Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336533303a3a2f34342d3434203d3e20323134353738.roa
File: 326131313a323963303a336533303a3a2f34342d3434203d3e20323134353738.roa (raw, json)
Hash identifier: Pvn8fg7IzL1zLH2XAAJ+fvVI3w8wJ2kvVm5RZQf1iFU=
Subject key identifier: 75:87:94:B2:66:D2:AD:06:EB:9D:55:F8:91:E1:92:86:01:EE:56:13
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 45CA659E3241835572A5FDCAE2DC1096C0EBAD02
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336533303a3a2f34342d3434203d3e20323134353738.roa
Signing time: Wed 10 Jul 2024 10:55:18 +0000
ROA not before: Wed 10 Jul 2024 10:50:18 +0000
ROA not after: Wed 09 Jul 2025 10:55:18 +0000
asID: 214578
IP address blocks: 2a11:29c0:3e30::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 10 Jul 2024 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ca:65:9e:32:41:83:55:72:a5:fd:ca:e2:dc:10:96:c0:eb:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 10 10:50:18 2024 GMT
Not After : Jul 9 10:55:18 2025 GMT
Subject: CN=758794B266D2AD06EB9D55F891E1928601EE5613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:c6:c4:59:fe:38:ff:59:72:90:7f:df:4e:
db:90:ae:71:05:c0:ed:00:da:02:65:bb:17:11:c7:
9a:30:54:c2:c9:67:3d:a1:f7:fa:0f:61:63:1d:bb:
a3:96:65:df:40:39:cc:74:d2:7e:66:b6:d2:53:03:
34:3a:66:64:e0:f8:01:ba:04:c8:f6:4a:b4:e7:08:
d8:54:1f:9c:55:25:ce:89:62:50:b5:bf:43:ec:31:
52:76:1a:2d:24:8a:40:14:35:42:8d:3e:82:d7:72:
a7:4e:5a:69:dc:85:ab:05:73:af:e9:80:14:ad:0e:
24:ef:8c:a5:09:26:9e:39:6a:fb:77:e6:d4:72:17:
70:5b:db:13:1d:f6:19:9a:ee:47:eb:93:9d:c1:c7:
12:0f:cf:eb:44:62:15:ec:ac:55:36:8f:5b:c0:fd:
b0:2b:b2:69:af:2c:ee:6e:78:0d:37:f1:78:8a:25:
d4:2f:20:1d:f8:a4:03:eb:7c:87:62:2a:42:f3:7e:
d0:5b:a4:04:54:4d:48:3c:ce:3a:85:db:c4:b1:5f:
1a:09:1c:4e:0e:71:f1:87:fb:a7:17:8a:2f:17:96:
c1:e7:97:37:75:0c:07:6e:2f:89:2d:29:0b:fc:ee:
f6:a8:b1:aa:72:2d:fd:7d:5c:87:00:c7:b8:61:4f:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:94:B2:66:D2:AD:06:EB:9D:55:F8:91:E1:92:86:01:EE:56:13
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336533303a3a2f34342d3434203d3e20323134353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e30::/44
Signature Algorithm: sha256WithRSAEncryption
7b:40:ef:53:a9:31:32:d1:6e:d4:be:dd:02:09:e0:0c:f7:bf:
85:ce:d6:e4:60:bc:9d:a6:b6:3f:ee:43:c9:10:d1:64:2f:38:
b5:d8:ae:aa:48:36:81:94:78:82:9a:2a:76:79:7f:28:b2:7c:
30:90:e6:ee:91:ea:da:26:7b:c2:51:91:06:90:23:a6:46:51:
9d:e5:ec:6a:12:9b:54:e1:b6:d1:ec:f5:4d:8d:c1:79:af:1d:
1f:2b:3a:43:fc:a1:2b:40:ca:89:6a:e5:8b:5f:d9:bb:b8:29:
4b:73:09:54:35:7c:7e:96:c9:e8:6b:4e:0e:7f:c9:b9:07:ec:
37:07:95:ce:79:f9:23:cc:3f:30:73:0d:9e:45:bb:e6:78:2a:
d1:3b:03:8b:3b:d8:5a:30:c0:fe:5a:9e:b8:2e:33:80:e7:0f:
8d:66:b0:31:58:76:45:ec:f9:77:ec:76:0a:cf:ad:72:f9:7a:
67:e2:27:e0:d0:d4:d4:64:f2:0b:50:86:ff:43:3e:0c:c8:a7:
b0:1c:5d:0a:16:44:b6:1b:59:81:74:4b:62:fc:66:94:19:0d:
ec:fa:07:b5:bd:27:55:22:f1:92:a5:07:f1:eb:50:01:b6:55:
fa:51:b1:5a:38:7a:31:0b:7c:ad:4e:ee:84:f6:94:f1:0d:8f:
cb:1a:e5:43
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 10 15:28:22 2024 by rpki-client on console-fra.rpki-client.org