Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030323a3a2f34382d3438203d3e20323135333634.roa
File: 326131343a373538313a393030323a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier: 61rYwCOleF1BuzHEObR00fnNIJsmh5ZYipqqGCDX5+4=
Subject key identifier: ED:A8:BC:88:CF:A7:06:02:41:79:7F:B1:98:B9:41:3B:02:1E:9F:8B
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 1382F1CF2154F702F972B8BBFD2305BCB63597BA
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030323a3a2f34382d3438203d3e20323135333634.roa
Signing time: Fri 06 Dec 2024 11:34:39 +0000
ROA not before: Fri 06 Dec 2024 11:29:39 +0000
ROA not after: Fri 05 Dec 2025 11:34:39 +0000
asID: 215364
IP address blocks: 2a14:7581:9002::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:f1:cf:21:54:f7:02:f9:72:b8:bb:fd:23:05:bc:b6:35:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 6 11:29:39 2024 GMT
Not After : Dec 5 11:34:39 2025 GMT
Subject: CN=EDA8BC88CFA7060241797FB198B9413B021E9F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:42:30:87:ab:d2:1a:0b:99:75:67:b0:0f:
47:a8:65:a8:c6:99:36:22:d6:3e:8e:cd:00:7e:3b:
1a:a1:ec:e0:f1:cb:3c:fa:80:b1:34:98:0a:d5:24:
1f:4e:14:8c:b9:79:40:68:23:20:1d:f7:9d:32:d3:
bb:c1:d4:ab:29:86:09:91:c4:c1:70:3b:c2:f0:b8:
f8:80:6b:96:53:eb:5c:d1:94:80:14:65:88:df:69:
5e:6c:0f:0c:94:f5:80:2c:0b:40:e6:fe:c8:a2:0c:
cf:29:fc:b3:d2:60:0f:b1:4a:e1:cf:eb:02:5f:a9:
8b:30:20:52:b8:c7:e0:28:5d:96:e5:02:01:69:c2:
05:f5:c1:2d:48:25:05:86:d8:0e:53:2f:4d:45:39:
a0:b8:41:ba:74:a8:d1:37:4f:a5:af:05:90:0b:f6:
e5:4e:36:d5:7f:25:59:9a:8a:15:97:d0:3c:01:39:
52:94:48:99:1c:5e:8a:c5:ab:96:f5:51:c2:4a:08:
a1:d2:d1:d7:2b:6a:f6:50:c3:07:eb:6d:f1:0b:6d:
e1:f5:a4:48:33:c7:c5:b9:5d:c6:72:91:b6:9c:ef:
df:65:22:19:d2:42:ae:c3:e9:84:3f:34:b7:61:e8:
df:df:d7:73:5f:73:16:2a:29:a3:fc:19:46:8d:a1:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:BC:88:CF:A7:06:02:41:79:7F:B1:98:B9:41:3B:02:1E:9F:8B
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030323a3a2f34382d3438203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9002::/48
Signature Algorithm: sha256WithRSAEncryption
c1:01:89:7a:85:62:20:4d:2d:ab:47:95:63:5f:1d:32:13:eb:
77:aa:b1:27:8b:8e:a0:65:e4:69:e5:22:c0:95:de:8e:1b:ff:
40:3d:78:7c:b1:4c:a0:6a:4e:ea:3b:23:b1:41:00:80:c0:ad:
a6:48:7a:82:0b:2e:f1:fc:07:16:78:bb:ee:24:5b:94:b8:9b:
f3:19:c6:a0:b0:eb:dd:10:36:53:bf:9b:4f:ad:5a:58:76:83:
5f:9a:7d:53:4e:e1:02:84:be:b8:93:36:b0:e8:5c:48:ef:11:
66:84:92:58:a7:50:1f:8e:e8:67:fe:f2:81:1f:be:0d:dd:13:
ac:76:84:5c:47:14:fe:cf:fc:08:f8:d0:ca:ed:b4:ed:5a:9d:
6d:b3:6d:a9:57:39:6f:35:30:d0:cf:6f:fa:c8:ba:3c:f9:9f:
0d:a3:7e:72:df:6e:dd:7a:40:47:7a:e8:9b:22:af:13:33:d4:
5c:f5:ef:fc:29:fc:bd:b6:61:fc:70:67:f9:ac:2c:f8:05:3e:
46:01:a8:22:ef:0d:b4:07:e0:f2:ca:35:28:70:cb:45:d8:1f:
be:2e:4a:b6:f0:4f:f2:19:20:cb:54:92:ad:0f:45:a6:6b:cb:
70:34:6e:4d:90:d9:6e:39:b8:fd:22:d9:42:38:8b:03:62:ca:
d1:a2:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:45:00 2025 by rpki-client