Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32353a3a2f34382d3438203d3e203630383934.roa
File: 326131313a323963303a32353a3a2f34382d3438203d3e203630383934.roa (raw, json)
Hash identifier: sJOrwBw7kfxIQbMiUdSC9O41LJM0poGL6yIoPcEtP2w=
Subject key identifier: 65:30:19:81:97:77:DD:F9:19:12:71:4E:4D:3F:5D:29:A9:A6:38:BC
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 063214B533A057FEE30F9911DB9CD36573910196
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32353a3a2f34382d3438203d3e203630383934.roa
Signing time: Tue 25 Jul 2023 13:25:46 +0000
ROA not before: Tue 25 Jul 2023 13:20:46 +0000
ROA not after: Tue 23 Jul 2024 13:25:46 +0000
asID: 60894
IP address blocks: 2a11:29c0:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 Feb 2024 18:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:32:14:b5:33:a0:57:fe:e3:0f:99:11:db:9c:d3:65:73:91:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 25 13:20:46 2023 GMT
Not After : Jul 23 13:25:46 2024 GMT
Subject: CN=653019819777DDF91912714E4D3F5D29A9A638BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:41:00:d1:56:ef:7c:be:b9:e4:88:9e:33:
b9:e0:fd:07:96:42:1f:59:99:f3:7f:ea:db:bb:3c:
cf:a5:de:22:a9:53:6f:19:f5:0d:ee:bc:2f:3f:5a:
b0:57:6a:83:50:66:b5:52:a3:6f:49:79:2b:37:76:
06:2b:6a:ed:b3:ca:b3:01:2b:df:27:eb:25:c3:2c:
0d:9d:b8:bc:a4:3d:81:ea:26:1e:7e:01:f5:7b:8a:
ae:a4:42:8b:a8:a5:a8:aa:70:ee:f1:04:e5:f4:79:
5c:1e:23:ff:3b:3e:b5:4d:65:fd:17:9d:64:b5:73:
dd:6b:32:e0:43:a1:aa:d6:69:d2:83:05:e4:0c:75:
28:4d:11:c7:4c:5e:5d:74:90:88:19:f2:af:17:88:
54:bf:71:82:cf:ba:69:5e:ec:c7:86:68:46:79:c3:
2d:2a:ac:04:cc:4f:fe:ea:7b:d3:06:dc:3f:e2:60:
59:fd:25:99:3c:c9:db:4b:e6:8b:17:14:19:54:3e:
d8:7c:5b:13:7b:30:ed:a9:86:1b:15:c8:ce:0f:2d:
6d:2e:a0:59:47:5c:71:56:80:26:83:93:0d:61:42:
53:5a:0d:c2:40:e6:9d:df:c2:15:6a:30:fd:5e:f5:
65:f6:8c:4f:d0:4f:59:eb:07:fb:4e:f2:74:8d:e0:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:19:81:97:77:DD:F9:19:12:71:4E:4D:3F:5D:29:A9:A6:38:BC
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32353a3a2f34382d3438203d3e203630383934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:25::/48
Signature Algorithm: sha256WithRSAEncryption
64:3f:64:a8:a6:30:f2:48:88:f9:e9:fc:3b:62:69:95:c0:25:
0c:01:fa:c8:a6:e3:c9:f3:57:82:4c:ec:bb:4f:d8:6d:2a:12:
eb:04:19:c3:2c:02:e2:a3:5a:60:1f:86:e3:c5:69:44:95:8b:
a7:6c:bd:17:d1:95:d6:74:ef:ed:b3:e1:05:c9:3d:fb:d8:b2:
1f:56:69:c2:2d:42:3a:39:05:cf:70:56:ef:49:c1:a4:3a:e3:
97:31:d6:78:62:73:47:22:4a:78:fa:ae:1d:cc:c9:0b:2a:cf:
23:32:f0:78:66:17:cd:98:57:fe:f0:2c:29:2b:13:f4:35:c7:
74:f5:ad:22:94:05:91:07:7e:03:00:f3:96:14:eb:00:aa:a7:
dd:b1:c0:d7:f0:94:04:84:33:76:99:c6:68:63:be:ca:10:79:
e9:02:a0:53:4b:17:a7:25:02:04:48:ab:d5:c0:2c:f1:4f:3b:
49:48:ae:36:c5:f9:f9:6a:e7:49:aa:79:5f:31:bb:ac:9b:29:
b5:cf:1b:2f:73:15:aa:42:b1:cd:4c:d7:13:11:66:04:99:f0:
3a:06:50:78:fd:87:fa:a9:f1:7a:cb:dd:91:01:a6:f1:5d:4a:
44:06:fe:d5:c3:a1:fc:ba:04:43:e6:e4:9d:bc:6e:b4:1b:d0:
ca:cd:2d:c4
-----BEGIN CERTIFICATE-----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==
Generated at Sat Feb 17 19:29:19 2024 by rpki-client on console-ams.rpki-client.org