Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538353a3a2f33322d3438203d3e20323136333832.roa
File: 326131343a373538353a3a2f33322d3438203d3e20323136333832.roa (raw, json)
Hash identifier: g7gNZMwOQh7VZduhIaUv9zot2NsNbZkxGUaemsAo11Y=
Subject key identifier: 7C:94:54:8A:15:85:ED:9D:17:F5:67:7E:04:39:99:FE:52:7C:13:B3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3FFC3395D0B456C559FE19465E1BE8A9293392CF
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538353a3a2f33322d3438203d3e20323136333832.roa
Signing time: Sun 19 May 2024 14:25:33 +0000
ROA not before: Sun 19 May 2024 14:20:33 +0000
ROA not after: Sun 18 May 2025 14:25:33 +0000
asID: 216382
IP address blocks: 2a14:7585::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jul 2024 07:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fc:33:95:d0:b4:56:c5:59:fe:19:46:5e:1b:e8:a9:29:33:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 19 14:20:33 2024 GMT
Not After : May 18 14:25:33 2025 GMT
Subject: CN=7C94548A1585ED9D17F5677E043999FE527C13B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:2f:b1:51:1d:60:af:03:18:5b:d0:e1:6d:
cd:6c:df:79:8e:2d:63:cb:dd:34:f1:f4:16:0f:d4:
73:72:6b:eb:8e:91:43:d3:9d:b7:c3:e0:bf:52:fa:
b6:f3:53:ca:2c:94:16:fc:e4:a3:2b:c0:6f:2c:aa:
e1:d7:e2:4c:eb:88:2d:ed:bf:cc:50:3d:98:31:3a:
ac:3e:f5:da:89:a8:00:bf:9c:ba:10:e1:e5:61:0b:
ba:a6:43:bf:27:54:ca:2f:a7:bf:c0:10:df:c9:a6:
5d:ab:49:f0:ee:e8:81:4e:2f:0f:f9:f1:e4:e7:a9:
4d:a0:94:eb:d1:08:4e:f4:a4:9f:1e:19:c5:d3:3e:
35:57:51:31:3a:eb:ec:6b:05:b0:ef:eb:fc:96:c1:
19:9b:87:88:cb:75:b7:57:27:1a:f4:5f:8f:2e:b5:
27:30:7e:13:c8:c6:49:3d:df:4a:53:c0:b7:33:22:
37:f7:dd:52:ca:3e:6a:41:d4:4c:f7:81:ef:f6:f5:
c6:8c:d7:27:d9:05:13:c4:87:c1:50:b1:23:1c:8e:
ba:f0:eb:e7:1d:b3:5a:96:a8:e1:8a:8d:e9:ae:81:
32:a5:9d:a0:65:8f:66:4d:25:30:8a:2e:8f:31:3b:
b6:94:c7:1a:d3:32:28:39:14:ef:36:56:49:02:c5:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:54:8A:15:85:ED:9D:17:F5:67:7E:04:39:99:FE:52:7C:13:B3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538353a3a2f33322d3438203d3e20323136333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585::/32
Signature Algorithm: sha256WithRSAEncryption
90:bc:0b:a1:f7:8e:60:f1:04:92:2f:82:c3:6f:99:5b:91:8a:
18:47:2e:fa:75:99:69:1d:6f:8f:97:39:03:ba:83:68:bb:45:
90:14:d1:5b:2b:48:7e:cc:2a:7f:7c:a4:60:71:f2:d6:af:6e:
d0:15:91:cf:7c:31:17:60:a6:c4:99:cf:cf:76:e0:77:9a:41:
bb:1f:02:53:2d:09:ff:30:b6:f8:c7:4b:45:90:ef:93:71:17:
f2:e7:09:3a:6d:9b:33:1f:6f:3f:56:1f:84:22:27:56:0a:24:
ff:cf:07:45:d7:e6:0f:b7:e5:8b:4f:9b:b6:bb:37:b4:ef:d3:
b0:28:e4:57:8c:2e:f4:57:80:59:d3:6e:9b:0c:1b:91:90:5c:
a0:26:04:fa:c4:07:58:c7:54:67:b6:c9:70:2b:0b:cc:4d:a4:
e2:68:f7:d8:87:67:6a:9b:78:69:e5:32:15:9c:e1:f5:84:8b:
50:22:33:fe:48:ff:2c:5b:df:ea:f7:f1:e7:85:96:c2:bc:bd:
81:3b:86:97:c4:29:9a:c6:3c:c7:22:2b:81:92:2c:20:54:fd:
da:e3:2b:74:23:38:2c:be:3d:ef:5f:b6:de:56:c7:14:9c:fa:
a8:fb:6b:64:28:0c:e5:36:e6:d2:ae:c2:a4:64:c3:70:ff:7c:
b0:08:31:86
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 28 10:23:37 2024 by rpki-client on console-ams.rpki-client.org