Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a613a3a2f34382d3438203d3e20323135373931.roa
File: 326131343a373538303a613a3a2f34382d3438203d3e20323135373931.roa (raw, json)
Hash identifier: CIGbH3+WCfCA0SJHt6lK/g9ou/r7R1z0DlST8QyT2MY=
Subject key identifier: 51:A2:18:75:A4:23:C6:9F:06:01:28:27:4C:56:78:34:F4:A8:23:E5
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 583A28472819CEB439BBCF7F57FC54630CA883C6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a613a3a2f34382d3438203d3e20323135373931.roa
Signing time: Sat 20 Jan 2024 02:49:52 +0000
ROA not before: Sat 20 Jan 2024 02:44:52 +0000
ROA not after: Sat 18 Jan 2025 02:49:52 +0000
asID: 215791
IP address blocks: 2a14:7580:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Apr 2024 07:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3a:28:47:28:19:ce:b4:39:bb:cf:7f:57:fc:54:63:0c:a8:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 20 02:44:52 2024 GMT
Not After : Jan 18 02:49:52 2025 GMT
Subject: CN=51A21875A423C69F060128274C567834F4A823E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:ed:ea:5b:cc:69:18:31:35:d9:e1:12:7f:
27:0e:ce:b7:19:1f:7c:c4:87:2b:d4:a9:8a:fd:c4:
18:e1:e2:50:cc:67:dc:45:b3:02:04:92:f3:f0:e1:
ba:69:70:45:b7:8c:c8:b7:89:cb:2f:b4:6e:49:0a:
c6:ea:26:ee:2a:1c:42:18:b9:95:de:f0:ac:a0:d1:
09:1f:8f:c6:3a:40:94:69:0d:d6:88:fa:32:75:bd:
93:bf:3f:2d:17:7b:9b:3b:71:03:27:da:df:aa:5a:
e9:e7:c8:ce:97:f2:ba:2f:4f:be:da:34:f7:f2:08:
54:e4:10:7a:b3:d8:d5:54:b3:15:d8:1e:41:47:ec:
4f:86:3b:41:8c:0f:d9:d4:d0:4d:d6:03:c6:0f:37:
0b:02:40:2a:f4:b6:cf:d6:7e:41:66:e1:2a:25:90:
3b:69:9b:1a:54:27:9d:e9:3d:52:f9:3a:d1:48:46:
54:26:47:0e:7d:e8:03:c4:91:5c:3d:e7:a3:cf:57:
dd:69:46:a9:0b:17:0c:86:78:7a:19:8c:d5:9c:8a:
e2:1a:81:cb:ca:3b:52:33:44:88:96:d5:50:5e:c2:
b9:25:0a:d4:a3:31:75:63:28:46:2f:02:c9:45:01:
64:f1:44:3f:03:39:63:29:56:14:cc:46:85:cc:37:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:18:75:A4:23:C6:9F:06:01:28:27:4C:56:78:34:F4:A8:23:E5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a613a3a2f34382d3438203d3e20323135373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:a::/48
Signature Algorithm: sha256WithRSAEncryption
39:e2:db:45:a6:59:db:49:75:54:b9:cb:31:cb:66:4c:30:46:
ed:85:9b:df:8b:a4:6b:9d:41:4c:94:4f:cc:c8:39:dd:92:45:
51:dc:48:af:5e:06:4e:9d:10:4d:ea:f4:b4:e4:28:c2:a8:3b:
77:0d:a4:7c:28:bd:a6:5e:51:41:11:07:5a:77:58:43:e6:b1:
96:39:4f:79:5e:ff:67:f8:26:5f:51:ce:a2:ed:06:70:3f:c0:
ef:4b:cd:2e:7b:ca:8a:c6:93:45:a5:03:57:59:27:3c:6e:8e:
2f:cb:6f:ee:3c:8e:3c:3e:87:36:6f:fc:28:7f:e3:27:88:d9:
9b:58:ca:42:84:d9:d2:04:a3:f6:00:02:88:d0:e9:1a:c7:e5:
8f:dd:dc:62:ec:fa:a3:bc:5c:bc:43:2a:61:9c:a5:cb:2d:e7:
d6:a7:7c:56:e0:0a:cb:df:a2:39:eb:70:ed:c9:57:50:c4:f0:
1f:69:8a:69:6f:1a:6d:35:78:3f:9c:87:a4:1e:6c:86:e2:23:
18:66:be:10:9b:13:6b:81:8e:b4:99:1a:b0:c9:1d:93:ed:86:
85:0a:59:58:e9:e8:83:8a:b0:7a:88:77:66:b1:be:2f:50:c3:
2c:8f:ea:61:90:e3:93:62:09:bf:d4:d6:d2:ac:bf:f7:44:6e:
aa:5a:0d:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 18 10:40:00 2024 by rpki-client on console-ams.rpki-client.org