Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: EwarMBabyjVBBMA+yfWhhx99NMEd5AwoRSXdP3PXogw=
Subject key identifier: 7F:DD:A7:BF:7A:0F:28:91:5C:CE:A5:9B:FE:75:C7:E7:24:1F:1C:21
Certificate issuer: /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial: 4AD385C899CD7FA050ED1F66E3613DD6B311C9CE
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
Signing time: Mon 05 Aug 2024 20:10:41 +0000
ROA not before: Mon 05 Aug 2024 20:05:41 +0000
ROA not after: Mon 04 Aug 2025 20:10:41 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac73::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 14:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d3:85:c8:99:cd:7f:a0:50:ed:1f:66:e3:61:3d:d6:b3:11:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Validity
Not Before: Aug 5 20:05:41 2024 GMT
Not After : Aug 4 20:10:41 2025 GMT
Subject: CN=7FDDA7BF7A0F28915CCEA59BFE75C7E7241F1C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:e8:7a:ab:03:ff:bd:ab:8d:0f:04:7f:ed:
01:2f:5f:43:fe:72:7f:10:f9:78:f2:8e:3d:ec:95:
30:75:ca:25:62:93:58:b5:09:9e:76:54:f5:e6:38:
cf:cb:6b:1b:61:f6:11:5e:28:7b:d3:d1:e1:3c:c3:
44:e0:7d:b2:74:73:af:bd:e1:63:dd:4d:86:f8:4a:
4c:87:62:ae:8a:de:bf:00:1f:ed:5e:e2:cb:4d:95:
88:45:51:0e:b9:78:86:e9:dc:89:3d:b2:27:9e:3c:
5f:28:10:24:70:05:82:4f:87:da:09:f1:92:f7:d4:
89:90:48:a5:a2:85:b0:f1:a8:f1:b8:23:d6:9e:19:
00:45:3e:07:ca:7f:2c:c4:1a:f6:49:b8:19:43:26:
5b:c6:60:cd:eb:44:a9:b9:34:21:07:61:19:bc:a0:
bd:47:a5:7d:33:6f:fe:cb:07:cf:98:c6:7d:8d:55:
76:3f:bb:ae:dd:3b:42:0a:2f:3b:14:80:40:2f:fd:
2e:0b:1b:06:e7:32:e0:f3:70:99:d0:c2:af:f7:ef:
34:8c:ca:a4:ee:96:93:aa:cc:0f:34:0f:a6:08:a8:
82:d6:dc:2f:e4:f8:57:f8:a8:d5:06:a0:90:66:f9:
f4:d7:9e:36:fd:52:4d:5a:c0:19:f3:47:a9:1f:ad:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:A7:BF:7A:0F:28:91:5C:CE:A5:9B:FE:75:C7:E7:24:1F:1C:21
X509v3 Authority Key Identifier:
keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac73::/48
Signature Algorithm: sha256WithRSAEncryption
59:c9:7a:2b:f9:f1:4d:a2:67:82:91:46:25:96:d1:9c:ed:5e:
24:1d:e7:b8:22:d3:ea:68:9a:03:5f:ff:04:1f:7f:2a:48:9d:
a7:40:00:83:1d:80:2e:f6:39:e4:a5:5a:24:36:36:55:6d:45:
09:44:6e:2d:94:46:59:2e:a0:1d:8e:d2:a8:c3:d0:83:37:53:
ec:c1:5f:d0:93:90:5b:84:0d:ee:41:e2:0b:9c:5c:33:f1:51:
c3:58:9f:32:93:a5:03:38:e3:be:c7:21:d4:96:06:ee:3e:1c:
dc:21:45:57:77:23:4f:ee:cd:1c:3d:dc:e2:ed:cb:6a:12:e8:
d8:17:ea:a8:1c:85:83:a2:8f:15:58:98:b1:19:fb:37:da:40:
92:b9:e9:ae:00:60:43:c5:36:18:0b:f9:b4:a2:89:59:dd:c8:
a1:90:3e:32:9b:79:d1:a0:ed:6e:07:cb:c7:36:a4:a5:3f:b6:
4f:8f:4c:b6:f3:47:85:ea:75:12:68:a4:76:7b:7d:5a:3b:c0:
8e:6f:2a:90:a1:85:74:45:97:44:a5:d6:87:39:e2:03:49:bf:
67:f1:3c:1b:86:48:15:c8:2c:d9:f6:87:a9:4a:79:1e:d1:cf:
17:f8:fe:e3:13:87:e3:5c:df:7f:1b:f6:c5:28:14:f8:dc:9b:
24:3d:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 17:43:33 2024 by rpki-client on console-ams.rpki-client.org