Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538333a3a2f33322d3438203d3e20323134343831.roa
File: 326131343a373538333a3a2f33322d3438203d3e20323134343831.roa (raw, json)
Hash identifier: oXqMaEHgZbPwmwMIZAzKg+FoK8+SNoFD6VljjcSc4rs=
Subject key identifier: F3:CA:0D:ED:B4:97:10:37:0A:36:5D:38:62:8E:1A:3B:69:C5:4C:E8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4B425F9B82550A2CFF0B7710698C39A0CB52EDF7
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538333a3a2f33322d3438203d3e20323134343831.roa
Signing time: Fri 29 Nov 2024 14:49:25 +0000
ROA not before: Fri 29 Nov 2024 14:44:25 +0000
ROA not after: Fri 28 Nov 2025 14:49:25 +0000
asID: 214481
IP address blocks: 2a14:7583::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 13:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:42:5f:9b:82:55:0a:2c:ff:0b:77:10:69:8c:39:a0:cb:52:ed:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 29 14:44:25 2024 GMT
Not After : Nov 28 14:49:25 2025 GMT
Subject: CN=F3CA0DEDB49710370A365D38628E1A3B69C54CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:b1:2c:cc:07:fe:9b:e4:c7:73:63:15:37:
cf:c7:e1:a1:69:3d:1f:f6:71:8e:0b:8d:e0:f8:0b:
53:64:4c:de:e7:61:e0:a0:e1:d2:e1:0e:55:f9:df:
a8:1d:a7:44:de:51:8e:d7:51:64:ff:8d:5c:0b:b0:
46:ab:cb:16:67:53:23:a0:4d:12:b4:35:7d:70:d0:
b0:d6:26:45:39:c9:25:2f:ff:39:9a:9d:1d:2a:a2:
19:c4:41:19:5a:b8:78:96:25:9b:35:d8:a9:a7:87:
b4:0b:64:e3:2d:ac:be:10:ca:12:f5:67:29:67:66:
f4:14:71:87:36:21:b5:92:82:1e:e1:13:b5:1e:f6:
a8:5a:04:fb:a9:19:b4:76:06:12:73:72:bd:de:43:
36:aa:26:55:90:3a:f8:d4:ee:f6:16:f9:94:51:a7:
d9:7b:32:1d:4e:51:c9:41:2d:a5:49:0f:bc:79:89:
26:1b:79:89:24:07:01:5f:be:c2:f5:22:ec:8a:2c:
54:95:ba:1f:fc:25:9b:9d:62:67:ea:70:7f:38:e5:
8d:23:f5:d6:ec:21:00:d1:1b:4e:d9:a8:58:ae:ef:
fc:23:29:7d:eb:e1:d2:ba:ab:05:0b:4b:4e:e5:9f:
93:ee:33:45:1c:f8:14:08:9b:0f:5c:d7:8f:ac:14:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:0D:ED:B4:97:10:37:0A:36:5D:38:62:8E:1A:3B:69:C5:4C:E8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538333a3a2f33322d3438203d3e20323134343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583::/32
Signature Algorithm: sha256WithRSAEncryption
76:42:67:cd:96:ac:77:f0:fc:12:a1:2b:57:7e:e2:9b:cf:f0:
08:3a:36:38:93:ba:c0:1c:19:b1:74:ce:6f:04:81:75:dc:31:
43:a8:ee:5f:f3:9b:3d:bd:e6:15:84:21:bb:71:d1:af:0e:6b:
07:e4:64:fa:44:aa:de:59:56:f5:45:2b:b2:fe:71:38:35:6e:
67:17:5a:92:33:ba:df:5c:9d:73:ce:26:ca:58:45:59:e1:0a:
50:cc:2b:d4:98:19:ee:3f:96:b6:c4:17:d4:79:09:fb:17:8e:
b0:11:0e:fa:f0:ff:db:41:0b:8d:a8:a1:fa:6f:bc:32:c7:de:
a9:42:ad:a0:6b:19:f3:b8:9b:04:95:8c:37:cd:46:c3:59:be:
b2:77:7b:03:38:03:c1:64:f5:36:44:0d:5e:f3:48:9c:00:20:
c3:51:ff:04:93:98:3a:24:0e:38:5b:af:1a:17:50:62:a0:88:
67:e8:87:98:fa:b3:c6:1d:57:48:07:ee:01:f9:0c:a5:a7:fa:
2a:d0:39:bd:3e:94:92:f9:4b:cf:e7:ce:77:83:6e:52:05:44:
92:65:f3:9e:e6:96:e4:d3:3a:b1:15:19:04:5a:c9:7f:15:4d:
57:aa:e2:12:1d:30:29:37:9d:fc:1c:06:f1:ab:2c:d5:73:61:
f7:c3:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:43 2025 by rpki-client