Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: vprcL+txspp67ZcYV/d/nM+gTPlFuTOd3074AQmYUg8=
Subject key identifier: 04:57:7B:B5:ED:F7:65:EE:3F:36:03:B8:0C:B0:B1:7C:D3:CB:92:E6
Certificate issuer: /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial: 419D6B9C5A1518461C1DFA26F7239CC39A72B1B8
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
Signing time: Mon 05 Aug 2024 20:10:39 +0000
ROA not before: Mon 05 Aug 2024 20:05:39 +0000
ROA not after: Mon 04 Aug 2025 20:10:39 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 12:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9d:6b:9c:5a:15:18:46:1c:1d:fa:26:f7:23:9c:c3:9a:72:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Validity
Not Before: Aug 5 20:05:39 2024 GMT
Not After : Aug 4 20:10:39 2025 GMT
Subject: CN=04577BB5EDF765EE3F3603B80CB0B17CD3CB92E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:07:e0:d1:ec:2c:1a:44:ef:eb:5e:4c:57:
2b:28:3d:c5:7e:ea:e1:97:7e:a0:c1:2e:7b:32:bb:
72:9b:41:11:c4:79:15:9c:b6:76:5d:84:02:d3:8b:
50:3b:f9:95:6a:12:9f:fb:b6:8c:28:00:4f:ea:83:
af:ef:46:6f:a8:5e:50:8c:3d:55:8a:4d:b4:dc:b8:
eb:e9:db:6b:c2:2b:eb:fb:8f:d2:d2:77:21:5e:aa:
a4:45:59:e6:24:dc:14:fd:b6:47:6f:80:9f:f7:e8:
52:98:12:1a:5d:a9:b0:0f:0b:33:18:c6:0d:0f:44:
9e:e2:10:a0:f0:29:79:4c:98:db:64:88:59:ba:48:
6b:2c:33:12:e0:30:27:fa:fd:77:7c:7e:cc:a5:d2:
97:88:ce:59:f7:4f:06:83:1c:cc:15:55:95:e5:f5:
aa:00:79:2e:9b:1e:3d:15:64:00:be:0a:c3:7e:bd:
9f:a8:6f:fe:6a:c1:9a:91:27:c4:95:01:56:54:4c:
6b:a2:e2:61:69:0a:71:04:d1:a3:09:f9:7e:79:60:
c4:90:77:dd:18:b6:61:a9:be:8d:14:79:fa:b6:c2:
0a:1f:2d:37:54:54:e0:27:9e:71:3b:1a:05:88:93:
d7:d4:45:25:a4:2e:d0:cd:53:bb:aa:7d:56:df:e7:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:7B:B5:ED:F7:65:EE:3F:36:03:B8:0C:B0:B1:7C:D3:CB:92:E6
X509v3 Authority Key Identifier:
keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac71::/48
Signature Algorithm: sha256WithRSAEncryption
7d:15:48:87:6f:f6:7d:55:8c:7e:8d:f6:58:c3:b6:95:e5:91:
b8:19:2a:28:ca:a9:7e:8b:bc:63:2b:49:dd:7c:83:6f:b2:f6:
0b:49:a4:c8:27:bc:d7:ef:89:cc:9a:1d:02:4d:39:e7:16:c6:
8a:71:13:33:0a:b0:65:75:64:6a:43:3f:22:23:f2:7f:6b:8c:
89:ad:0a:5a:48:f1:24:ea:9d:b8:ff:b9:dd:a4:29:1d:6c:d3:
8d:49:69:fe:5b:9a:71:b7:2b:64:7a:f9:6f:f0:1e:43:db:07:
82:17:6f:ab:e3:0d:e0:44:f7:2b:01:2c:6f:4e:71:b0:f4:b8:
9e:b4:0d:f8:df:80:ff:2c:ef:9f:f7:18:44:00:7e:0b:fc:33:
ce:cd:c9:2c:11:14:e6:ae:7f:23:bd:59:d1:26:c8:da:76:72:
47:ed:c5:0e:27:f8:17:ff:39:23:b7:8a:84:19:40:c4:fc:f0:
a4:68:e5:ac:77:ea:ff:98:f5:df:fc:36:48:e6:43:42:9d:8c:
40:25:1a:e3:9b:f4:c4:fa:07:b7:32:a7:e5:5f:93:fe:be:ea:
f5:1b:5e:ea:6d:78:b8:e9:27:c2:34:0d:cb:c4:c8:f7:60:39:
87:9d:9d:c2:63:ae:72:14:2d:26:b4:8b:eb:67:78:53:f5:7a:
77:61:fd:7b
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 30 15:01:27 2024 by rpki-client on console-ams.rpki-client.org