Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33353a3a2f34382d3438203d3e20323135363732.roa
File: 326131313a323963303a33353a3a2f34382d3438203d3e20323135363732.roa (raw, json)
Hash identifier: xVGtsKQ9j/Ng7SSYxruZGmDGMhV4Fs4mAT16cTlX02g=
Subject key identifier: 92:A5:95:DD:2E:3D:55:10:F2:E1:3B:5B:4F:D3:0B:2B:63:CD:37:A1
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3DB0F473FF807EDA921C62B8FF63BF8160AAAA96
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33353a3a2f34382d3438203d3e20323135363732.roa
Signing time: Tue 23 Jan 2024 14:17:41 +0000
ROA not before: Tue 23 Jan 2024 14:12:41 +0000
ROA not after: Tue 21 Jan 2025 14:17:41 +0000
asID: 215672
IP address blocks: 2a11:29c0:35::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 11:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b0:f4:73:ff:80:7e:da:92:1c:62:b8:ff:63:bf:81:60:aa:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 23 14:12:41 2024 GMT
Not After : Jan 21 14:17:41 2025 GMT
Subject: CN=92A595DD2E3D5510F2E13B5B4FD30B2B63CD37A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:7f:43:52:d9:ba:8d:56:ac:b6:21:cf:75:
68:bc:a4:37:da:68:ab:e4:9f:6e:3d:c9:b6:45:4b:
96:eb:a6:0b:ff:b5:70:8f:8f:52:e4:53:54:8f:75:
c7:35:7b:3a:53:e1:ab:1b:a7:60:f3:41:6c:5d:d7:
b9:c7:71:bc:96:8a:2e:1d:87:c0:9a:89:b7:6f:8b:
2c:9f:97:b6:d2:e3:3c:a0:ee:31:12:b4:df:89:76:
7d:74:d5:01:c4:a6:9f:c1:ca:0d:e0:bb:11:81:98:
af:4c:62:65:92:f8:64:c0:8a:15:63:a2:ea:9d:66:
9f:51:c7:cf:57:b8:5f:00:b1:bb:8d:f1:28:2a:13:
59:37:ff:64:b4:c8:5b:eb:74:23:f3:d3:62:c4:2b:
a9:c5:0a:77:81:dd:7d:17:00:5e:91:da:fa:9f:40:
35:5c:7a:9f:13:ff:55:67:b2:2f:0f:36:96:67:3d:
9d:32:51:3e:fa:eb:42:ff:9e:a9:f3:42:a8:fb:c1:
2c:4a:12:ac:6b:e7:0f:9e:a3:8a:df:88:8d:72:81:
03:86:9b:e7:47:f3:1b:46:33:95:7a:9c:4b:be:c4:
62:59:b2:62:d4:18:41:34:61:6a:e4:7c:f7:72:cc:
ed:5f:b0:a4:ec:c7:48:4f:8d:98:d6:d6:ce:d4:68:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A5:95:DD:2E:3D:55:10:F2:E1:3B:5B:4F:D3:0B:2B:63:CD:37:A1
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33353a3a2f34382d3438203d3e20323135363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:35::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a6:ca:1d:8b:d4:22:65:e9:0e:31:60:d9:01:32:75:6a:c6:
f7:0d:9f:e6:39:e5:23:ca:9d:ea:5b:8d:7a:cf:b6:99:71:c1:
58:88:5f:a7:49:be:a3:5c:2d:26:7f:3a:47:6e:7f:96:c3:db:
0b:e9:7e:0c:69:8f:d3:9c:51:55:2c:61:f1:e0:fb:32:72:90:
24:c5:52:a4:8f:e8:aa:21:8d:91:a8:f0:2f:2f:6e:1d:d2:05:
d5:da:f6:a7:22:e4:5f:29:57:ff:ae:09:d8:4f:e4:c6:ea:d1:
c6:68:65:1e:58:fd:af:0f:ff:44:f2:51:60:75:0a:89:2d:d5:
94:ad:c5:32:24:e4:74:6a:e4:57:3d:ab:09:4e:46:dc:18:30:
f6:22:35:72:ad:d9:ea:08:32:45:16:e1:1c:f1:50:1b:bf:bd:
76:41:a9:09:63:7e:91:dd:54:aa:85:32:7d:99:24:09:d4:7d:
cb:2b:dd:e8:b7:e8:9d:e5:8a:50:7d:37:e7:fb:54:72:e1:68:
52:1a:b3:ac:df:2e:33:46:dc:6e:8f:fa:16:64:ad:8a:9d:39:
57:bd:8c:09:1b:55:03:8c:5d:96:7e:a6:10:57:74:4e:f3:7b:
48:00:9e:26:1c:8a:98:b4:42:5c:9b:21:5e:47:54:ea:ea:4b:
ef:b8:cb:54
-----BEGIN CERTIFICATE-----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 at Fri May 3 14:21:12 2024 by rpki-client on console-ams.rpki-client.org