Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: jmOHi0Uap4+ofjzWe62d1bnDjiPP/LUzn5y93nantcQ=
Subject key identifier: C3:7D:D7:D8:23:29:62:81:98:6A:A9:DD:E5:E4:09:AC:86:C9:4F:71
Certificate issuer: /CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Certificate serial: 74E195B3064CF7A6CC0525B73D67B0D1081A22D4
Authority key identifier: E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
Signing time: Tue 06 Aug 2024 11:08:19 +0000
ROA not before: Tue 06 Aug 2024 11:03:19 +0000
ROA not after: Tue 05 Aug 2025 11:08:19 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac74::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 Aug 2024 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e1:95:b3:06:4c:f7:a6:cc:05:25:b7:3d:67:b0:d1:08:1a:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E78C2AFCF0927B952709E9D02232AAF22369820A
Validity
Not Before: Aug 6 11:03:19 2024 GMT
Not After : Aug 5 11:08:19 2025 GMT
Subject: CN=C37DD7D823296281986AA9DDE5E409AC86C94F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:9a:41:08:af:86:af:2f:cd:f1:1f:90:52:
fe:1a:a2:41:38:3e:ba:59:d5:fb:37:34:55:5b:bd:
3e:06:71:fd:16:a0:f7:06:ec:53:76:bd:2e:1a:14:
4d:e1:60:82:fd:2f:57:4d:78:91:08:73:be:74:62:
19:ea:79:41:75:0c:cb:5f:f9:10:64:03:9f:c8:d1:
14:c5:5f:84:c9:0e:25:4f:15:f1:1e:e4:5f:0c:c4:
42:eb:b4:66:09:13:93:4d:bf:d3:ce:22:28:0f:e7:
2b:8d:e8:4f:9a:4a:04:b6:b3:5e:e9:3d:0e:1f:dc:
5d:4e:db:4b:58:3d:5e:e3:24:6c:f7:e2:16:2f:37:
64:e9:a3:15:18:30:1a:3d:a2:c1:1b:b9:ac:dc:5b:
48:e5:1c:c1:57:ac:3e:bc:6a:4d:a0:c7:bf:79:57:
2d:2c:45:63:a5:1d:e6:ae:01:68:54:da:5c:4c:23:
5b:6f:79:dc:93:73:ff:33:d6:07:ee:f4:d7:cf:bd:
80:ea:64:7f:64:e2:65:98:40:ec:1b:d1:46:45:25:
a6:84:e0:b3:e2:69:20:97:74:be:8e:70:fa:ab:57:
1b:5e:87:fc:62:a0:9b:37:86:b7:ff:29:82:e0:48:
ee:6d:1e:5a:ea:4d:46:66:77:42:32:b8:6d:64:a6:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:D7:D8:23:29:62:81:98:6A:A9:DD:E5:E4:09:AC:86:C9:4F:71
X509v3 Authority Key Identifier:
keyid:E7:8C:2A:FC:F0:92:7B:95:27:09:E9:D0:22:32:AA:F2:23:69:82:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/E78C2AFCF0927B952709E9D02232AAF22369820A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E78C2AFCF0927B952709E9D02232AAF22369820A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac74::/48
Signature Algorithm: sha256WithRSAEncryption
4b:8b:cf:c0:be:77:6d:0f:ee:bb:8c:69:86:29:2b:41:a1:88:
2b:b2:72:aa:8d:d8:cc:87:f4:f4:b0:d6:de:72:d9:a3:20:b5:
2d:52:8e:e1:cb:d8:7f:62:18:5a:21:c8:7e:1d:9a:99:4d:a6:
3d:15:a4:01:7a:cf:56:e1:b2:ba:c2:ed:66:a0:c6:61:2f:75:
67:ae:3c:e7:c4:36:06:dd:92:da:d6:86:44:08:10:0b:4d:04:
1b:56:92:c7:9a:ff:f6:38:de:1e:52:2e:c4:e3:81:72:5d:c2:
15:07:eb:95:f2:79:4b:29:af:69:c0:0f:14:07:26:fd:f1:06:
8d:19:66:6e:e7:3c:84:d1:d6:cf:d0:62:3c:21:6f:b6:d5:b3:
ae:c6:31:9a:95:94:da:95:e2:f0:7a:16:44:85:af:d5:31:0e:
26:6f:c6:9a:83:20:ae:67:f1:f7:65:99:3d:60:4e:02:92:0f:
73:c5:1a:1e:66:9b:4b:41:cd:32:4d:7b:7a:97:88:f3:fa:ed:
43:5b:ec:ba:db:17:fc:19:7a:b2:2f:b0:62:d5:c2:17:ea:68:
64:95:86:6c:e4:28:05:96:76:1d:c0:56:df:49:e0:d1:8b:2e:
a9:f6:6d:8e:aa:d6:52:9b:7b:cd:bc:8d:b8:1c:10:36:45:d0:
6c:7e:a4:64
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUdOGVswZM96bMBSW3PWew0QgaItQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIy
MzY5ODIwQTAeFw0yNDA4MDYxMTAzMTlaFw0yNTA4MDUxMTA4MTlaMDMxMTAvBgNV
BAMTKEMzN0REN0Q4MjMyOTYyODE5ODZBQTlEREU1RTQwOUFDODZDOTRGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXJpBCK+Gry/N8R+QUv4aokE4
PrpZ1fs3NFVbvT4Gcf0WoPcG7FN2vS4aFE3hYIL9L1dNeJEIc750YhnqeUF1DMtf
+RBkA5/I0RTFX4TJDiVPFfEe5F8MxELrtGYJE5NNv9POIigP5yuN6E+aSgS2s17p
PQ4f3F1O20tYPV7jJGz34hYvN2TpoxUYMBo9osEbuazcW0jlHMFXrD68ak2gx795
Vy0sRWOlHeauAWhU2lxMI1tvedyTc/8z1gfu9NfPvYDqZH9k4mWYQOwb0UZFJaaE
4LPiaSCXdL6OcPqrVxteh/xioJs3hrf/KYLgSO5tHlrqTUZmd0IyuG1kplkHAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUw33X2CMpYoGYaqnd5eQJrIbJT3EwHwYDVR0j
BBgwFoAU54wq/PCSe5UnCenQIjKq8iNpggowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5
YmNiLzEvRTc4QzJBRkNGMDkyN0I5NTI3MDlFOUQwMjIzMkFBRjIyMzY5ODIwQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNzhDMkFGQ0YwOTI3Qjk1MjcwOUU5RDAy
MjMyQUFGMjIzNjk4MjBBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83ZjVkMmExYi1jYWNjLTRlMjItOGFmMi05ZjIwYTkzMjliY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKx0MA0GCSqGSIb3DQEBCwUAA4IBAQBL
i8/AvndtD+67jGmGKStBoYgrsnKqjdjMh/T0sNbectmjILUtUo7hy9h/YhhaIch+
HZqZTaY9FaQBes9W4bK6wu1moMZhL3VnrjznxDYG3ZLa1oZECBALTQQbVpLHmv/2
ON4eUi7E44FyXcIVB+uV8nlLKa9pwA8UByb98QaNGWZu5zyE0dbP0GI8IW+21bOu
xjGalZTaleLwehZEha/VMQ4mb8aagyCuZ/H3ZZk9YE4Ckg9zxRoeZptLQc0yTXt6
l4jz+u1DW+y62xf8GXqyL7Bi1cIX6mhklYZs5CgFlnYdwFbfSeDRiy6p9m2OqtZS
m3vNvI24HBA2RdBsfqRk
Generated at Sat Aug 24 16:11:45 2024 by rpki-client on console-ams.rpki-client.org