Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a363030303a3a2f33362d3438203d3e2030.roa
File: 326131343a373538303a363030303a3a2f33362d3438203d3e2030.roa (raw, json)
Hash identifier: PW97IJPWQF6iufzbT4PohtYWwGe4oQG+/XNKvKPfDOI=
Subject key identifier: C0:32:29:EC:53:DB:1C:FF:28:D6:26:04:66:BF:77:E4:07:B5:EF:91
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 57C96272D90865A089E941A76A32D61A36388833
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a363030303a3a2f33362d3438203d3e2030.roa
Signing time: Tue 03 Dec 2024 12:55:19 +0000
ROA not before: Tue 03 Dec 2024 12:50:19 +0000
ROA not after: Tue 02 Dec 2025 12:55:19 +0000
asID: 0
IP address blocks: 2a14:7580:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Feb 2025 00:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c9:62:72:d9:08:65:a0:89:e9:41:a7:6a:32:d6:1a:36:38:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Dec 3 12:50:19 2024 GMT
Not After : Dec 2 12:55:19 2025 GMT
Subject: CN=C03229EC53DB1CFF28D6260466BF77E407B5EF91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:64:39:e0:a1:2f:ef:14:3e:f2:5a:7d:f6:
6a:9d:f8:7c:40:e2:31:5b:42:b5:4b:ef:82:f9:bc:
f6:73:42:60:1b:54:7e:14:be:f0:b2:74:f7:47:c2:
f1:a4:7e:03:00:22:6d:71:b2:15:03:dc:67:4b:31:
e8:a5:52:a0:31:2e:df:3d:b0:9e:ec:41:bf:00:c9:
91:21:2e:a0:e5:fc:a2:16:c0:af:a9:91:c1:7b:63:
f8:b4:0e:45:90:7e:a5:1b:5c:8e:fe:86:ef:bd:20:
f8:32:13:98:aa:13:a5:10:78:59:88:63:8d:30:5f:
3e:8d:68:1c:35:09:0c:ba:50:41:9d:3e:47:f0:a0:
09:c3:79:bf:c2:52:fe:ab:22:53:8c:e8:d2:ba:84:
92:de:d5:5f:cf:27:df:01:3f:4a:0e:a8:7b:bf:c0:
5d:ac:65:01:d5:89:e0:40:9d:52:f4:eb:a3:b9:72:
9f:4f:8d:78:04:6a:c8:23:25:98:e1:9c:f6:9e:de:
8a:f0:50:2c:72:73:42:c4:df:22:4a:2a:3c:be:9f:
9d:84:7a:0e:35:fd:09:65:9f:ce:84:c8:48:8e:8d:
0d:8a:a8:62:25:c6:6f:ff:9d:db:f2:53:8f:8d:53:
d2:70:dc:0d:29:d6:3e:66:4e:26:92:92:b0:f1:67:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:29:EC:53:DB:1C:FF:28:D6:26:04:66:BF:77:E4:07:B5:EF:91
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a363030303a3a2f33362d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:6000::/36
Signature Algorithm: sha256WithRSAEncryption
19:0a:ba:c4:d2:c6:f5:d8:28:da:8f:17:d4:3b:24:10:27:45:
18:b0:74:9d:de:82:f0:01:5a:1c:b4:f0:0b:74:c4:8a:ef:7e:
28:1c:6f:64:da:70:b3:68:1b:be:96:7f:46:4a:ba:b6:76:d9:
e5:ff:57:00:3d:f4:01:03:54:bd:12:0e:d7:40:e2:48:7b:40:
17:35:da:1c:bf:31:64:bf:23:a6:4b:b3:17:af:2b:23:eb:28:
50:eb:84:02:31:dd:67:9d:09:2f:78:d4:a3:c4:8b:9e:34:ff:
97:00:f4:c4:05:d6:48:b5:f3:05:d4:fe:58:b5:be:9a:f6:e6:
ed:ec:d2:61:69:37:3d:45:eb:fb:4d:b5:20:fb:23:92:bf:a8:
c0:2c:7a:ac:2d:06:fc:ed:1a:66:7e:a1:b3:eb:55:db:ac:66:
ce:ed:1a:e2:a7:7c:fa:de:a7:49:05:2c:f6:4c:6a:37:9f:cf:
8c:1e:4e:f4:80:b0:f7:be:e9:60:ef:97:e2:35:b4:b0:71:68:
30:21:65:9b:60:d8:9d:a2:c8:59:ff:e8:96:de:5d:95:11:7f:
01:8e:fd:37:a5:7c:a8:0f:be:e1:f3:e5:d6:7e:89:d3:73:23:
7d:06:30:c1:c6:7b:f3:8d:43:76:f2:d2:0e:11:ae:4e:96:ba:
13:fd:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:45 2025 by rpki-client