Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34302d3430203d3e20323135393335.roa
File: 326131333a656534303a3330303a3a2f34302d3430203d3e20323135393335.roa (raw, json)
Hash identifier: OGXIk1R0vNWdY/P9oCVJhRRahsePCwYKpXzjIP7zOMU=
Subject key identifier: 11:CF:C8:0F:78:66:EB:EA:7B:11:CD:84:4B:77:33:E3:FA:7B:CB:4A
Certificate issuer: /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial: 7FCEDAFAD6F99B4A0EF1844C7AE6B4755D7F6569
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34302d3430203d3e20323135393335.roa
Signing time: Fri 01 Dec 2023 13:46:43 +0000
ROA not before: Fri 01 Dec 2023 13:41:43 +0000
ROA not after: Fri 29 Nov 2024 13:46:43 +0000
asID: 215935
IP address blocks: 2a13:ee40:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 23 Jan 2024 05:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ce:da:fa:d6:f9:9b:4a:0e:f1:84:4c:7a:e6:b4:75:5d:7f:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Validity
Not Before: Dec 1 13:41:43 2023 GMT
Not After : Nov 29 13:46:43 2024 GMT
Subject: CN=11CFC80F7866EBEA7B11CD844B7733E3FA7BCB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:21:4c:1c:e0:4c:48:1a:5c:1f:ad:9d:da:
63:5a:90:ff:b3:1b:ff:e4:6c:4b:b9:02:d1:07:8f:
20:f0:fe:df:87:d9:a6:c0:49:15:a6:26:95:f9:40:
3d:b7:5b:4d:ff:94:3c:ae:a1:14:ea:c1:6d:98:ba:
0d:fe:c0:03:e8:b8:4d:c8:06:4b:eb:0e:2b:41:20:
4c:d1:b0:64:6c:56:ca:5e:33:af:fa:54:65:95:8b:
c6:b0:81:73:50:04:c8:0b:81:5a:e6:d1:ec:2e:e9:
df:71:03:bb:b0:d7:5a:8e:24:90:2e:11:8d:d7:bd:
ca:9f:12:c6:56:f5:31:ae:f1:86:d1:a6:e8:1f:82:
b5:41:0c:7a:26:2c:df:95:57:45:fb:2f:48:8a:45:
74:a0:dc:92:63:b3:b0:2e:ef:28:24:9e:da:11:4e:
a5:54:d8:59:28:c8:02:04:75:a5:a7:c3:c0:5c:f7:
a9:5a:43:5e:04:ef:2f:99:63:8c:61:46:5f:b6:e3:
2f:66:ac:ee:c3:82:4f:8d:ca:9b:99:1a:30:1f:ad:
e1:99:f4:0b:fb:e5:6c:58:f2:ff:35:c2:eb:ce:d2:
7e:8e:a5:e5:b7:77:b9:71:5a:06:12:e0:fe:a9:11:
77:0e:c2:ad:cf:a9:45:da:ff:ee:ca:97:51:bf:e8:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:C8:0F:78:66:EB:EA:7B:11:CD:84:4B:77:33:E3:FA:7B:CB:4A
X509v3 Authority Key Identifier:
keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34302d3430203d3e20323135393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee40:300::/40
Signature Algorithm: sha256WithRSAEncryption
47:95:98:c4:f3:a2:38:28:cf:a5:7f:23:2b:3d:53:78:de:1c:
07:49:ff:83:e9:d8:fc:f3:fe:7c:31:46:cf:bc:ac:28:b6:f6:
12:6c:b8:ab:82:be:f8:94:8f:2e:92:3a:31:de:94:b2:85:81:
fb:cb:d4:f0:bd:85:a6:42:e6:5d:70:e5:be:2a:34:95:8c:de:
e3:b8:e2:36:a1:c0:b2:4b:ee:b5:66:c4:f4:e6:91:95:af:65:
ac:36:9a:c3:10:e3:16:9b:f0:75:63:07:79:74:51:78:84:8d:
76:bb:78:46:1a:41:74:56:5f:e4:7e:dd:bb:f2:f9:4d:de:9c:
f3:8c:48:54:5e:c9:88:aa:bf:8d:02:3c:ee:2d:42:09:c8:ed:
e7:7d:d5:db:1b:81:ef:e3:09:04:51:6a:d5:33:06:44:80:9a:
5a:d5:60:98:39:31:52:11:d4:b4:2d:84:65:5c:bf:5d:ae:33:
ca:21:b3:b4:8a:ff:ae:dc:27:26:5d:9c:0a:34:9d:08:03:d8:
24:84:df:45:ef:46:e4:39:a4:0e:05:90:25:70:f8:28:40:db:
f5:50:e2:6a:1f:e8:44:58:b9:7d:87:6c:25:22:04:ca:00:b0:
1d:57:b4:4f:08:7a:f8:c1:fd:de:d3:b5:91:5c:3c:0d:60:5b:
48:a5:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 06:49:13 2024 by rpki-client on console-fra.rpki-client.org