Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e20323134373733.roa
File: 326131343a373538363a3a2f33322d3438203d3e20323134373733.roa (raw, json)
Hash identifier: 5/5MyXzfEL3a8vWSRM4FsglRvzm3j5QSSK83edlWDvc=
Subject key identifier: 2B:B7:B2:15:DA:B6:98:57:01:A1:FD:2C:09:02:69:19:F0:B7:98:22
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0EFD069EFE9D516C4727BC580665A010174E64B6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e20323134373733.roa
Signing time: Sat 15 Jun 2024 03:53:45 +0000
ROA not before: Sat 15 Jun 2024 03:48:45 +0000
ROA not after: Sat 14 Jun 2025 03:53:45 +0000
asID: 214773
IP address blocks: 2a14:7586::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 21 Jul 2024 14:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fd:06:9e:fe:9d:51:6c:47:27:bc:58:06:65:a0:10:17:4e:64:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 15 03:48:45 2024 GMT
Not After : Jun 14 03:53:45 2025 GMT
Subject: CN=2BB7B215DAB6985701A1FD2C09026919F0B79822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:7f:d3:ba:92:30:2a:8b:a8:1b:99:21:66:
0d:a6:b0:0f:17:c3:25:cc:8b:cc:67:6a:9c:01:63:
22:1f:a2:b2:a8:4a:dc:6d:e7:d5:0c:2f:89:90:3e:
bc:1c:f5:9e:bc:5f:a4:84:18:1d:9a:2d:3f:7e:96:
0d:dc:30:29:9a:8d:d4:be:ea:24:82:59:78:bf:bb:
d4:7d:0a:ad:15:7d:a3:d5:d7:32:fe:b3:ef:4a:45:
96:25:90:a9:9a:8a:8e:12:90:c2:45:41:7f:31:bf:
c3:cd:89:d6:3e:70:3e:59:08:70:79:fd:5d:e6:84:
03:22:48:b1:38:62:29:fb:6c:88:6c:1b:7f:70:ae:
55:62:d8:b0:8f:93:df:1a:d6:74:2d:63:5a:f5:af:
42:1b:dd:64:d3:dd:6f:54:82:ff:f7:ba:40:f6:19:
52:d9:6f:f8:26:01:93:3a:9d:86:85:1f:a9:ee:40:
42:f4:f4:1f:18:69:df:d9:83:1b:06:5b:a8:52:0e:
55:b2:f6:b4:31:71:86:e4:15:60:8e:16:bb:cd:20:
0e:32:a5:35:12:69:14:33:2b:2b:3c:b5:7d:a2:4a:
c8:28:9f:10:9e:75:ab:95:59:a9:f3:f0:3b:7d:93:
ba:ba:7f:9f:29:0b:b5:c6:31:62:3d:fb:71:68:3b:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:B2:15:DA:B6:98:57:01:A1:FD:2C:09:02:69:19:F0:B7:98:22
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e20323134373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586::/32
Signature Algorithm: sha256WithRSAEncryption
8e:4b:c3:42:19:d0:24:16:0a:11:39:f0:be:82:dc:b5:d0:fe:
86:3d:59:d6:53:d3:4e:18:61:d0:59:fc:62:3a:75:16:35:6f:
1f:68:f5:b5:4c:ce:60:51:bb:b6:35:84:51:c0:b1:d4:c1:0c:
df:2c:ee:ff:f0:60:dd:ab:a6:88:e8:61:58:78:90:a8:1e:28:
a8:9b:6e:e0:32:e1:de:81:fc:e9:ea:99:f6:c1:12:6d:4b:6f:
d0:f2:de:d3:19:05:3b:0b:8a:90:79:b1:93:b1:2d:2d:9c:e5:
e7:5e:7c:f3:cd:5c:30:4c:68:11:6b:4b:06:ac:41:33:88:30:
f5:9b:41:68:62:95:91:85:b1:9d:dd:5b:24:c2:e1:08:7b:f1:
33:5e:d2:eb:80:00:ee:8c:87:b5:04:f6:2d:d6:91:78:2d:c1:
20:c8:5f:58:0f:73:47:23:63:b5:a1:7e:fd:5a:fb:4b:b9:96:
76:fd:cc:9a:1d:38:99:76:c3:b6:1d:e6:ba:49:f0:5e:74:ec:
a4:ab:1c:22:ee:3a:d0:fd:c7:29:32:6e:22:c9:c2:4b:16:0b:
c3:50:79:b2:68:44:d1:97:d0:ea:0f:b2:6a:ac:29:47:8f:ab:
82:0e:37:f3:7c:85:9d:72:1e:b2:44:9d:de:50:fb:be:fa:6d:
3e:1e:0a:16
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 21 17:33:53 2024 by rpki-client on console-fra.rpki-client.org