Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34382d3438203d3e20323135393335.roa
File: 326131333a656534303a3330303a3a2f34382d3438203d3e20323135393335.roa (raw, json)
Hash identifier: QFy9Fz1Iu1RGmiLdlqYARqTZC1MuyEWPvydlF60d+8I=
Subject key identifier: 1F:5C:FD:E2:91:5E:C6:0D:94:AB:78:BD:A6:3A:D1:9A:97:26:2D:72
Certificate issuer: /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial: 76544205325816899C33AED10B1A1E434AD46516
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34382d3438203d3e20323135393335.roa
Signing time: Fri 01 Dec 2023 13:55:19 +0000
ROA not before: Fri 01 Dec 2023 13:50:19 +0000
ROA not after: Fri 29 Nov 2024 13:55:19 +0000
asID: 215935
IP address blocks: 2a13:ee40:300::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Jan 2024 05:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:54:42:05:32:58:16:89:9c:33:ae:d1:0b:1a:1e:43:4a:d4:65:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Validity
Not Before: Dec 1 13:50:19 2023 GMT
Not After : Nov 29 13:55:19 2024 GMT
Subject: CN=1F5CFDE2915EC60D94AB78BDA63AD19A97262D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:11:c9:87:d3:df:61:5f:28:46:20:ed:81:
2e:4b:e1:06:cc:06:cc:ed:a1:1c:c3:74:b2:1e:aa:
53:96:49:2c:50:3a:80:c3:bb:ac:e1:ab:59:62:40:
01:e6:86:14:0d:8d:ce:15:e7:a8:be:b2:98:d6:8a:
46:3b:7c:47:3d:b3:b7:f9:5f:4f:dc:09:e0:73:9d:
a5:e3:f5:2d:79:e3:1e:96:35:f3:23:4b:e2:0f:c8:
31:27:0b:f7:65:2d:cf:9d:37:bf:d0:be:a3:f1:83:
bd:72:a2:12:04:94:f2:40:69:1a:a8:23:b7:6c:ff:
0a:6c:d1:62:cf:7d:d9:50:62:f2:a3:18:f0:bb:ee:
ef:5e:c7:7b:a5:03:6d:cd:ac:22:c9:2d:b2:a8:d4:
dc:74:66:de:6a:10:ed:cb:d8:59:da:ec:c4:99:41:
4e:04:d6:08:a8:d4:a9:47:f3:b9:f1:3f:87:a3:ef:
69:f0:2e:92:10:75:b2:91:81:fe:e1:34:8a:08:0c:
ea:6e:70:d1:8d:ec:5f:72:96:a2:f1:09:a7:90:c2:
0f:f5:de:25:03:5d:42:f5:3b:16:4a:11:cd:2c:a9:
f4:94:d6:a1:36:20:bf:22:14:1b:62:4e:ff:1d:d8:
d6:77:e4:29:1e:a6:f0:b7:50:3c:dc:3f:e7:af:a8:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:FD:E2:91:5E:C6:0D:94:AB:78:BD:A6:3A:D1:9A:97:26:2D:72
X509v3 Authority Key Identifier:
keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3330303a3a2f34382d3438203d3e20323135393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee40:300::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c1:ab:a3:6b:f2:6b:77:c9:8b:30:a0:79:19:2e:ff:41:41:
f7:f9:1d:56:00:a1:da:68:34:5f:dc:c0:50:65:00:0b:2f:36:
59:14:f1:ec:96:a2:a0:91:36:a1:32:09:8a:9c:38:13:c8:b9:
99:17:2d:4f:02:3a:9d:d2:e8:5c:09:e4:90:cb:ec:3f:ad:11:
29:44:e7:c0:99:87:9e:44:23:ea:8d:1b:f4:e3:d2:66:16:2d:
56:bd:53:33:04:e2:49:be:1c:87:6d:89:67:b8:28:39:e5:6a:
a2:b3:64:e3:bd:da:84:35:a4:6a:c4:75:13:3d:ec:71:94:29:
ba:6f:7f:a1:16:0e:d0:cd:cf:c8:4c:82:a5:f1:d7:4e:61:e5:
3e:35:f0:a8:cd:5c:da:44:74:05:7a:b9:45:1c:f7:d0:10:15:
e9:83:00:e2:0f:0d:79:9a:27:04:a4:2b:2a:35:95:58:7a:75:
aa:dd:9e:fd:06:51:fa:06:a5:d8:ff:b6:5e:c4:c0:7b:9a:29:
b3:53:ca:fa:83:6c:40:ee:f2:3b:35:7f:38:b2:6a:e4:db:48:
9e:3a:e3:8f:57:63:41:cc:d9:73:d7:a6:1c:b9:05:ea:c4:29:
b0:b3:5b:0b:5b:f7:ad:c1:96:15:8d:02:c9:e0:fa:ed:60:68:
ed:c0:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 06:52:48 2024 by rpki-client on console-ams.rpki-client.org