Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa
File: 326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa (raw, json)
Hash identifier: IygdXbOfg38f4KQZs+Jb8Xb6l+Pg5YxaYwJO1bQYpk0=
Subject key identifier: E3:C7:33:4A:42:82:AE:79:11:15:85:A7:39:89:09:26:03:28:2C:E1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2E708B4FE267242D8F67970FB573D73E97FECB5D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa
Signing time: Thu 29 Feb 2024 15:45:37 +0000
ROA not before: Thu 29 Feb 2024 15:40:37 +0000
ROA not after: Thu 27 Feb 2025 15:45:37 +0000
asID: 216324
IP address blocks: 2a14:7581:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:70:8b:4f:e2:67:24:2d:8f:67:97:0f:b5:73:d7:3e:97:fe:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 29 15:40:37 2024 GMT
Not After : Feb 27 15:45:37 2025 GMT
Subject: CN=E3C7334A4282AE79111585A73989092603282CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:84:5e:77:f3:12:62:28:bc:f6:85:ca:73:
19:94:b5:77:2f:f6:04:f4:ec:c6:13:78:df:78:46:
43:db:35:32:ce:36:85:6e:3a:d4:2d:41:a5:01:cf:
c2:d1:52:67:9a:58:60:cf:f5:c7:d4:4c:58:4a:cc:
99:c8:69:72:ff:3d:4f:7e:e2:ac:5b:96:80:d3:17:
16:d7:ea:c8:23:79:3f:4a:15:fd:fa:fd:95:db:e4:
01:3e:c0:c1:3a:3b:cf:37:61:75:48:04:f0:75:97:
bd:45:24:e5:3f:f3:e7:f4:df:4c:bb:55:42:e1:53:
ab:08:5f:58:f1:c6:9f:4b:05:f9:74:4e:af:c2:23:
47:a0:05:5e:24:e7:13:8b:76:80:93:9e:9a:3a:d6:
ec:88:67:d0:a2:a4:d0:61:51:da:9e:4c:11:75:d4:
67:c8:83:00:5c:7f:57:d3:80:60:98:de:10:43:11:
68:18:16:ef:b0:e8:fa:f4:6e:e8:3d:5a:b5:ea:b8:
4f:e9:78:57:8d:e7:2d:87:47:79:59:79:0e:f6:e1:
5b:b7:28:6a:44:3d:a8:cc:1c:56:53:4c:3c:d6:16:
9f:6d:27:42:06:76:c0:e7:47:08:d0:f1:1e:d4:a2:
98:69:e2:39:50:81:62:25:73:56:03:d3:64:f5:61:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:33:4A:42:82:AE:79:11:15:85:A7:39:89:09:26:03:28:2C:E1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:1000::/36
Signature Algorithm: sha256WithRSAEncryption
59:93:34:10:2d:8c:72:b4:46:11:eb:54:de:62:13:b0:2b:ac:
fd:a5:b1:01:69:78:b5:bc:ff:56:15:ea:55:e3:7a:6a:97:32:
d2:07:46:9e:eb:b9:1f:ab:85:1a:a1:ec:06:dc:fc:28:43:6f:
6b:62:9a:ab:11:4e:f2:1f:d7:c4:46:2c:70:6d:e3:7d:f7:37:
bd:bd:63:62:e9:2c:67:35:9d:ec:29:4a:9f:0b:63:5b:69:9c:
e2:78:6d:45:aa:7c:0a:7b:ce:67:25:13:74:09:cb:18:39:e1:
7c:ef:be:d7:77:6e:72:d1:64:17:ca:0e:0a:90:29:20:1d:ee:
50:3a:4d:9b:56:63:dd:cb:3c:a0:08:02:3d:b2:ec:d9:92:13:
96:27:a9:5a:d3:29:a8:6a:46:b0:32:d1:bb:06:0f:61:a7:14:
fc:ff:16:c9:fd:23:ae:f8:0c:d8:11:68:73:78:30:d2:fb:16:
94:cf:c5:f7:5f:b6:71:0b:6c:e3:27:fd:c4:cd:f0:ae:77:dd:
15:82:b8:34:3f:9c:45:90:eb:d4:76:7f:8c:1b:b8:a5:b2:68:
bd:52:3f:15:53:d2:c8:b3:c1:41:85:e9:3f:7d:d7:80:20:b4:
ae:74:5a:2a:8e:e4:7a:a6:d2:d6:77:53:59:19:66:7c:79:93:
37:7a:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 11:57:01 2024 by rpki-client on console-fra.rpki-client.org