Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030333a3a2f34382d3438203d3e20323135333634.roa
File: 326131343a373538313a393030333a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier: O7KHuvy5uCnvxtuEtptl5XS9K7cGpgWCapcE+WwOlm8=
Subject key identifier: CC:5A:71:61:DF:F4:E6:6C:53:C9:5B:86:38:E6:77:D8:DE:20:4A:7C
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 01B2E6A463F44E4F3EE585E67216843FC8EDEDF6
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030333a3a2f34382d3438203d3e20323135333634.roa
Signing time: Fri 06 Dec 2024 11:35:09 +0000
ROA not before: Fri 06 Dec 2024 11:30:09 +0000
ROA not after: Fri 05 Dec 2025 11:35:09 +0000
asID: 215364
IP address blocks: 2a14:7581:9003::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b2:e6:a4:63:f4:4e:4f:3e:e5:85:e6:72:16:84:3f:c8:ed:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 6 11:30:09 2024 GMT
Not After : Dec 5 11:35:09 2025 GMT
Subject: CN=CC5A7161DFF4E66C53C95B8638E677D8DE204A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:e7:27:f4:19:4a:25:1a:3d:39:67:1a:8d:
60:64:d1:51:73:e9:84:e2:15:0b:d7:f0:55:7a:d4:
04:5b:2f:2b:fa:b0:7d:df:29:e9:52:e0:f2:b8:d1:
7e:a3:21:e3:e6:ca:54:28:5b:82:5c:7d:e1:51:0e:
bf:e4:a9:5f:d0:1f:a0:d6:15:10:bd:e4:d0:0c:dc:
8f:12:f2:04:20:1e:ce:b9:74:b2:f2:fc:38:20:18:
a1:6e:55:0a:6a:3b:82:9f:06:0b:a6:54:01:e7:0c:
91:00:48:e3:b4:46:f5:a6:a5:f9:01:b5:6b:00:3f:
c7:e6:f3:19:a9:83:24:85:f5:9e:6b:a2:62:d1:1e:
10:cf:5d:c1:8e:17:b2:e0:db:f7:d3:e4:4a:3c:a1:
ef:9b:b2:f9:3c:c9:55:ad:7a:c4:53:f7:48:69:b4:
01:55:ba:c1:42:05:5b:08:68:9e:21:e7:40:7f:d5:
49:12:77:6d:c0:97:6a:0b:46:18:ca:6a:e9:f4:00:
80:2d:8f:8e:ac:c7:6d:8e:e0:55:fe:f2:f4:ec:84:
92:e3:1d:ce:9a:21:57:ba:0e:83:90:b2:51:da:01:
fc:9d:ae:bd:36:92:88:9f:53:35:f3:d6:91:c2:8d:
43:ca:e6:7c:ae:6c:f3:cf:7d:2a:56:67:93:db:bf:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:71:61:DF:F4:E6:6C:53:C9:5B:86:38:E6:77:D8:DE:20:4A:7C
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030333a3a2f34382d3438203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9003::/48
Signature Algorithm: sha256WithRSAEncryption
27:0c:6c:6b:71:ed:5b:ee:c3:62:ee:20:9e:bf:d0:93:ad:17:
88:c2:e1:26:ac:b7:33:3c:81:40:46:6a:64:ca:90:e5:a9:d8:
c9:c9:0b:0e:87:9e:79:61:26:fd:de:e0:f1:eb:c6:db:21:84:
a9:28:7c:b5:28:6c:9a:49:de:0f:5a:42:d2:d1:95:31:4d:fb:
0e:f3:cd:47:9c:ae:75:00:70:38:fe:b2:aa:91:c1:f2:a4:61:
2e:0b:f8:f7:d9:8f:97:a8:31:15:37:f6:77:7a:09:7c:d9:68:
d5:97:5c:9c:4d:4f:4c:89:7e:65:ef:73:dc:2a:7b:68:ed:99:
80:03:df:0d:3a:c8:c3:67:3e:6c:a1:d8:8c:31:37:88:ca:62:
a2:85:1f:5e:61:4a:c4:bd:ee:17:32:52:23:80:a8:0d:a4:94:
d5:38:d6:97:b8:7f:e2:25:02:a3:07:46:e7:91:ad:3a:2a:84:
b0:24:e0:ad:92:dc:2c:b0:23:ce:5c:fd:12:a1:49:83:15:a6:
ea:59:54:17:6c:31:fc:cc:1c:5c:36:7e:fe:66:ea:18:64:34:
60:66:ec:d4:80:44:b9:91:ce:88:51:b4:c5:c2:8c:7d:bc:d2:
b8:d8:0f:9a:fa:67:b8:51:8e:62:fd:f7:46:a3:c4:1d:dc:7b:
05:6f:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:20 2025 by rpki-client