Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538373a3a2f33322d3438203d3e20323135373435.roa
File: 326131343a373538373a3a2f33322d3438203d3e20323135373435.roa (raw, json)
Hash identifier: NK3oD84t4+xQ9fkYpqIYGyNTVNd+PQsfzORUePNpNR4=
Subject key identifier: B9:B5:0A:E0:03:79:B0:1E:D3:84:78:92:70:2E:36:96:7B:D1:B3:F6
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 62BBC38448ACCE607F4FE6B2003D117E7CCB8AA9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538373a3a2f33322d3438203d3e20323135373435.roa
Signing time: Fri 12 Jul 2024 07:25:28 +0000
ROA not before: Fri 12 Jul 2024 07:20:28 +0000
ROA not after: Fri 11 Jul 2025 07:25:28 +0000
asID: 215745
IP address blocks: 2a14:7587::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jul 2024 04:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bb:c3:84:48:ac:ce:60:7f:4f:e6:b2:00:3d:11:7e:7c:cb:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 12 07:20:28 2024 GMT
Not After : Jul 11 07:25:28 2025 GMT
Subject: CN=B9B50AE00379B01ED3847892702E36967BD1B3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:ad:84:a0:8e:25:4f:37:2c:33:52:3b:89:
53:cc:dc:c6:6d:f4:24:6e:41:e6:70:4e:8f:36:b6:
5c:e6:c5:05:eb:28:2a:d2:25:ec:bf:a6:5d:5e:a8:
7d:8f:0b:d3:ce:cf:33:76:4a:13:c9:34:50:01:ea:
e7:f3:f4:5e:8f:50:bf:79:fb:ed:de:16:bf:14:77:
c8:01:01:63:a2:79:8d:a6:7a:0c:95:fb:f9:ba:77:
f1:23:f0:55:a2:70:27:0c:db:7b:65:04:43:63:3a:
7b:9a:02:ac:3d:7d:e2:99:37:a4:e9:b8:1b:51:26:
cc:ba:dc:33:a2:6a:28:49:63:b2:57:43:a5:a6:c7:
c7:6e:31:2d:e7:c9:1c:e1:ff:d4:d8:05:74:05:39:
be:fc:2d:ad:d1:c2:40:2b:95:ed:4b:56:4a:39:a7:
25:29:6b:d4:65:42:43:43:c4:ff:02:5d:f4:b4:50:
e3:a7:d9:d1:cd:4c:c9:65:e5:7c:63:35:8c:ff:61:
91:76:c8:55:83:a5:c9:be:a1:46:9c:49:de:38:69:
82:e1:1e:b5:66:90:90:06:1b:22:8e:f9:0a:b1:b7:
7a:05:91:d1:4b:94:7b:d5:fe:63:5a:ab:19:2a:b8:
0c:1f:cc:57:96:79:1b:7b:5b:d7:8a:8e:92:9f:74:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B5:0A:E0:03:79:B0:1E:D3:84:78:92:70:2E:36:96:7B:D1:B3:F6
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538373a3a2f33322d3438203d3e20323135373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
02:d3:28:71:07:b0:53:97:7c:5a:94:88:56:36:b6:33:38:45:
c8:3c:31:d6:38:59:2c:a6:5c:a2:46:9e:c4:56:18:93:03:51:
b8:42:77:46:4a:db:d2:11:83:9a:ad:e0:78:bb:41:9a:72:50:
e4:4c:ad:e6:dd:cb:fd:16:95:ee:10:bf:5b:1a:09:a5:90:dc:
dd:4c:43:f5:7c:2a:3a:ed:04:ea:b4:5c:b0:00:ee:56:5c:67:
5f:45:e4:8a:41:72:bc:7f:d2:03:70:61:44:0b:43:fe:4e:74:
40:05:ef:7a:57:a9:bc:c3:cd:01:3a:d2:ef:86:58:b2:58:69:
a8:38:f1:f8:86:d7:5f:a1:b5:1f:a2:86:06:3e:9b:d8:4e:5f:
9b:81:0f:23:27:52:00:13:14:6f:c5:86:d3:39:67:80:8a:00:
8e:ca:59:02:90:8a:1a:35:ba:34:da:f7:1b:b3:b4:e2:48:b3:
09:2b:0e:47:b6:6e:ae:6a:9b:1d:34:f0:0b:b5:42:7e:c3:c7:
5f:63:f8:ad:40:62:e5:2e:19:f5:00:90:1a:47:b1:b0:a0:31:
83:89:c9:2b:46:30:23:15:9d:3d:61:5e:51:cf:4a:b4:aa:6f:
37:d6:23:60:83:6e:3c:72:33:aa:d5:d2:51:1d:52:f4:45:fe:
f3:c4:5a:30
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 17 06:41:59 2024 by rpki-client on console-ams.rpki-client.org