Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: WJ7rcnXWKysAJ5nOY1gTYo8IL6y5JrUHFM7fxUDLt4s=
Subject key identifier: 17:B9:FB:38:69:98:83:04:B8:3D:D6:50:E5:2D:75:73:F9:06:45:CE
Certificate issuer: /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial: 71A2BAAD3B3C8BE46BDDF2219C4BC5E4206B14C2
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa
Signing time: Mon 05 Aug 2024 20:10:40 +0000
ROA not before: Mon 05 Aug 2024 20:05:40 +0000
ROA not after: Mon 04 Aug 2025 20:10:40 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac72::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 14:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a2:ba:ad:3b:3c:8b:e4:6b:dd:f2:21:9c:4b:c5:e4:20:6b:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Validity
Not Before: Aug 5 20:05:40 2024 GMT
Not After : Aug 4 20:10:40 2025 GMT
Subject: CN=17B9FB3869988304B83DD650E52D7573F90645CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:20:7b:13:d3:1d:5b:be:69:de:f5:df:3b:
eb:16:53:4a:5d:ae:b0:4d:2c:be:99:fb:33:fe:46:
a3:b1:9d:0e:fe:85:2d:e7:c7:02:f1:25:fa:09:ab:
70:8c:ac:c7:e6:c1:28:45:fb:25:a2:f8:b2:ba:ef:
f7:7b:4b:8f:8e:cb:21:27:cf:db:6d:f5:25:a4:4c:
97:dd:5e:e7:87:fc:a0:fb:c7:d7:fb:1e:ea:9c:99:
0a:20:cc:3c:af:2b:98:36:6f:6e:6f:1f:d5:40:5a:
df:4b:84:d7:f4:fb:59:50:1c:a5:36:c6:fc:cb:4a:
0e:b5:e2:87:e3:bf:95:a9:81:da:4d:28:1d:c6:9b:
93:dd:b7:d1:b7:6b:93:10:17:56:5e:6b:66:7e:8c:
98:70:ed:ed:2c:14:c9:25:ea:44:2d:e9:a7:60:d6:
37:db:5c:bd:38:67:0b:2d:56:50:18:65:1f:ae:d7:
ee:7c:1d:50:6b:e1:fd:b3:cc:26:b2:a1:9a:48:0a:
c8:56:dd:b4:f5:cb:07:73:f8:ea:b0:83:8c:ed:94:
4f:17:90:e1:a6:fc:b9:71:21:4e:0b:6a:2c:f2:fb:
b7:22:37:76:c0:30:a3:99:b4:59:ac:5f:0d:f7:1a:
8e:15:52:f6:63:9b:e1:83:e4:1c:c9:33:0a:c4:92:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:FB:38:69:98:83:04:B8:3D:D6:50:E5:2D:75:73:F9:06:45:CE
X509v3 Authority Key Identifier:
keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac72::/48
Signature Algorithm: sha256WithRSAEncryption
03:48:c5:19:1d:46:fe:c8:1b:65:e9:db:68:2a:11:6c:9f:ab:
63:8b:79:6f:66:87:70:db:11:2b:e6:91:84:be:87:a5:8a:a0:
cf:95:48:3e:b7:cf:ed:88:8f:d2:14:3f:45:16:66:36:17:10:
57:f4:d2:6b:d6:c5:f1:27:82:92:d7:13:4c:cb:87:78:24:5f:
e2:18:6b:20:29:07:c7:bd:2f:f0:47:df:cb:22:68:24:ab:d3:
ff:1c:36:55:9f:ac:ed:d2:25:70:82:13:2a:85:12:88:6b:16:
a6:ee:d2:0a:05:96:c4:b0:b6:6c:76:27:0b:59:59:48:fe:7d:
48:4d:34:b4:2a:40:07:81:a9:8b:17:86:58:5e:9d:e9:b9:07:
23:e8:3d:84:f7:42:6b:29:4a:40:5d:29:7c:ed:80:b9:03:5f:
4d:b3:71:49:09:12:41:47:ea:a3:ad:a8:ea:8e:6f:d8:9f:45:
4f:35:55:c0:4a:22:48:6f:86:9d:57:9e:a0:0e:64:26:ae:90:
63:26:ab:bb:80:93:92:c0:75:f8:67:98:a1:64:2b:9b:39:5d:
a2:00:92:40:a3:11:ce:fa:20:f3:60:4b:a3:71:9a:5e:bb:e9:
3b:f6:77:31:f5:27:71:c8:90:05:ba:96:4b:84:81:2e:6b:38:
6b:5c:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 17:28:47 2024 by rpki-client on console-fra.rpki-client.org