Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a383838383a3a2f34382d3438203d3e203538323032.roa
File: 326131343a373538303a383838383a3a2f34382d3438203d3e203538323032.roa (raw, json)
Hash identifier: /CSSyTRhV5BtVDl6TGnasOiHO1bN5ZkG6bwltiUP64M=
Subject key identifier: D3:B0:EA:4B:EE:F5:59:4F:B9:11:24:B0:25:6F:83:17:B0:30:74:C6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7C088771012B959C9174A3FF1E51B15505DE351D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a383838383a3a2f34382d3438203d3e203538323032.roa
Signing time: Tue 23 Jan 2024 09:03:59 +0000
ROA not before: Tue 23 Jan 2024 08:58:59 +0000
ROA not after: Tue 21 Jan 2025 09:03:59 +0000
asID: 58202
IP address blocks: 2a14:7580:8888::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Apr 2024 07:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:08:87:71:01:2b:95:9c:91:74:a3:ff:1e:51:b1:55:05:de:35:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 23 08:58:59 2024 GMT
Not After : Jan 21 09:03:59 2025 GMT
Subject: CN=D3B0EA4BEEF5594FB91124B0256F8317B03074C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:55:52:62:22:89:90:b3:e9:e8:d2:e8:f6:
a1:b8:3a:df:f1:97:ae:93:45:f0:04:85:1e:06:28:
26:9b:a3:06:68:1c:95:47:9c:3f:06:6e:1d:86:f2:
7a:2c:2d:c8:c4:ba:68:13:81:a3:bd:53:f0:74:37:
ec:f3:57:da:89:03:f5:34:53:4e:94:f6:a0:c3:7f:
87:5c:7e:4d:ff:7b:25:7b:7a:89:1a:02:5f:bc:ef:
5d:86:b1:1d:46:5d:33:f6:fe:64:95:19:aa:75:d3:
09:96:07:89:6b:83:13:0d:f4:19:2f:29:3f:46:e5:
c9:83:fd:3c:e3:df:51:c0:1c:2e:8a:38:95:03:0d:
e0:f7:05:b7:3b:1d:93:57:19:85:96:ec:8d:ca:8d:
92:d5:1d:44:3e:e8:77:4d:b3:e4:e8:74:31:99:84:
e8:a5:0f:d4:af:1b:86:90:43:ca:ca:48:e5:e3:38:
b2:be:1b:1c:6e:a6:9f:e7:c9:2d:43:7d:9d:e4:16:
d2:0c:fa:91:64:d7:72:1d:bb:82:d8:b5:46:38:ed:
0e:2c:01:da:ca:fb:20:a1:79:31:bb:1a:ea:86:53:
07:a8:f2:16:4c:e8:07:79:8a:c6:58:4f:81:94:9c:
34:ce:95:af:a5:1d:78:e8:5c:c4:56:05:82:85:81:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:EA:4B:EE:F5:59:4F:B9:11:24:B0:25:6F:83:17:B0:30:74:C6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a383838383a3a2f34382d3438203d3e203538323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:8888::/48
Signature Algorithm: sha256WithRSAEncryption
8b:da:d7:5a:51:36:63:d3:1d:ea:b3:de:35:58:7f:69:67:34:
a5:df:80:bd:60:f0:7b:50:88:e9:50:ce:f1:a0:5f:9e:cc:b2:
00:60:72:dd:df:f9:b9:89:62:c8:27:0f:92:dd:cc:13:a6:71:
6a:27:35:9b:86:be:d5:1a:05:94:6f:6a:59:32:bf:55:35:97:
43:82:72:d2:9c:3c:ac:ca:1b:df:b7:1b:30:9b:d1:97:cf:90:
0b:c9:6b:c7:ca:c7:17:89:95:a0:b3:34:d1:d6:6f:39:4c:5c:
11:66:b0:89:e0:60:77:02:0d:4a:e1:ef:65:05:3d:53:b1:b0:
4d:bb:f6:61:30:fb:d6:8e:bd:c5:1d:c7:27:38:a8:80:c1:b3:
27:fd:e0:3d:a6:c5:30:69:f5:e0:50:fa:c6:bc:2b:6b:19:ac:
78:ac:cf:46:65:67:2d:30:a2:33:87:07:7f:ef:ae:72:ff:f6:
fa:45:eb:86:bb:04:ce:14:ac:ea:d9:dc:55:69:86:49:fe:95:
10:45:6c:89:53:21:9e:71:9b:89:cf:d6:d5:b0:38:f5:b4:4a:
0a:ca:1f:f2:14:53:f5:95:f9:8a:07:6d:b9:c6:b0:4d:a2:1f:
20:32:ab:08:87:81:a9:dd:6c:3f:66:09:ef:5c:68:52:00:1b:
b4:49:ea:72
-----BEGIN CERTIFICATE-----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Generated at Wed Apr 10 11:13:00 2024 by rpki-client on console-ams.rpki-client.org