Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa
File: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (raw, json)
Hash identifier: 1JcLlJekoq5KC/gd4sKyqmBH+bzrM5DRx1abujolbro=
Subject key identifier: 9A:0E:76:AD:84:85:24:BF:34:C8:C8:12:E4:6A:C3:1F:1D:FD:E6:CD
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2BFF89CE4ADDE54E56941CFBCEB833CD70390EE0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa
Signing time: Thu 08 Aug 2024 09:12:56 +0000
ROA not before: Thu 08 Aug 2024 09:07:56 +0000
ROA not after: Thu 07 Aug 2025 09:12:56 +0000
asID: 216452
IP address blocks: 2a14:7581:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 15:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ff:89:ce:4a:dd:e5:4e:56:94:1c:fb:ce:b8:33:cd:70:39:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 8 09:07:56 2024 GMT
Not After : Aug 7 09:12:56 2025 GMT
Subject: CN=9A0E76AD848524BF34C8C812E46AC31F1DFDE6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:2e:2b:a5:6c:59:f4:f4:51:90:92:de:8b:
d5:7e:d1:25:ef:40:59:a1:fb:3b:75:8c:dc:09:00:
f9:69:25:2f:12:bc:e4:4a:ad:a2:76:a8:24:8c:e1:
e6:d4:36:4c:73:f5:92:16:79:79:56:d5:84:55:0f:
df:61:b9:91:e0:55:5a:da:9e:68:5a:6d:96:4a:8b:
4e:5f:bc:8c:75:c8:79:30:80:7f:17:92:13:13:1b:
a1:e3:b3:56:0b:9e:23:fb:f0:4a:06:cb:0a:e6:a0:
9a:37:5b:0c:da:41:bd:fb:48:a1:d5:65:2f:57:e8:
6a:8b:39:10:36:5e:bf:73:cf:e4:4a:eb:97:78:a5:
fd:87:4a:11:a3:e6:37:dd:9e:4e:11:58:eb:47:6d:
7c:7d:9f:bc:dd:a0:68:6f:00:05:f2:2f:71:07:bc:
d0:ee:d7:a7:48:92:4b:d3:7d:0d:c4:8e:ab:fe:91:
c4:47:9b:22:80:48:0c:9a:1f:e4:a5:cc:cb:f5:45:
3f:be:c1:39:c3:56:83:19:7a:13:02:ab:59:68:42:
5a:52:ce:4b:c6:fc:34:a9:30:e3:24:31:cb:99:2e:
52:c2:7c:fd:8f:2f:61:f6:2d:c0:eb:63:ba:22:59:
9f:ae:75:0c:7a:90:26:56:67:62:d3:03:d3:4b:12:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:76:AD:84:85:24:BF:34:C8:C8:12:E4:6A:C3:1F:1D:FD:E6:CD
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d00::/40
Signature Algorithm: sha256WithRSAEncryption
1a:83:28:23:d5:1c:41:08:85:78:49:3a:95:68:06:ab:a1:2a:
c3:b7:f9:10:12:52:81:8d:a7:eb:40:4c:86:55:fa:16:21:92:
68:91:fc:21:ad:ca:c2:b0:70:b3:eb:82:52:8a:21:e8:42:7a:
1b:38:c1:56:b6:5e:e1:d5:66:1f:48:89:3d:d8:64:42:97:d6:
ca:45:4a:37:0f:a7:93:02:5a:6b:de:0b:cf:02:2c:ad:99:ba:
0c:60:cd:86:1b:a3:da:43:72:d7:ab:a5:3e:9e:46:d0:ca:a4:
12:2d:a0:6f:bb:54:48:f4:da:23:9d:67:a6:86:de:ce:8a:f7:
83:87:66:5c:1d:21:a3:1e:c9:78:8b:83:0c:43:f5:73:96:b7:
15:ea:70:9e:46:5a:6c:2a:e7:08:45:71:5c:9b:9e:d1:32:8f:
27:97:8b:a2:36:6c:96:70:f9:bd:45:66:7b:38:a0:c1:66:e2:
d0:e4:8d:cf:e8:02:38:9b:28:ec:0b:69:94:1e:e0:d5:b8:95:
db:5f:e5:1d:f4:e1:8c:b2:8f:12:7f:14:83:8a:26:f1:07:79:
cf:26:eb:76:d1:76:ba:a4:17:21:b4:50:0f:79:26:e7:84:2e:
cb:82:1a:f3:1f:6d:e4:0e:9f:8a:12:d1:01:5e:37:a8:a5:4d:
dc:c8:5c:09
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 8 18:26:33 2024 by rpki-client on console-ams.rpki-client.org