Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
File: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (raw, json)
Hash identifier: ouCBMkbD8ITxqzYwgBrEC9XM3+1C9HPi2SEpUrVd1ps=
Subject key identifier: 53:AC:57:DB:72:CB:AF:9B:F5:62:18:89:AF:22:5B:96:9A:54:7B:27
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 6B2D507914E0D7DA6C8B0A55D839DDB9C05DB23C
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
Signing time: Mon 08 Apr 2024 13:10:19 +0000
ROA not before: Mon 08 Apr 2024 13:05:19 +0000
ROA not after: Mon 07 Apr 2025 13:10:19 +0000
asID: 215147
IP address blocks: 2a06:1283:c110::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Apr 2024 20:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2d:50:79:14:e0:d7:da:6c:8b:0a:55:d8:39:dd:b9:c0:5d:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Apr 8 13:05:19 2024 GMT
Not After : Apr 7 13:10:19 2025 GMT
Subject: CN=53AC57DB72CBAF9BF5621889AF225B969A547B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:b1:2a:66:d1:1f:77:d0:a6:d2:2e:48:66:
ea:e4:73:14:5f:4c:5c:58:91:91:cf:0b:62:93:09:
4b:49:3e:f0:33:b9:09:9a:2c:a3:54:c7:b6:f3:af:
d7:be:6f:d2:07:10:96:0f:56:3c:d8:5f:ac:20:86:
53:52:c2:a1:de:ab:88:48:54:a8:34:91:cf:29:c7:
74:29:b2:db:74:d7:c8:c9:ca:f9:d5:b5:19:7b:54:
58:4b:16:df:3a:d6:0e:5b:6a:f5:f4:af:57:d9:ca:
70:8d:87:56:f9:01:2d:26:cb:24:b6:8e:3b:c5:83:
f2:ad:99:78:3d:5b:40:8a:40:62:5c:8a:dd:a2:d4:
98:6e:8a:0e:85:54:67:57:f6:b0:c2:5d:fb:38:b4:
bd:8b:38:3c:34:1e:fe:2f:8e:06:a5:5f:41:3b:f2:
6e:d9:a7:a5:30:3f:95:8d:61:62:c0:0a:c8:18:29:
82:a9:ce:77:24:90:5f:98:82:36:a1:d7:bd:96:20:
ef:23:bf:30:5f:db:2c:bf:64:8a:54:04:fd:57:e8:
83:ad:93:75:30:a2:d7:b8:69:81:9f:d9:9e:7e:0c:
59:9d:f6:06:9c:73:56:28:54:2c:ab:42:72:c9:df:
c7:4f:35:a7:69:06:0b:f2:b6:33:00:45:4f:76:d2:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:57:DB:72:CB:AF:9B:F5:62:18:89:AF:22:5B:96:9A:54:7B:27
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c110::/44
Signature Algorithm: sha256WithRSAEncryption
26:21:b8:a3:32:06:c1:66:5d:0d:f5:aa:c5:9d:34:19:4c:50:
58:7b:92:ec:e0:ee:84:99:94:19:b2:6e:9b:38:e2:a5:9b:36:
ee:f4:0f:d4:85:0b:67:5d:42:eb:3a:34:72:ca:ac:87:b5:85:
4e:b9:99:4d:a3:f1:6f:82:43:92:a4:14:8f:2f:b7:55:be:52:
92:ca:e0:e1:74:e6:cc:02:bb:c3:a0:28:7a:05:d7:4e:cc:b5:
d1:d1:e9:7f:53:36:a5:cb:9b:b5:6e:04:04:a6:8f:e3:43:01:
c9:41:50:4d:4b:1a:24:0b:b5:59:9b:2e:79:b0:2f:03:1a:fd:
22:d2:8c:8f:b2:f5:84:18:e7:71:cb:46:2b:47:fb:98:b4:d9:
e4:6a:6a:27:4f:1f:dd:d8:ca:38:c8:74:c7:f5:8b:13:70:b9:
4b:2a:4c:25:52:fd:4a:8d:f6:ee:d5:c3:ab:2a:a7:f2:51:77:
3c:fd:b2:b1:36:84:d7:fa:7a:5b:f1:38:12:ca:ad:bb:d3:d2:
ee:f3:1d:2f:dd:a5:c9:9c:29:01:71:ab:2e:3b:a7:dc:4e:07:
20:c2:b4:a9:b6:12:bc:e9:ce:75:f7:1b:fb:2d:d8:1f:96:38:
cf:7d:a4:4a:3f:07:6f:5a:1d:7d:ab:88:77:80:af:53:74:8f:
cd:36:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 21:21:26 2024 by rpki-client on console-fra.rpki-client.org