Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa
File: 326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier: oOreJKHYYnlNzIY4C12eSo6MOhxFuOvJJxCCXMEalBo=
Subject key identifier: B3:2C:31:5A:C8:5A:63:A4:D2:AB:EC:EB:6E:5C:17:1A:CB:87:5E:93
Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial: 1DF8C0D705F016BA276D24F0BD37198C7BF9399F
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa
Signing time: Sat 29 Jun 2024 11:29:41 +0000
ROA not before: Sat 29 Jun 2024 11:24:41 +0000
ROA not after: Sat 28 Jun 2025 11:29:41 +0000
asID: 199582
IP address blocks: 2a07:54c0:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jul 2024 15:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f8:c0:d7:05:f0:16:ba:27:6d:24:f0:bd:37:19:8c:7b:f9:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Validity
Not Before: Jun 29 11:24:41 2024 GMT
Not After : Jun 28 11:29:41 2025 GMT
Subject: CN=B32C315AC85A63A4D2ABECEB6E5C171ACB875E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:2d:0d:34:a7:9e:26:3e:5c:4f:89:e1:3c:
fc:fa:9f:5a:1c:85:29:bb:c9:c8:88:45:b8:d2:38:
68:a3:fa:51:d9:22:a5:6e:13:22:d6:26:78:c1:82:
8d:2b:66:5c:59:6e:b1:c5:e5:87:13:f0:b7:1c:fa:
4b:39:34:3b:af:d6:81:af:78:1e:68:a2:bb:ac:44:
10:b4:b3:7b:95:d2:b3:be:f4:d8:7d:40:16:84:5d:
ec:7e:9c:cb:03:b1:6e:d2:0f:43:c6:c4:a4:d2:99:
d3:38:84:8b:84:a2:f1:e8:b1:6e:20:93:5d:58:1d:
1c:02:43:5a:3a:dc:34:f3:78:bf:9e:ff:b7:67:f1:
65:42:bd:af:1c:78:d6:57:07:d2:94:af:19:91:3a:
b6:37:3f:86:fe:a6:41:67:97:55:a4:3e:f6:64:d5:
21:b6:54:9e:28:91:e0:3b:2d:7f:e9:f2:10:2a:5c:
f6:84:0e:80:81:82:b3:d0:d3:df:2d:d6:94:c8:a2:
ef:d7:a1:de:e4:43:cd:8f:bf:9b:8b:28:e5:55:6f:
00:a3:c9:ce:b3:b7:03:85:49:49:8e:33:73:13:69:
5f:94:88:30:55:7b:8d:60:a2:eb:74:74:bc:b6:db:
ac:a1:ce:8e:b5:b9:15:a4:d1:35:fa:47:84:c0:d2:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:31:5A:C8:5A:63:A4:D2:AB:EC:EB:6E:5C:17:1A:CB:87:5E:93
X509v3 Authority Key Identifier:
keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313939353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
27:70:17:c8:09:03:70:5c:df:78:d8:24:a0:8a:e1:0b:70:8f:
cb:80:f1:18:a8:53:5d:d6:ef:07:93:8b:20:8a:45:71:09:a8:
f9:8d:9b:32:25:0d:8f:ba:9c:d3:ac:1b:e1:ea:29:1d:66:29:
9e:04:5c:05:8a:97:d5:4b:ec:d3:05:cc:a1:5e:42:7d:56:9c:
d3:32:3f:b9:56:01:78:61:d3:02:22:3f:4b:7f:03:cb:ea:f2:
c6:dd:6c:37:4a:8a:81:30:e5:f6:8f:3a:09:c7:33:a5:38:bd:
7a:f9:3f:1a:0e:cc:c1:18:a4:c6:49:71:43:c6:3d:fd:27:2f:
5f:2e:b5:71:f9:f2:92:7c:20:41:38:e6:70:4f:8e:64:85:a7:
50:16:41:36:50:e2:55:e7:02:15:4b:f5:21:c5:26:62:26:d9:
8f:14:1d:e1:f2:e4:00:02:2d:18:58:88:16:30:c4:a4:4b:7f:
db:66:c1:b0:aa:36:e0:8f:7d:5f:30:8b:f2:f9:7b:53:1b:33:
e6:2a:33:14:f4:fa:1f:cb:f4:66:bc:a6:64:0e:0f:b9:22:f4:
a8:cc:9e:5c:19:d8:55:c0:f5:4f:64:88:b1:d8:7e:05:d4:8c:
86:68:5a:fb:8c:ae:21:09:02:23:a9:6a:c0:7a:81:aa:2d:47:
12:39:6d:3b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUHfjA1wXwFronbSTwvTcZjHv5OZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1
N0VGOTFBNDAeFw0yNDA2MjkxMTI0NDFaFw0yNTA2MjgxMTI5NDFaMDMxMTAvBgNV
BAMTKEIzMkMzMTVBQzg1QTYzQTREMkFCRUNFQjZFNUMxNzFBQ0I4NzVFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqi0NNKeeJj5cT4nhPPz6n1oc
hSm7yciIRbjSOGij+lHZIqVuEyLWJnjBgo0rZlxZbrHF5YcT8Lcc+ks5NDuv1oGv
eB5oorusRBC0s3uV0rO+9Nh9QBaEXex+nMsDsW7SD0PGxKTSmdM4hIuEovHosW4g
k11YHRwCQ1o63DTzeL+e/7dn8WVCva8ceNZXB9KUrxmROrY3P4b+pkFnl1WkPvZk
1SG2VJ4okeA7LX/p8hAqXPaEDoCBgrPQ098t1pTIou/Xod7kQ82Pv5uLKOVVbwCj
yc6ztwOFSUmOM3MTaV+UiDBVe41gout0dLy226yhzo61uRWk0TX6R4TA0uOZAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUsywxWshaY6TSq+zrblwXGsuHXpMwHwYDVR0j
BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0
NDUxMkY5QTU3RUY5MUE0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvMi8zMjYxMzAz
NzNhMzUzNDYzMzAzYTYyMzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
OTM5MzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwLALMA0GCSqGSIb3DQEBCwUAA4IBAQAn
cBfICQNwXN942CSgiuELcI/LgPEYqFNd1u8Hk4sgikVxCaj5jZsyJQ2PupzTrBvh
6ikdZimeBFwFipfVS+zTBcyhXkJ9VpzTMj+5VgF4YdMCIj9LfwPL6vLG3Ww3SoqB
MOX2jzoJxzOlOL16+T8aDszBGKTGSXFDxj39Jy9fLrVx+fKSfCBBOOZwT45khadQ
FkE2UOJV5wIVS/UhxSZiJtmPFB3h8uQAAi0YWIgWMMSkS3/bZsGwqjbgj31fMIvy
+XtTGzPmKjMU9Pofy/RmvKZkDg+5IvSozJ5cGdhVwPVPZIix2H4F1IyGaFr7jK4h
CQIjqWrAeoGqLUcSOW07
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:15 2025 by rpki-client