Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336465303a3a2f34342d3434203d3e20323136323636.roa
File: 326131313a323963303a336465303a3a2f34342d3434203d3e20323136323636.roa (raw, json)
Hash identifier: tRnoBZnV2PoJw3a452OBO1F2XP5rJ9qQ4tmBJdR9qNA=
Subject key identifier: E1:E9:01:E5:DB:4D:D5:DE:04:1B:C3:9E:AE:AF:76:A4:91:65:DE:27
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 66FA2DA80891599236D0BEB7AECB5D5410D6D43E
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336465303a3a2f34342d3434203d3e20323136323636.roa
Signing time: Fri 22 Sep 2023 10:39:54 +0000
ROA not before: Fri 22 Sep 2023 10:34:54 +0000
ROA not after: Fri 20 Sep 2024 10:39:54 +0000
asID: 216266
IP address blocks: 2a11:29c0:3de0::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fa:2d:a8:08:91:59:92:36:d0:be:b7:ae:cb:5d:54:10:d6:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 22 10:34:54 2023 GMT
Not After : Sep 20 10:39:54 2024 GMT
Subject: CN=E1E901E5DB4DD5DE041BC39EAEAF76A49165DE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:c1:20:e3:0a:b7:b3:9c:0c:e3:8b:72:be:
c8:ee:60:5f:38:9c:55:ca:b1:24:f2:24:1f:c9:2b:
9d:43:62:66:66:03:df:49:33:9a:0e:a1:1f:71:37:
53:5a:00:1a:79:29:71:60:82:9b:f6:e6:13:bc:76:
15:e7:10:a4:4d:b5:78:be:f9:6f:b3:f2:66:1b:f9:
c1:46:6a:d9:24:e7:b6:84:85:62:85:e9:6b:dc:45:
c0:08:ec:a4:7a:3b:1d:bd:4a:ef:1b:46:f2:be:fd:
2f:5b:08:94:65:74:25:db:83:f3:bd:37:39:bd:56:
12:1e:8c:85:52:59:22:24:42:48:e9:7d:67:16:56:
28:74:4e:2d:e5:28:12:4e:d5:4c:7b:7c:43:59:75:
9d:57:da:4f:50:60:8a:26:59:c9:5c:dc:25:b6:c3:
62:66:3e:fa:89:b7:82:cc:2f:9f:43:66:4b:ed:4c:
db:60:36:38:f8:fc:46:f0:71:2d:67:2c:43:93:c0:
ef:b2:be:d8:d7:07:0f:df:7b:22:7b:8a:3a:71:c5:
39:c6:cb:e6:eb:a3:63:a3:73:5c:7c:bc:58:78:e3:
e5:ac:a6:8e:8f:73:b7:b4:29:77:a2:d3:dd:14:43:
88:d1:15:9e:6e:6b:b1:a7:c0:b1:59:a2:9c:a9:15:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:01:E5:DB:4D:D5:DE:04:1B:C3:9E:AE:AF:76:A4:91:65:DE:27
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336465303a3a2f34342d3434203d3e20323136323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3de0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:ef:4f:5e:73:f9:e1:60:4d:42:8f:0f:82:43:d5:e1:c2:a7:
50:79:61:48:ae:ba:0f:64:0e:16:cf:d6:31:44:1f:11:81:a3:
d4:16:29:bc:1d:77:e6:78:9d:e2:1e:97:46:bc:b4:d2:a6:d3:
65:f7:f1:24:1b:a0:4e:6a:19:af:bc:54:b9:81:a3:ec:a9:b2:
da:8d:c1:7d:4d:18:23:23:6d:c8:f6:93:6f:1e:bc:b9:86:bb:
15:21:1a:54:e2:ee:bd:35:cb:1d:a2:80:d4:8f:f2:ab:97:eb:
1c:a5:b5:db:75:08:e0:29:35:7b:02:20:3c:ed:af:6d:4c:32:
1a:e7:cb:54:b7:30:af:d5:9a:c4:9f:cd:f8:62:a5:9f:ed:24:
4c:26:bb:b8:47:23:f0:65:17:e8:85:85:d0:19:e1:75:db:d5:
e9:94:6d:c4:b5:0d:31:13:58:19:be:d8:54:94:3b:75:c7:7e:
4a:96:6c:44:65:07:da:cc:69:ba:f7:09:a3:cc:1f:87:98:bb:
38:32:f7:05:9a:4f:26:3e:7c:43:03:50:9d:a9:2a:10:86:53:
15:d2:c8:6b:68:d9:c9:7a:b9:5b:5d:12:99:67:08:5a:a8:aa:
17:8c:a7:78:d5:dc:09:82:d0:ca:7d:f2:f3:15:7b:89:4f:8b:
bb:12:f9:a7
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 22 20:44:39 2023 by rpki-client on console-ams.rpki-client.org