88:20:4d:9a:33:29:57:41:36:a0:5c:4e:5d:a1:19:e3:c8:
27:2d:c9:38:d2:a0:1c:20:94:76:b1:2f:45:65:4e:11:ad:71:
63:d4:04:94:39:db:a8:db:df:45:38:20:40:8a:cd:d7:e6:23:
e3:40:0b:80:8a:11:65:ad:c8:fd:07:30:24:e4:ef:ad:27:f9:
43:40:b0:ee:b5:1a:18:31:3c:72:7d:7e:e4:cc:2e:64:7c:60:
b9:52:db:f1:dc:9f:a5:61:bc:23:bd:8f:c3:03:fb:34:21:3c:
c9:28:8a:b9:df:2c:31:d7:99:dd:2b:af:cc:45:f0:fc:7c:9f:
e9:7e:d2:31:5f:8e:2a:50:a4:a7:35:23:b4:0e:37:4e:36:cf:
96:47:1b:27:e3:d7:91:5d:de:36:03:c4:60:87:32:d0:51:93:
32:4c:fd:e5:cb:9a:9f:51:24:5d:42:52:d2:24:61:2a:1f:41:
7a:2f:98:90:59:b0:7f:82:3a:f8:79:9b:25:0d:d2:80:85:44:
24:19:08:00
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUUiBv4R2CvWsdf8Cfnu2xUuVzH/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5
REJCRTczMDAeFw0yNDEwMDgxMzI0NDBaFw0yNTEwMDcxMzI5NDBaMDMxMTAvBgNV
BAMTKEMxQzNGNUQzREY2MkU5RUFCRkREMDQ3MDU2MkIzNDNGNTJFRjA2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV5saDygsQWZgz/WQUl4RzZLi
WcEDphHgKcSkPQpWZIDSm30Hc8GgDoP+aBSkO6bExzM9JHXe+Zi6cGRSzgWNhiwg
q6DimJV+lc9YaQdvGyHVX6GhPKI2EGN9QwSNToJ0S5hWp0bMJxhYceeBq2bw0A3S
onkqOOc0k1vDh9hd9nrBJ5leoIME1nr+9lOy4HBx1q54rxHoSVzduqdOLrJmz/yl
oH5Rr6wvdcdThssILHTnDtbJIDa2Flo0BHtf7qEvXD4N4BHBAoyCWHg+GbqtxW29
624MFLz2CZscfvV2p79d9qw9WGNk00K2xMHB23usNcMDN2wk3CESnJT+y9FrAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUwcP1099i6eq/3QRwVis0P1LvBjQwHwYDVR0j
BBgwFoAU8WPh7nQ4RDD3p150SKN22J275zAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj
ZjE0LzEvRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5REJCRTczMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0
OEEzNzZEODlEQkJFNzMwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3OTkzY2NmMTQvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY0MzAzNDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKglUxtBAMA0GCSqGSIb3DQEBCwUAA4IBAQAw
PG686sHRHbYcS76JwvgKsDYp74z1ZT/Cf2DvdrKHoI1zpHP42GCi+yarxc9mNz7w
hxBMsQVbiCBNmjMpV0E2oFxOXaEZ48gnLck40qAcIJR2sS9FZU4RrXFj1ASUOduo
299FOCBAis3X5iPjQAuAihFlrcj9BzAk5O+tJ/lDQLDutRoYMTxyfX7kzC5kfGC5
Utvx3J+lYbwjvY/DA/s0ITzJKIq53ywx15ndK6/MRfD8fJ/pftIxX44qUKSnNSO0
DjdONs+WRxsn49eRXd42A8RghzLQUZMyTP3ly5qfUSRdQlLSJGEqH0F6L5iQWbB/
gjr4eZslDdKAhUQkGQgA
-----END CERTIFICATE-----
Generated at Thu Nov 14 20:09:25 2024 by rpki-client on console-fra.rpki-client.org