Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6636303a3a2f34342d3438203d3e20323134343936.roa
File: 326131343a373538313a6636303a3a2f34342d3438203d3e20323134343936.roa (raw, json)
Hash identifier: fpmY8IEoge+aOmdTweLqfwRUV7jATVlK2NnG9ExPIYc=
Subject key identifier: 28:70:62:84:B4:10:73:20:FD:23:D4:1B:FE:75:65:DE:A6:2B:C1:19
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 56F0D05BBE0F885C2C22C0B013E30212EC59D347
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6636303a3a2f34342d3438203d3e20323134343936.roa
Signing time: Mon 22 Jul 2024 12:45:29 +0000
ROA not before: Mon 22 Jul 2024 12:40:29 +0000
ROA not after: Mon 21 Jul 2025 12:45:29 +0000
asID: 214496
IP address blocks: 2a14:7581:f60::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 03:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f0:d0:5b:be:0f:88:5c:2c:22:c0:b0:13:e3:02:12:ec:59:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 22 12:40:29 2024 GMT
Not After : Jul 21 12:45:29 2025 GMT
Subject: CN=28706284B4107320FD23D41BFE7565DEA62BC119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:75:5c:7f:42:07:8b:b8:78:40:5a:ac:42:
d6:a8:33:ea:d4:a7:3f:4a:38:8b:48:ff:84:89:30:
bb:0a:be:85:51:e8:20:6e:90:60:33:1c:9f:92:31:
1c:8f:f0:a5:32:9e:35:ff:6a:37:47:59:ce:1b:fe:
f8:14:cd:70:11:21:5e:c8:d6:30:d1:8c:41:72:83:
ee:16:fe:51:76:42:ed:92:cd:9e:b3:74:4b:2c:be:
c3:bf:c0:f7:ca:07:bc:16:29:3c:97:65:d2:af:3f:
44:5c:89:1f:3d:34:bc:c7:48:4d:73:90:68:78:4c:
e9:c3:f5:54:bd:a8:9d:f0:52:ec:d3:90:f7:d4:ea:
63:be:f5:61:fb:8e:0d:c7:d4:f0:ae:dc:0d:ce:9d:
8d:01:b3:b5:5f:b1:22:a3:2a:6b:c5:6b:5b:33:f1:
5f:7e:e7:07:00:18:38:ea:23:fb:72:a1:de:36:c7:
ee:c4:9f:62:13:27:d1:0b:63:3d:a0:7a:87:6e:b9:
6c:e8:b2:0a:70:f4:60:e2:ff:2f:e5:83:09:bf:26:
6b:77:fd:36:a5:a1:63:ef:77:c9:45:b8:1b:ed:08:
17:97:28:ed:81:d0:57:ab:6d:fc:be:a2:f0:1b:52:
84:1c:e8:5a:fc:eb:62:e7:d8:a0:f6:bb:77:69:e7:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:62:84:B4:10:73:20:FD:23:D4:1B:FE:75:65:DE:A6:2B:C1:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6636303a3a2f34342d3438203d3e20323134343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f60::/44
Signature Algorithm: sha256WithRSAEncryption
33:25:24:7d:21:de:a9:2b:95:63:95:46:88:c4:2e:1e:03:16:
6d:97:78:03:75:c8:ec:5d:ce:49:28:6e:11:0d:83:15:1e:17:
0b:99:97:0c:23:27:eb:3d:db:54:73:ee:04:41:5b:0c:b8:5b:
ce:98:4d:1a:bf:a6:79:8e:7a:13:7f:c7:33:9e:50:e1:96:36:
81:2c:0d:b0:51:dd:b7:03:58:41:7c:37:16:6e:48:a0:c0:af:
f4:4d:68:f4:02:7b:c3:2b:e8:8e:00:c0:52:43:37:62:b2:2a:
cb:7a:e7:00:a3:73:13:bb:46:c8:67:c7:90:ae:a6:ac:d9:52:
74:cd:cd:ff:73:ce:95:3c:e7:57:65:06:d9:f0:ce:13:9b:e6:
c6:d6:ad:29:97:1d:56:71:44:34:d9:20:e5:39:70:25:6d:4c:
07:57:c9:22:5b:95:b6:74:89:28:b0:d8:96:12:0c:fa:85:a6:
1d:09:45:32:c9:5e:25:9a:23:03:7f:ce:41:8f:7e:a4:03:9f:
76:42:f8:de:3f:ce:05:ac:c1:54:8c:52:a0:1a:e4:4d:ec:16:
5d:6b:f4:6b:0d:4d:d1:8d:21:38:12:7c:5f:a1:db:50:df:69:
5f:66:eb:43:0e:35:d1:6d:0b:9a:c9:df:78:85:3d:39:19:5f:
0d:16:2f:bd
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 30 04:40:55 2024 by rpki-client on console-fra.rpki-client.org