Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa
File: 326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa (raw, json)
Hash identifier: SDGFWvdjwoQDV5sjUu9wcCdgV8Ue9K9EafE6PeuXcDg=
Subject key identifier: F4:D3:B0:7D:55:C1:46:13:2C:CA:DC:A1:BD:3B:88:98:E5:CF:47:68
Certificate issuer: /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Certificate serial: 755F6A8E729C80FE49927DBBAB7C427EEEC40B90
Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa
Signing time: Mon 09 Sep 2024 19:52:23 +0000
ROA not before: Mon 09 Sep 2024 19:47:23 +0000
ROA not after: Mon 08 Sep 2025 19:52:23 +0000
asID: 214312
IP address blocks: 2a09:54c6:e000::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:6a:8e:72:9c:80:fe:49:92:7d:bb:ab:7c:42:7e:ee:c4:0b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40
Validity
Not Before: Sep 9 19:47:23 2024 GMT
Not After : Sep 8 19:52:23 2025 GMT
Subject: CN=F4D3B07D55C146132CCADCA1BD3B8898E5CF4768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:69:b3:b0:19:99:02:a9:e5:b1:35:c4:90:
b2:60:f5:83:c6:95:26:aa:46:d3:70:4e:6f:8f:3c:
20:46:53:a3:b7:1f:db:d3:90:bd:98:3b:d3:57:2f:
95:20:7d:5b:42:18:b4:62:06:03:b1:12:89:75:4a:
4d:50:11:c1:8a:dd:bf:4c:5b:a7:f5:74:b5:2b:dd:
dc:8d:aa:71:46:c7:93:16:f3:6c:a9:be:43:20:03:
28:6f:b1:7c:51:d9:b5:11:13:f7:5a:a9:e3:2b:f7:
93:08:2c:38:70:4f:d9:59:46:c2:ec:53:5b:75:d6:
d3:e7:c8:6c:3f:58:ed:d1:00:08:46:12:56:63:30:
4b:a3:b7:2d:f0:ba:df:45:b5:66:b2:54:4b:a0:43:
b6:c9:6f:e3:9b:47:2c:e8:2d:cc:e1:d9:02:56:2f:
3a:87:33:18:4c:19:32:0f:89:01:cb:1d:b7:ef:1d:
51:0b:83:e5:3c:63:4a:0b:91:d6:13:1e:f1:22:a6:
7d:ef:14:cb:f0:05:4a:a3:f3:ff:29:91:08:a4:8a:
f9:55:ba:78:78:f0:8e:e0:c9:b0:4c:82:c2:34:95:
59:4b:ec:51:6b:b2:7a:6a:c6:a8:ed:d6:86:8f:e0:
8b:de:d5:d8:e8:a8:71:60:31:e0:71:68:89:85:5a:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:B0:7D:55:C1:46:13:2C:CA:DC:A1:BD:3B:88:98:E5:CF:47:68
X509v3 Authority Key Identifier:
keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:e000::/44
Signature Algorithm: sha256WithRSAEncryption
5c:b9:39:b0:5e:ba:17:2b:28:58:9e:10:63:4f:8f:91:e3:5b:
4f:11:cf:d5:09:6e:18:7d:d6:4d:d0:a5:30:7d:30:ac:a9:88:
93:af:40:c0:15:ff:23:fb:3a:51:60:35:7f:ff:f1:39:5b:20:
eb:b7:45:67:d7:63:c5:e9:9d:dc:1a:8b:24:7f:ec:22:63:7b:
cd:df:cb:b8:4d:60:cc:c1:ce:5f:3d:07:82:bf:9e:5e:b8:35:
f2:31:4b:32:64:0d:dd:17:54:bb:76:f7:b1:f3:6f:25:93:bb:
14:6b:81:f9:9c:80:c5:a0:0d:03:b4:30:5e:d8:85:3a:b2:30:
96:b1:a6:1a:9e:8b:dd:e6:00:f4:bc:4c:b2:c5:3f:e3:19:27:
78:05:88:6e:c4:1d:03:2c:78:ff:b2:a9:f2:c3:ea:77:b1:e1:
3e:5f:27:89:a5:b8:c5:96:7a:61:cb:9d:10:97:af:66:c3:56:
2b:b5:5c:6d:e7:92:ec:66:f9:7c:13:30:e7:b7:d6:de:a7:c7:
ba:f2:2c:90:40:a8:23:b7:15:cb:87:de:4d:84:f1:c2:98:7a:
d5:73:bf:eb:45:4d:91:4b:48:b7:b0:19:c6:36:00:50:48:5c:
8e:ad:5a:e1:82:c6:9c:cf:1e:76:97:b8:37:7d:20:a6:8b:02:
00:78:51:65
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 7 20:37:58 2024 by rpki-client on console-fra.rpki-client.org